Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier: cFfJoPBpXyuJ5vupVvwzhvmO5XdFEw5/2MiLkdVfZwE=
Subject key identifier: 8B:05:18:56:51:74:BE:1D:7E:1B:4D:E7:D0:08:FD:10:A7:EE:EE:2B
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial: 0197B77C76B02E571D304DAE37DF1A26BE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number: 01FD
Signing time: Sat 28 Jun 2025 17:01:16 +0000
Manifest this update: Sat 28 Jun 2025 17:01:16 +0000
Manifest next update: Sun 29 Jun 2025 17:01:16 +0000
Files and hashes: 1: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: RL1GhVOLwIkeaRod4D1f9hJjX3OFkK7fakypcVIsdTA=)
2: jugqzSPR-0ldHom0_xkR53XyLHs.roa (hash: +3psaXdJuyPggmQWBeIUw9hKrdTT6O3Z6jepxI5OERo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:76:b0:2e:57:1d:30:4d:ae:37:df:1a:26:be:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
Validity
Not Before: Jun 28 17:01:16 2025 GMT
Not After : Jun 29 17:01:16 2025 GMT
Subject: CN=8b0518565174be1d7e1b4de7d008fd10a7eeee2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:29:3c:af:c4:c5:d6:7b:2e:a6:cf:a2:80:
89:8c:56:d5:21:cd:24:c7:98:90:61:77:0e:af:46:
20:fa:1b:72:4f:2e:4d:4e:0f:2a:75:d8:cb:5d:f9:
06:56:0c:1b:d8:18:89:d3:bf:88:fd:42:e0:f3:7d:
f5:7b:04:7b:32:06:af:22:e3:21:df:16:71:a2:83:
87:57:a2:c8:99:f6:e0:3f:ed:52:f4:29:75:b1:ed:
8c:5d:bf:b7:41:cf:cd:bb:b4:51:85:d1:37:eb:04:
38:fb:ea:77:46:4b:c1:54:3b:0d:9d:72:5c:d7:76:
a5:32:a4:82:ba:6e:a1:1e:3d:d0:97:16:36:43:1d:
4f:f6:45:f0:7e:67:bb:22:ec:91:d6:46:a0:4d:d7:
b9:99:1b:0d:4d:75:f8:1c:6d:58:bf:33:bf:92:73:
37:8d:42:b5:ac:4d:1b:08:29:99:13:42:af:11:d9:
e2:07:4d:9f:ea:75:74:ea:b6:83:3c:9f:57:39:d3:
7e:f2:8f:43:f9:1b:16:49:d8:6f:0b:1f:41:74:bb:
f6:8d:52:32:8d:20:28:5c:6c:d5:6e:19:f2:76:43:
41:3d:69:7f:c1:94:34:e7:98:a5:18:88:89:45:01:
fa:40:c8:97:19:38:3f:26:3d:51:40:b8:9d:e2:2c:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:05:18:56:51:74:BE:1D:7E:1B:4D:E7:D0:08:FD:10:A7:EE:EE:2B
X509v3 Authority Key Identifier:
keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:58:f2:e5:65:69:c7:0b:ee:0f:9d:e9:c1:82:0a:16:81:c6:
0d:0e:50:8c:8e:f4:b3:6d:7b:a2:fb:59:54:4b:67:28:39:25:
7f:08:bb:ef:12:e1:6b:a8:e7:1a:c5:ca:20:54:39:07:45:c8:
1c:ba:c5:87:a3:be:16:45:6b:ba:46:ea:5c:a6:e8:71:25:1b:
4d:3d:b7:2c:02:32:96:52:f9:e4:25:41:ec:66:d0:ca:20:c0:
c1:04:7b:3a:e6:d6:99:c2:48:f1:21:1b:ab:ea:80:6a:b2:08:
74:d5:7f:74:a2:76:93:bb:63:38:5b:9d:b9:60:ec:0e:67:61:
d7:5a:1d:6b:1b:bf:a3:3e:3c:e9:44:b3:1a:3c:ff:f9:c3:ea:
c4:0f:88:aa:3a:51:f7:ff:21:83:28:53:32:29:48:08:95:5d:
a5:2f:2f:08:e7:34:7d:63:63:93:11:59:36:21:1b:3b:9d:3e:
de:96:58:c8:31:0e:c0:16:b3:aa:89:a6:1d:3d:63:cb:5c:2f:
2c:b0:38:f9:ed:37:ca:73:a5:9a:7a:16:be:0b:a0:fb:b8:08:
51:80:f0:40:e0:06:ad:9a:5c:0b:e0:b9:26:53:b0:6c:bb:20:
36:56:29:d3:29:47:76:59:53:22:d4:84:d4:15:a5:82:dc:dc:
c8:a7:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:58 2025 by rpki-client