Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: xLSMestSQPk4dczqTl/1L4olWLeFteLqd2/3nK/CBDs=
Subject key identifier: 06:76:5E:7E:26:44:26:EA:7D:38:51:32:F4:C9:22:79:A1:4A:5D:DF
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 0198D65FD88E7F4A8085AE3C5C08FBAA1A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 0CE5
Signing time: Sat 23 Aug 2025 10:01:02 +0000
Manifest this update: Sat 23 Aug 2025 10:01:02 +0000
Manifest next update: Sun 24 Aug 2025 10:01:02 +0000
Files and hashes: 1: DLstc3U0rg1XJMzpW3kLJk6bWww.roa (hash: aRJQLolF5fKnY48Uu+tEP6pfOTPeicajt7bpyIpZajQ=)
2: hw5zWhZ37cy3fl-F4c6L7KinXWA.roa (hash: JVVK2E4Q0U9kLmKrr7lDfe4ry5wJQg7f4zL2c9LIRlo=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: Wg+d3SkMVEIT5oULJKV9bpNSOJ9RAhJjcNOoxF2OCmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d8:8e:7f:4a:80:85:ae:3c:5c:08:fb:aa:1a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Aug 23 10:01:02 2025 GMT
Not After : Aug 24 10:01:02 2025 GMT
Subject: CN=06765e7e264426ea7d385132f4c92279a14a5ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:fd:2d:1a:84:5d:04:24:15:11:58:f0:23:
76:a0:3c:03:fd:c8:60:a6:d7:3b:05:c8:49:40:20:
63:9f:5d:0a:66:16:14:e7:de:5d:8c:27:81:7e:ae:
d2:f9:6d:99:41:37:7b:62:66:c1:22:dd:86:17:95:
6d:f9:83:12:e1:c7:ef:cc:91:34:ea:10:72:af:17:
c4:a1:85:24:eb:26:d4:00:fa:6a:7c:0e:d6:ae:c6:
ed:7f:67:f9:c9:37:f4:7c:8f:36:c7:1f:8a:8e:51:
c5:ea:9a:54:91:d6:39:68:df:49:7b:15:cb:a3:ca:
b4:36:2d:b3:c0:70:a0:b1:78:f6:41:e4:44:eb:02:
ef:5f:36:4a:03:3d:fe:64:14:3b:8a:15:62:6e:dd:
63:24:91:52:a4:08:66:0b:e3:d4:c9:dd:f0:48:e2:
62:ea:d3:ec:3c:de:c2:8f:5a:6a:bf:3f:15:b6:6a:
54:73:a8:f6:bd:c5:a3:85:ee:52:47:ca:85:4a:9a:
8e:7f:4d:47:5c:13:0e:cb:ef:21:ec:df:e3:24:7a:
5c:d2:58:23:77:49:16:9c:1b:ed:b1:84:2d:03:bc:
b6:6a:3a:18:f1:f4:28:3c:8a:d5:10:9d:24:65:22:
e6:2b:da:49:f0:e6:e3:ed:0e:3c:d5:0a:86:b2:3e:
d7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:76:5E:7E:26:44:26:EA:7D:38:51:32:F4:C9:22:79:A1:4A:5D:DF
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d4:b1:32:db:2d:4b:0b:26:e7:61:0e:32:d2:ed:aa:cf:bb:
f8:f6:f4:c8:e9:d6:ac:29:97:06:d0:a2:ba:51:b1:6b:96:3a:
5d:90:cd:5f:a0:28:6c:d4:af:84:88:d6:8f:90:42:80:ce:46:
ef:3b:3a:2d:6d:c8:0b:da:b9:d3:b5:93:9d:78:35:5f:4d:47:
7a:35:60:cc:15:14:e3:cf:22:10:f8:a5:6d:72:a1:63:14:cc:
9d:c7:ca:87:5a:88:4f:4d:6a:50:05:ea:45:f6:b4:c4:13:d4:
8a:34:36:c1:c1:43:7d:79:ad:2d:3c:2e:12:19:bb:4b:06:0f:
ef:47:32:90:67:2e:ce:de:06:09:80:5c:bb:b0:c3:5d:44:b6:
3e:ce:5d:1b:18:bc:f1:9d:a6:69:b1:ec:da:4b:31:6c:4b:99:
69:3b:cd:b7:43:2f:a6:cc:bd:ca:a8:7d:21:13:9d:a2:47:39:
eb:fe:74:4e:ad:ba:ab:83:df:9d:32:0a:a5:3a:59:da:95:ce:
51:78:e9:74:7f:24:c4:1f:aa:56:82:5d:c8:ef:5b:67:2c:eb:
43:e4:05:92:12:b3:53:eb:bd:98:16:85:8e:4f:cb:81:f6:a3:
14:ec:aa:10:80:7f:7d:9c:23:29:0f:72:82:a3:e5:0d:05:42:
e4:a1:a9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:52:52 2025 by rpki-client