Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
File: dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft (raw, json)
Hash identifier: UhcBlqZmADBRufwALT7cd2o2BUGIZo1rUqDgrTj+BcA=
Subject key identifier: 40:F7:E5:3F:A6:61:6A:27:2D:40:6B:E4:B1:8E:74:19:69:81:53:05
Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
Certificate issuer: /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Certificate serial: 0198D5F1912D112316CB520C2F875837FE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: ITU9N73wNSwtRlo0RIBRFcqyI18.roa (hash: tZ8waA6UjAXlSU4mKy5eCZ0yrObYCvk+4Q5dVUfAZCs=)
2: dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl (hash: J5aaVKGuINQDBaN5ft+YivY7WlcUWVPOFSV3wTMdFE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:91:2d:11:23:16:cb:52:0c:2f:87:58:37:fe:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=40f7e53fa6616a272d406be4b18e741969815305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:cd:b1:c6:e5:16:cc:ac:98:0e:4b:c2:23:
08:79:74:c4:70:ab:99:5b:04:10:e6:54:b8:76:9d:
c3:6d:c2:78:39:85:6c:d4:82:58:26:05:75:c4:18:
97:19:1a:e6:5b:ee:2d:5d:51:94:97:a1:bc:98:c4:
73:1d:29:05:f1:74:7e:ad:97:92:83:b1:30:17:30:
43:8e:c6:6b:48:ac:dc:ca:6a:b5:d5:c1:d0:e8:81:
b6:a5:79:b9:d5:c4:eb:4a:43:59:de:69:47:2c:41:
e5:16:1a:9b:f3:e1:31:3b:40:39:78:64:61:86:0e:
95:f4:bf:1a:77:63:bb:73:33:b1:2d:4e:b1:39:e3:
81:f0:54:a2:62:85:cc:8f:9a:87:54:3b:e0:a1:86:
f4:23:e7:d0:58:97:2a:c8:a8:52:69:0e:c4:de:09:
ac:92:67:d7:6a:86:31:ae:dd:54:79:b1:b6:1d:17:
2a:8b:0a:ae:cc:e1:11:7b:f8:cd:2a:50:12:3f:c1:
75:df:4a:5f:50:82:3d:c9:54:2c:0e:56:c4:75:55:
85:66:fe:5a:dc:47:c5:75:69:e5:fd:b6:48:d5:06:
96:0b:f1:a8:7f:8a:b4:6d:bd:b8:ae:ea:d5:aa:9b:
56:67:72:29:09:6f:fa:6d:df:b5:16:cf:be:9d:71:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F7:E5:3F:A6:61:6A:27:2D:40:6B:E4:B1:8E:74:19:69:81:53:05
X509v3 Authority Key Identifier:
keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ff:63:3b:e1:5c:f9:8c:d5:0e:dc:a3:5e:cc:67:ca:70:a2:
9d:29:2c:a6:05:c7:6d:19:b9:f4:00:71:9d:5a:cb:91:97:79:
92:d0:30:49:8b:14:68:30:30:81:94:e9:ea:6b:87:80:9f:b2:
02:25:77:d1:49:9d:0e:10:44:7d:49:a8:2d:fe:d4:0c:fb:47:
af:ed:c0:d3:b6:c4:53:ca:1d:d5:42:a3:6b:1a:6f:c9:8d:77:
11:1d:ff:22:03:ec:32:eb:e9:8f:69:f8:2a:a7:84:cc:e1:da:
04:41:8d:32:da:09:85:82:2e:42:46:e4:bc:08:ca:be:ec:7c:
db:e1:1a:3f:d8:b0:92:3a:24:36:e2:a8:73:f1:2f:9d:91:7d:
4c:c9:87:7f:5b:5d:78:6e:30:25:50:c0:60:33:a0:75:b1:01:
60:c4:35:f1:20:37:da:58:c4:11:d6:c0:08:e0:98:a9:94:5c:
41:6d:ff:62:66:b8:fe:86:df:10:31:ab:f5:2f:d4:8c:dc:cf:
3c:3f:0c:d2:fb:ce:c3:e2:91:61:7c:16:05:dd:fe:06:93:c0:
90:84:15:ae:7b:5f:61:12:e1:7d:1f:63:46:fc:ee:21:88:15:
71:51:35:50:cc:a7:7e:c1:03:90:6a:68:6a:a9:87:c3:3c:b5:
5e:06:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:33 2025 by rpki-client