Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: b0VZ7m7HcVyps7CBM/2wmgEcX3LUV2la1qOmznAGIfY=
Subject key identifier: DA:59:54:AE:B2:AE:1F:A7:5E:14:3F:15:8A:08:6D:EC:1E:C1:3A:8B
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 0198D5F1508D024B569DFF2A791AEDBB0A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 165E
Signing time: Sat 23 Aug 2025 08:00:18 +0000
Manifest this update: Sat 23 Aug 2025 08:00:18 +0000
Manifest next update: Sun 24 Aug 2025 08:00:18 +0000
Files and hashes: 1: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: Cl4wfUtqqH9t+4dbxyFf/YZQqIOJxGVugkhDLvpzrrw=)
2: hn0oOL_Phy31I2IYdCocfuCMl4Y.roa (hash: pL8SqciTf3yJI1mNpTYcxXjCVmcDvB9gR79xz18ukNA=)
3: n4Gl-s-Z4-ZJ7aZsYXedLjfUwYs.roa (hash: 2ovoFydr5EnhNhzcx+FRnrZsnjvX8pqDu1VDKcopbtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:50:8d:02:4b:56:9d:ff:2a:79:1a:ed:bb:0a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Aug 23 08:00:18 2025 GMT
Not After : Aug 24 08:00:18 2025 GMT
Subject: CN=da5954aeb2ae1fa75e143f158a086dec1ec13a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:ce:48:cc:25:14:77:14:20:6c:6f:56:9a:
d5:9b:b0:29:42:cd:4d:58:ce:bc:79:63:95:c9:a9:
52:6a:a5:44:c9:e4:96:45:62:fe:35:bd:c8:c3:84:
5f:53:80:93:d1:4c:c0:9b:8a:d3:b1:2e:52:6a:1c:
3f:b9:3a:b1:f6:05:26:78:99:24:a4:30:35:96:95:
7a:a4:a7:68:be:7e:a1:d1:f6:ff:c5:d1:47:5c:29:
2d:d0:e4:61:ec:9c:09:d6:27:2c:91:4c:4e:41:de:
75:86:2d:3b:ac:5a:d5:e1:4d:20:0a:83:a4:56:6e:
8b:32:ef:0b:d5:5d:9d:32:b1:b0:fb:30:50:51:d6:
14:4c:43:e8:1e:d4:ff:0f:37:31:24:6c:e4:ae:35:
01:b0:76:92:97:22:05:9d:60:df:5e:77:4a:17:98:
91:96:18:2c:69:95:88:8b:3b:78:d1:6a:cf:87:ca:
ec:0f:77:b6:32:65:fa:80:e1:e3:38:23:cb:7d:79:
a0:1c:16:af:4b:7c:1a:96:be:57:7c:c7:c6:16:b7:
cb:33:9b:8d:ed:41:58:55:91:57:0d:7d:8c:f5:18:
a0:64:cb:6b:01:86:8d:10:95:66:20:45:57:bc:03:
c9:f9:c6:53:23:a9:ba:f4:bf:7f:2a:9b:54:91:d2:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:59:54:AE:B2:AE:1F:A7:5E:14:3F:15:8A:08:6D:EC:1E:C1:3A:8B
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b8:86:5e:e8:06:fe:c9:87:42:2c:e1:8d:8b:b2:67:18:b8:
0a:62:20:d0:46:7a:42:40:ba:3c:a6:0a:36:63:34:55:c4:bf:
af:46:38:5c:16:c1:2f:42:28:1b:b9:11:b5:98:5d:00:a2:2d:
e3:5b:ba:31:e9:e1:7a:1a:e4:66:30:05:be:d3:22:95:29:c1:
4e:07:a3:60:97:41:fe:73:72:8d:4d:85:80:bb:c5:a7:63:a1:
eb:d4:76:1e:3c:86:94:f9:bc:f8:8a:24:ed:59:83:52:de:b5:
58:1f:99:c6:24:a3:95:d7:ad:61:20:70:e3:c9:b6:00:61:f6:
07:f1:b5:e8:f4:25:0f:aa:8c:19:02:85:9c:9e:ed:d5:9f:20:
11:60:d4:a8:4a:74:1b:d6:a6:3c:e1:7d:05:ce:4e:ae:d8:5a:
67:83:da:04:82:23:66:84:4e:ba:3d:f9:bf:b6:8c:d2:8f:03:
88:16:b5:88:4f:a3:74:c9:ee:01:fd:9a:9c:34:cc:77:29:09:
42:cb:c6:d5:6f:1e:62:03:9a:f1:30:3f:18:a3:2d:82:91:e8:
48:0d:b4:cc:ed:79:eb:e7:93:87:b8:85:80:2c:9e:b0:ce:0f:
c3:f8:22:99:bd:f7:0d:09:6f:bb:dd:55:63:24:3d:0a:ce:f0:
bf:a7:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:02 2025 by rpki-client