Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: Lqomc6haIxTlh+Z1D0k/okUuzBRu9KEVlHeKdqHZmH0=
Subject key identifier: E7:17:50:44:A9:56:0B:83:06:3C:00:6B:77:53:35:A1:50:FA:FE:C2
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 0198D5BC1EE23C291A56B18ABBC83C5BCA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:02:12 +0000
Manifest this update: Sat 23 Aug 2025 07:02:12 +0000
Manifest next update: Sun 24 Aug 2025 07:02:12 +0000
Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: fwTo+6kE84j64Yp6Rl9WBGRP8yj6kcebGZfbDLf/pS0=)
3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1e:e2:3c:29:1a:56:b1:8a:bb:c8:3c:5b:ca:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Aug 23 07:02:12 2025 GMT
Not After : Aug 24 07:02:12 2025 GMT
Subject: CN=e7175044a9560b83063c006b775335a150fafec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:72:66:90:ca:21:64:cd:57:44:0b:a9:e1:
6a:02:6f:17:57:ba:63:13:89:dd:c3:ea:c2:26:51:
34:99:12:15:d7:2c:79:96:55:ab:7d:54:f2:c2:8c:
0b:e6:2c:8c:32:04:a2:61:34:4d:34:4c:7f:b8:f1:
6a:de:53:34:f3:e0:8d:f1:c7:58:b1:a8:38:4b:50:
7c:c3:05:cd:ab:95:d2:13:c5:ef:b9:0d:33:b2:72:
f6:52:32:51:16:b7:38:aa:99:6a:86:13:b4:45:79:
78:13:2b:69:d8:92:13:49:1c:ff:8e:bf:ac:42:d2:
1c:30:99:3a:1a:9c:03:41:31:88:32:0e:f9:c9:74:
c0:30:b5:fb:35:c9:cc:d1:cf:87:e6:f0:46:23:c1:
5c:df:39:41:f7:57:f2:c5:31:49:4e:e6:38:d3:71:
86:1b:ca:ec:61:12:dc:92:5b:ba:1b:6a:db:8d:46:
ab:1c:52:00:fb:32:6c:72:8c:2f:9d:18:68:50:d6:
a2:9f:9a:10:a6:ba:fc:8a:16:5f:40:05:a4:4d:c5:
47:c3:82:50:95:6f:88:89:89:64:91:74:4d:e8:03:
c2:9d:b6:9e:a4:6e:c4:37:c9:85:a3:4a:ae:33:e6:
ef:a3:8f:de:c3:9e:9d:eb:fa:4b:c4:d9:90:06:62:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:17:50:44:A9:56:0B:83:06:3C:00:6B:77:53:35:A1:50:FA:FE:C2
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:78:5a:85:e4:a5:a8:5e:ea:4e:7f:95:87:d2:8e:d8:31:1b:
6d:89:77:0e:5d:86:4c:42:42:10:50:55:1b:71:0a:30:25:68:
76:05:0d:3d:97:16:b4:c0:97:5b:20:1c:4f:a4:94:92:b2:d0:
81:59:a3:d8:a4:cd:31:38:2a:e8:50:f3:38:89:73:f0:77:1c:
28:bd:34:7d:37:a5:16:2d:53:ba:20:a8:a9:82:2e:c9:bf:ba:
4f:ad:b9:56:bc:30:79:90:e7:5e:d4:0b:fd:fa:5d:36:92:c4:
a0:e2:d4:9c:bf:b5:c5:da:8d:49:9b:bf:bb:e9:d2:4c:fd:a9:
67:44:a7:ae:ec:f5:b7:c1:2d:0d:55:1f:6f:14:5c:61:b1:32:
e1:55:c0:e5:9b:2e:2d:11:f7:7d:82:f7:95:26:39:b6:b7:c2:
4c:a6:b5:b9:b2:32:2c:06:51:16:7d:fa:7a:67:1b:fe:2c:52:
3a:b3:fd:82:1d:64:e8:61:bf:4a:8b:75:3b:76:f5:b3:9b:fa:
f5:a1:e9:27:be:7a:43:be:7c:23:94:6d:d9:c7:18:b2:ab:e5:
b6:13:8a:86:82:fa:3c:e3:18:d2:69:ac:7a:74:95:e3:ba:81:
3c:f8:ca:00:f1:a9:65:6c:12:23:2f:6c:44:9e:2e:c7:d1:29:
5b:ca:af:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:53 2025 by rpki-client