Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier: H4wxIRA7t09HgLtstG6AXIOIV2u577A0O+nM+H3OtgI=
Subject key identifier: AB:8F:E0:AA:67:B9:69:B7:AD:5A:22:72:2E:F3:AE:02:E6:18:EE:99
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial: 0198D7A8F3C2228AAA892F27E1BCA279CACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number: 0F34
Signing time: Sat 23 Aug 2025 16:00:30 +0000
Manifest this update: Sat 23 Aug 2025 16:00:30 +0000
Manifest next update: Sun 24 Aug 2025 16:00:30 +0000
Files and hashes: 1: 4FCKqar0XtnEKUi3gFfvOiKskUg.roa (hash: n0va6MokXLOyx5Mouds6xLFs3obz/ZHN/b5YuHxhU6k=)
2: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: koSPGv7RVYVaLnCuLqDxdTWVhp8W96mhT2OQejvSVcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:f3:c2:22:8a:aa:89:2f:27:e1:bc:a2:79:ca:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Validity
Not Before: Aug 23 16:00:30 2025 GMT
Not After : Aug 24 16:00:30 2025 GMT
Subject: CN=ab8fe0aa67b969b7ad5a22722ef3ae02e618ee99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:14:96:9d:18:0e:c2:80:5e:23:23:96:c3:
80:35:94:04:d5:a2:e5:66:cd:37:6c:bf:ae:de:84:
38:8d:c9:3d:c6:ef:47:94:16:e7:c9:fd:64:ee:e0:
29:49:4f:80:23:29:a7:3c:c2:16:1d:c7:ed:92:09:
09:1b:78:2c:dd:69:e1:22:c6:b8:15:a2:e9:99:3c:
75:8f:14:66:5c:4e:8c:4f:dd:7f:db:5e:b7:3f:ba:
f8:36:f0:df:35:c1:ea:6a:00:ff:8c:ff:f7:7e:2f:
28:31:34:0b:f8:b2:23:cf:b0:e1:5d:a9:bd:2b:f1:
b9:a3:66:a2:ba:7d:ab:52:0e:ff:ac:55:df:2a:b9:
6b:05:c7:8f:10:57:42:e9:da:fe:ee:b4:91:dd:4d:
78:ca:90:cd:9a:05:75:9b:6d:5c:3c:c6:84:c2:20:
e9:6e:85:d0:29:09:9e:09:1d:df:c8:c5:8b:05:d4:
17:76:d5:8d:27:93:40:94:c2:d5:52:f2:65:67:d1:
0c:fe:e5:60:ef:80:e5:c7:cf:e7:3d:d0:37:2d:ce:
4c:d1:30:51:27:4d:fd:75:6b:8f:d8:cd:47:f7:ba:
92:4b:fc:63:c0:a3:90:2a:95:ee:05:15:7f:d7:35:
08:24:be:0f:eb:d0:ce:9b:d1:88:f1:6d:77:57:2b:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8F:E0:AA:67:B9:69:B7:AD:5A:22:72:2E:F3:AE:02:E6:18:EE:99
X509v3 Authority Key Identifier:
keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:08:c6:fd:8a:b4:49:45:2f:c6:e0:e7:e0:0e:10:42:3b:7c:
81:2b:fb:5a:78:3e:b1:62:7e:e5:8a:2f:c0:0d:b8:16:44:f0:
74:31:39:93:41:ff:fb:22:e1:64:f9:31:0c:ba:88:5d:97:ce:
47:16:6f:7c:8e:d1:74:38:2d:ea:2b:fb:b2:73:3d:a2:72:be:
6d:bf:e4:d8:84:e3:e2:03:9d:7d:44:b8:be:9f:8f:96:7a:67:
e4:96:c5:01:2c:a7:d3:e1:df:00:b9:79:0e:92:31:19:bf:7b:
65:4c:f5:f7:67:5d:9c:6c:37:2b:94:c5:78:7e:f0:8d:58:a3:
f9:2d:95:be:da:43:18:2c:49:f1:a3:99:2a:00:4a:d3:88:07:
e5:38:be:86:04:d8:36:e7:66:10:96:66:a8:67:7a:11:82:9e:
bc:35:97:6a:80:ea:f5:b7:74:7c:81:58:5c:22:3a:a1:34:dd:
8c:24:d0:f4:4a:b1:4c:49:8a:a1:d3:9a:8f:f1:9a:56:1d:ab:
6f:54:c6:ac:a7:dc:1c:9e:27:d2:85:9b:8f:39:62:66:9c:76:
a0:e3:1b:86:ee:c1:2d:c8:aa:8d:39:9e:0f:e9:90:e6:bd:72:
9d:6d:ff:88:62:47:90:58:38:9d:48:57:c6:c9:bd:0e:e8:45:
09:6d:6f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:34 2025 by rpki-client