Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier: oEqmIv4Cl6HGaw7doUil0U78hkp3iaY1D6oyGTZ275I=
Subject key identifier: 96:9E:F8:23:1A:19:E7:FA:D8:CE:74:E7:7F:A3:47:EC:66:D5:95:C9
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial: 0199FCFD6B033756DD0176CCAE5CE25203C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number: 032B
Signing time: Sun 19 Oct 2025 15:01:30 +0000
Manifest this update: Sun 19 Oct 2025 15:01:30 +0000
Manifest next update: Mon 20 Oct 2025 15:01:30 +0000
Files and hashes: 1: 7-iGt4e7trCrvhjbqw5ailuotG8.roa (hash: cy0FH1gqtKBfDPhq2ot6+GUFGCM2/G1KgLpKIId8UGA=)
2: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: i1hbKpc9h08YNmGXB7OczvNPAcY441cGJgsWoufW9ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6b:03:37:56:dd:01:76:cc:ae:5c:e2:52:03:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
Validity
Not Before: Oct 19 15:01:30 2025 GMT
Not After : Oct 20 15:01:30 2025 GMT
Subject: CN=969ef8231a19e7fad8ce74e77fa347ec66d595c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:56:e7:62:c5:ac:47:55:ab:00:3e:89:5d:
d0:ab:78:f7:eb:22:bf:8d:51:82:d2:85:5b:b3:bf:
c5:0b:8f:93:a3:9b:5f:7b:b0:14:3e:33:77:49:67:
4b:00:b0:72:d5:7a:3b:c8:79:26:c9:8e:e8:a2:4c:
fc:06:78:be:ff:bf:a3:58:d8:98:6e:6d:99:7c:7f:
84:4a:31:63:40:29:62:11:ed:8a:e6:93:d1:ab:55:
46:76:7f:9f:1f:d8:4c:33:ef:bb:74:3d:66:06:ef:
1e:a6:b1:df:aa:1f:a0:51:90:f6:71:15:9c:73:e9:
24:14:5a:10:0c:b3:ef:f8:f5:e0:71:f3:39:38:05:
da:84:46:1b:f8:d2:ce:13:ce:05:15:78:06:f0:d6:
8e:03:20:8d:10:a7:4c:bc:21:d6:ae:8a:12:d7:71:
89:5f:c5:57:ed:51:59:70:8d:8f:30:19:7b:03:cc:
4a:71:31:0c:39:f1:75:c1:ff:cf:a0:a8:ad:01:29:
67:1e:29:12:3d:8f:e4:de:50:65:71:fd:f7:00:e8:
73:2e:43:22:20:16:47:1f:f9:8a:8f:83:fc:d0:12:
a2:7c:7e:12:ab:59:e6:14:25:2e:b6:c5:1c:d4:ca:
9c:4b:81:27:a7:7f:18:44:54:74:0f:a5:26:52:41:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9E:F8:23:1A:19:E7:FA:D8:CE:74:E7:7F:A3:47:EC:66:D5:95:C9
X509v3 Authority Key Identifier:
keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:29:39:ee:32:9d:f9:4f:46:72:99:69:64:5c:46:eb:59:37:
06:82:70:88:c6:02:eb:9a:48:ee:04:d9:1e:e1:13:ea:07:8a:
43:b0:8f:31:70:03:d4:fa:85:c5:31:10:4a:0c:e5:d2:5f:83:
99:89:68:11:71:8c:09:56:cc:26:d2:d2:a3:05:3d:f5:c4:ae:
7c:e7:c0:f7:7a:10:f2:48:e7:32:89:da:cb:d2:6a:cc:f2:a7:
19:75:1a:ed:ee:ec:bf:79:10:2d:be:a1:23:dc:3c:5f:b8:60:
71:1f:f5:5c:fc:cf:15:7b:de:a5:6b:d4:b3:5b:ba:11:f6:58:
2e:e3:6e:af:c9:a9:60:6d:c1:a5:e9:3c:5f:45:48:ca:ad:49:
3a:c9:a2:bc:f1:ca:af:c7:10:f6:d4:ba:ed:f7:b9:7f:10:e6:
ca:fb:c8:12:e5:02:8c:fc:01:ef:01:ad:be:69:92:af:4b:79:
ef:d8:6d:4f:5c:58:ac:30:3a:2e:0b:ad:fb:9f:dc:8f:80:bc:
8a:5d:44:0f:7a:12:f9:f6:19:72:b7:78:c5:00:61:e3:22:6a:
ab:fb:e5:01:09:35:5b:67:af:a6:3f:60:9c:90:c4:26:08:b6:
d5:bc:ef:49:2e:9c:6c:02:07:db:4d:38:48:9a:f6:27:b0:2e:
65:cc:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:28 2025 by rpki-client