Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: 3kqX22Nv7vJeSU8qS5b1l8WahvI1tgK8ztLlWLfFNuw=
Subject key identifier: 63:FE:40:B5:17:F9:08:6E:74:E1:D5:D4:4A:66:70:E6:B6:85:97:7F
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 0198D4E02E93C32A89959133F3A9730C9C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 033C
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: mpaMu3TZ8uwXpfDauz+9HLqX+LanS8G4FXPI6QAFCkU=)
2: ZRyYFoPWFr4LTQ9gIPHP5w-ddzQ.roa (hash: GUrbPOCAIn4PH8GnCdvd1SlQ4fdh24I+//UmwqdbMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2e:93:c3:2a:89:95:91:33:f3:a9:73:0c:9c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=63fe40b517f9086e74e1d5d44a6670e6b685977f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:4c:bb:bd:23:02:57:75:c5:92:92:43:98:
e3:27:7f:9d:9a:6d:27:7d:3a:3a:c2:35:0e:b4:51:
f4:bd:a1:5f:b6:a5:75:da:58:70:8c:55:be:05:ba:
54:1f:2f:c2:2d:37:9d:fe:96:f6:ed:a1:09:80:6d:
db:4c:6b:76:7b:e2:e4:c4:8d:cb:ab:d0:92:8b:b3:
fb:08:a2:38:3c:c0:82:ea:a8:18:82:78:c3:0d:2f:
8b:41:6c:a5:48:2a:a0:a5:ca:7e:70:96:84:32:6c:
71:03:01:e3:42:f0:20:81:6e:f1:12:4a:49:8c:0f:
42:bd:db:27:38:e6:12:b5:ea:65:87:28:fc:5f:49:
92:6e:d1:a6:cd:f6:f4:80:8f:55:76:66:d5:5f:42:
df:b3:de:e3:5d:0d:a3:6b:f2:22:9f:cd:dc:d3:e4:
c6:99:b4:fb:81:18:ad:42:d7:55:60:ea:e6:7e:7f:
63:eb:d6:0c:96:2a:e3:0c:84:ea:7f:49:c9:dd:63:
ad:d6:18:ae:a8:ff:a5:25:06:75:90:63:81:2c:6a:
b9:74:30:a0:b5:15:d1:fd:7d:34:10:f8:f6:3d:f5:
1d:6a:d7:42:ef:3e:fd:65:5e:65:f7:34:02:3b:ac:
e5:63:05:17:fd:bf:f1:27:dd:f3:cc:88:b3:d2:7e:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FE:40:B5:17:F9:08:6E:74:E1:D5:D4:4A:66:70:E6:B6:85:97:7F
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4c:7b:2c:23:b9:f5:62:16:cc:b9:a4:4f:52:90:f1:27:83:
08:13:ec:d7:20:3e:c3:ea:57:28:a0:aa:63:a0:e9:65:cf:08:
3a:6d:70:f6:8f:bd:f5:32:eb:bb:bd:40:b4:8d:46:97:fe:2b:
06:2f:0f:93:9c:8b:c4:74:c0:0b:fc:ab:64:1f:df:99:64:e6:
2d:23:a7:7e:36:04:ea:74:fa:b8:39:e2:53:3a:c0:a5:ee:5c:
94:62:c0:ac:21:0a:75:93:6b:d5:ec:05:eb:1a:03:90:1d:91:
39:17:48:fa:8d:5d:fa:11:bf:93:c4:87:15:11:ee:27:55:07:
7c:e0:1a:78:ba:d5:62:4d:32:fe:b2:dd:4e:fb:83:d9:b4:f3:
a6:2d:ff:39:94:47:27:55:1e:5f:61:07:80:27:03:7f:3e:27:
e9:38:a5:49:5d:1e:51:34:05:b8:fb:2c:c4:9e:02:78:4a:c4:
61:a1:fb:ba:be:38:77:81:13:58:05:3f:93:7f:52:bb:b8:94:
74:62:60:7f:e8:7c:f8:9b:94:b3:49:c6:3f:14:f4:8c:d8:02:
5e:53:34:68:a4:39:b3:2e:b6:a0:f9:94:46:e4:3e:7c:bb:93:
69:b0:2e:93:27:a9:e8:e8:c2:9f:0b:33:2e:ab:6a:47:01:61:
ee:5f:b8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:29 2025 by rpki-client