Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
File: dxPzWC9jkBMFUwtLGTbNbmYRowo.mft (raw, json)
Hash identifier: OdCGE+28dvCm5aOsetWCLSMtihzigYIf6KYhBxi2sVM=
Subject key identifier: 83:C5:90:57:89:F2:D1:37:BE:AC:1F:1D:39:76:44:77:FA:DF:44:D6
Authority key identifier: 77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
Certificate issuer: /CN=7713f3582f63901305530b4b1936cd6e6611a30a
Certificate serial: 0198D4E0369485631759687883D2B989F1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
Manifest number: 044A
Signing time: Sat 23 Aug 2025 03:02:00 +0000
Manifest this update: Sat 23 Aug 2025 03:02:00 +0000
Manifest next update: Sun 24 Aug 2025 03:02:00 +0000
Files and hashes: 1: QBpayCeedHorPlMUrxP80cZpQMk.roa (hash: OQ5xE2z8NMteCC4WWbezxTDqjx0MzAo+K4Av2s6co/8=)
2: dxPzWC9jkBMFUwtLGTbNbmYRowo.crl (hash: w9SUl8Y6BemgHaR0sJ4XAXx8HO5wljjQ5DbJ98k7UCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:36:94:85:63:17:59:68:78:83:d2:b9:89:f1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7713f3582f63901305530b4b1936cd6e6611a30a
Validity
Not Before: Aug 23 03:02:00 2025 GMT
Not After : Aug 24 03:02:00 2025 GMT
Subject: CN=83c5905789f2d137beac1f1d39764477fadf44d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:79:37:71:81:e7:c0:e0:22:79:e2:7e:7a:
85:ad:39:66:5e:e4:d7:33:91:96:86:49:6e:04:a2:
60:03:78:fe:b2:c7:fc:85:f4:0d:de:d9:f7:57:99:
cd:f3:c9:59:00:1f:be:6b:84:7b:0c:fe:e3:4a:61:
1e:07:92:9e:55:59:c5:fe:b4:f9:ee:90:ef:12:bc:
31:d1:df:85:34:a1:a4:d1:84:72:ee:9b:1a:e6:dd:
ea:a6:ba:0d:40:f4:cc:f7:0c:2b:91:4f:3a:47:59:
58:99:37:b3:64:a0:34:77:d9:df:7d:45:7a:b3:4f:
05:92:5c:26:7e:3a:f0:3e:9c:3b:5f:eb:21:7d:fe:
c7:e3:9b:b8:bb:90:4b:a6:80:f6:83:ca:0c:2e:f8:
e2:be:e2:50:d3:72:e5:67:a3:2f:43:33:cd:21:61:
aa:9a:cc:d4:bb:30:06:23:34:49:8f:1e:11:f8:de:
b1:55:2f:e7:d1:ba:b6:35:ba:45:98:06:ce:03:5a:
89:72:be:e2:99:10:00:ab:d9:fa:c6:66:7a:86:b1:
fc:f0:3d:6c:8e:8d:97:cf:4f:67:9f:3d:29:ab:bf:
c0:41:86:16:4c:17:96:c3:7d:20:e4:e7:1d:06:a6:
71:a0:d3:bd:33:a7:2a:93:f0:02:78:02:34:ce:68:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C5:90:57:89:F2:D1:37:BE:AC:1F:1D:39:76:44:77:FA:DF:44:D6
X509v3 Authority Key Identifier:
keyid:77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:de:4a:02:4f:56:9f:51:a0:21:2c:0f:b0:78:44:97:58:1e:
af:de:5e:f8:49:a4:76:12:a9:d5:2a:d1:6d:1a:12:7f:1c:c5:
b1:ab:8a:f0:63:72:be:64:05:fd:95:de:b2:46:6e:66:ef:87:
41:ce:23:09:84:5f:d9:20:10:04:9e:bd:c6:43:bb:da:eb:86:
43:2f:50:25:73:30:76:04:0e:b6:4d:d7:11:29:19:23:26:bc:
6a:8c:2d:4f:20:c9:40:97:ec:0e:bd:8b:e4:57:16:6a:65:e2:
4e:8f:29:c4:7d:3c:94:bf:f5:7e:18:19:95:d6:00:8d:c0:c8:
f2:e8:57:9b:56:1c:24:a2:5a:9e:84:a8:82:96:7e:78:ee:f8:
79:e8:f8:56:b1:de:f1:ef:0e:0a:2b:8e:1f:8e:67:50:fa:88:
f8:61:fb:f1:21:27:e1:a4:b6:77:b1:10:3d:1d:13:30:77:0f:
56:c3:5c:b9:50:41:ea:bc:55:ae:4b:2a:cd:34:8a:18:db:59:
f6:c1:af:61:5d:26:81:bb:fb:dc:7a:83:98:da:8f:72:92:ff:
8e:c3:a2:c8:f3:46:57:4a:df:f6:ca:8e:ee:c5:d0:31:f1:78:
79:1b:c2:09:35:10:6a:12:e0:1a:3d:48:96:d0:fe:a2:e8:a9:
3b:bd:e1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:23 2025 by rpki-client