Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
File: dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json)
Hash identifier: /O1UC3XS91qxzV+uWppP1FPxqNdsYadQt5gZz8yBm7E=
Subject key identifier: 36:74:94:9F:C5:9D:A8:2C:B1:33:14:B0:E5:20:73:2D:CF:01:8B:CF
Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Certificate issuer: /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Certificate serial: 0198D5157B14261D70C402BDA041EA4FE1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
Manifest number: 10D8
Signing time: Sat 23 Aug 2025 04:00:11 +0000
Manifest this update: Sat 23 Aug 2025 04:00:11 +0000
Manifest next update: Sun 24 Aug 2025 04:00:11 +0000
Files and hashes: 1: 2bqsQsJql_hwoFMeZ0nmgZGmbEw.roa (hash: e5rzAihzL4LX4PAPTH0rwfwcZpBTQn6I0oUQG0cd6f8=)
2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: gv9oil7SiiCwqasYSGWYAKb7GtXA31q5OALE+DP1EQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7b:14:26:1d:70:c4:02:bd:a0:41:ea:4f:e1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Validity
Not Before: Aug 23 04:00:11 2025 GMT
Not After : Aug 24 04:00:11 2025 GMT
Subject: CN=3674949fc59da82cb13314b0e520732dcf018bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:62:05:4b:b3:0c:df:52:2e:62:13:61:3c:
6d:3b:a8:e3:3f:2a:b7:b9:ab:bf:60:b0:53:20:f6:
a9:79:d6:f0:be:fd:f3:e3:61:b5:36:61:df:ad:e2:
d7:48:21:43:9c:07:48:fa:aa:cf:61:f5:e3:41:e6:
de:26:08:40:fa:3f:2b:24:68:e7:a0:94:f8:15:7d:
94:92:5e:79:f5:14:86:ac:52:77:4f:10:01:c4:bc:
12:30:5b:f7:73:44:eb:75:96:48:46:af:26:cf:02:
10:53:f4:25:ae:f6:a2:ce:f2:ab:16:ab:f7:65:61:
a6:39:c2:9f:12:f2:2c:8a:45:6c:e8:92:fa:50:97:
37:95:ed:f7:b0:84:b6:b4:98:06:26:86:b1:d6:01:
58:6d:85:85:06:8a:0d:ce:11:26:a7:c4:82:ab:06:
6d:b6:ad:5f:2a:95:f7:c0:1c:df:dd:c9:5b:4f:a7:
64:81:f6:66:24:b3:53:b1:26:a7:6a:7f:c0:19:35:
f0:fe:c4:8b:4e:1e:d7:26:ce:30:df:a0:a7:d8:05:
40:e2:ed:cb:5a:ea:1d:db:5f:98:78:3d:14:0c:76:
c8:5b:b7:ba:e2:98:60:89:84:65:75:b3:a2:3d:e9:
e8:b5:01:e9:9d:1a:4b:c5:95:e0:4f:aa:bb:a4:e9:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:74:94:9F:C5:9D:A8:2C:B1:33:14:B0:E5:20:73:2D:CF:01:8B:CF
X509v3 Authority Key Identifier:
keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e6:78:e0:db:42:d8:4f:ee:dd:bf:85:07:83:15:f1:ae:53:
fd:27:7d:41:a1:02:c4:1d:4b:93:27:1e:e0:0c:7a:64:c2:94:
d6:6e:75:5b:02:78:94:ee:16:69:5f:b6:28:eb:14:0e:59:8f:
ac:78:4f:43:97:82:6c:5c:a8:dd:13:5d:7e:08:d1:fd:2e:60:
5d:2a:b2:07:2d:25:75:20:64:aa:3e:9a:32:ff:e0:09:cf:45:
3e:a2:a1:ea:2b:d0:24:77:0d:27:6a:2d:a7:76:a9:5a:c3:83:
4e:8a:a1:4c:9b:df:d9:95:94:f4:b5:f2:18:4d:ea:78:7e:ea:
4c:e8:6d:fc:60:9b:e4:9a:74:7a:07:d1:c4:22:c7:3c:a0:31:
ad:46:b7:f4:5b:bc:ec:a8:32:bd:1e:97:f2:e7:9d:82:0f:e7:
48:fa:58:47:b9:6d:11:d7:f1:97:78:8d:41:a1:ea:07:c6:81:
d2:e6:81:fe:b3:10:8f:af:03:79:fb:6e:28:63:47:36:ba:63:
1a:b7:50:2f:bd:98:74:20:29:d0:ab:f8:dd:c8:de:04:fe:f9:
1b:e4:a5:94:d9:db:fe:61:f6:50:b1:0a:bb:dd:61:a5:43:91:
2b:1a:a1:61:59:67:b5:e9:cf:ce:56:ae:6e:3c:c1:ba:14:c2:
9a:73:f3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:35 2025 by rpki-client