Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: 4eHTAhPgWHeHZ0fsUbCohhgm1j4ecW654qOvtU/lAK0=
Subject key identifier: 7F:71:E7:CF:AE:E1:AB:D3:49:D1:1E:45:F8:AE:68:15:F9:CA:A6:C5
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 0198D5F17A3C0043A01AAF69041A2601265F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 10C4
Signing time: Sat 23 Aug 2025 08:00:28 +0000
Manifest this update: Sat 23 Aug 2025 08:00:28 +0000
Manifest next update: Sun 24 Aug 2025 08:00:28 +0000
Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: OY94XMjBh7f/JactiDiXxMbUTB7ucyx/b/GTnizl2UE=)
2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:7a:3c:00:43:a0:1a:af:69:04:1a:26:01:26:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Aug 23 08:00:28 2025 GMT
Not After : Aug 24 08:00:28 2025 GMT
Subject: CN=7f71e7cfaee1abd349d11e45f8ae6815f9caa6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:e1:e3:e6:e5:ec:27:a7:71:80:c0:1b:7b:
56:a5:a2:28:8d:ee:ce:2b:4f:db:7e:b3:d7:81:06:
82:55:85:ce:b3:d7:ca:8d:2c:53:df:de:56:7f:40:
c7:79:8f:ff:c4:25:c6:90:2f:de:7a:5a:65:5b:53:
6d:13:ba:9d:25:b1:39:32:77:7a:06:a6:59:0f:53:
22:c5:57:74:dd:15:9f:09:ef:26:05:ee:f6:e0:44:
c6:ab:26:ad:4c:46:a8:2b:1e:dd:db:a7:06:f0:92:
b6:b1:3f:f4:1d:ef:53:e3:34:07:c4:cb:c8:1f:87:
69:cf:62:06:7e:29:be:ad:e7:f9:b7:bf:6b:2e:0b:
a6:9d:44:2a:4e:8f:68:4d:b9:8a:bd:6a:f3:4e:ba:
63:fe:ef:68:3c:e8:3b:8b:38:b4:4f:88:2e:c5:52:
f4:c7:b8:ad:ea:38:1f:c8:8d:4b:b3:7d:b4:56:ad:
1b:95:ba:df:75:81:ee:dc:a5:5b:f4:b5:88:c8:a6:
71:79:fe:3f:24:f7:22:44:e6:2a:4a:2e:fa:f0:df:
e8:cd:d7:87:bb:d0:4a:0c:07:e9:f0:2e:2f:57:d4:
cd:38:50:7b:1c:32:cb:b6:65:13:8f:d7:fc:eb:6d:
72:f1:77:b8:7e:f9:9b:d9:2b:d7:02:90:46:0e:e9:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:71:E7:CF:AE:E1:AB:D3:49:D1:1E:45:F8:AE:68:15:F9:CA:A6:C5
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:6f:35:c2:67:22:83:c8:01:e3:4c:6e:b2:02:2b:ed:ab:e2:
c3:72:68:c5:cc:4d:cc:6c:22:25:c5:97:5f:bf:c5:c1:a2:15:
b0:0d:4b:d1:01:4e:e4:47:4d:ff:73:db:49:e1:fd:9b:b2:4a:
dc:21:f8:38:4f:72:80:d1:9b:35:81:4c:b3:4f:97:32:ed:ba:
ed:7b:31:61:5b:12:90:0e:21:66:09:98:5b:f4:a5:36:a4:d9:
0a:e0:63:22:10:72:86:45:9b:59:dd:0d:cd:e4:78:e8:c4:bf:
56:1a:d0:12:db:88:55:b4:52:18:cf:21:f5:27:44:41:9c:17:
b3:b7:08:bf:90:c9:13:22:a4:55:87:d1:4c:67:d0:4c:06:26:
01:3e:aa:14:8d:7a:b5:83:ea:db:83:35:cd:a8:73:2a:46:8d:
1c:37:d4:dc:3d:ea:75:e7:0a:83:8d:ed:9a:af:b5:ed:4f:e9:
a7:af:2e:51:1a:07:e1:ae:6c:91:b8:24:11:70:ce:38:4b:6a:
64:10:28:af:bf:88:81:2b:9b:5f:79:e4:76:2a:6c:d8:ad:47:
27:f3:59:16:39:90:b5:37:27:36:de:ad:32:d0:c1:a1:95:35:
92:c3:c2:22:eb:93:7a:83:df:67:ad:50:ba:bd:b0:21:92:16:
fa:a6:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:38 2025 by rpki-client