Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier: GU/ALPWB17zubHWpn+mjUWgHPusGl9YLu6pNOcmUk/Q=
Subject key identifier: C8:CC:FB:C6:AA:E5:1C:B4:17:B1:C7:A7:1F:6B:80:07:55:CE:C5:81
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 0198D54E1634EAAAD7F48BA1C693E541DB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number: 1659
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: 54dHE0jadLwCWG8zkr-DJUOEEaw.roa (hash: oNDnO3daYus3xELeZDv1QShW9ceHJLAT7TByuVM8qlM=)
2: G5C1ZqYlTLCRRxbHStMwHe3D7Ns.roa (hash: LpFTYAOw4TDfnjUrddNXOWvBHb296+OG0h5PcCYbZJE=)
3: PvzW1LilVgkSMjr-1-Yzvm-wGUI.roa (hash: lkTDUiRzb2/fpHpIX7XQuDSWI0FVDd2991z/UDnMP84=)
4: _udyEbevQeyPMsntui78RQRmYXo.roa (hash: 8RRyytezjUw6YTel2ifQgoEKUcJPXqM6Y67HGaLLOtA=)
5: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: IDKZHaECe25+7XylID8ViwicsLiTRbmanbutBcyL0jU=)
6: d_QjM08NyWxu6Tcwa6Z9vaHDI6E.roa (hash: 2UiuRNdprh1vh3n/JUuIuP4pSF4iJgcL2G0BqHfLcb8=)
7: gu5dao22fJp9scPActSQNTp8QK4.roa (hash: SFp8Pdfj96YgeaI0ilX+9ls8kY++x5GaLl2llXmCJNc=)
8: jwpY6rERA_zyIv98bpD7R8nes4o.roa (hash: zhq9elSEk74CwB7NZMhv2D35pQpbRAFiT6FBizp5Yp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:16:34:ea:aa:d7:f4:8b:a1:c6:93:e5:41:db:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=c8ccfbc6aae51cb417b1c7a71f6b800755cec581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:9d:74:e4:5b:77:a5:2d:4c:ff:83:19:ca:
f8:f6:96:3d:b2:8b:45:35:79:0a:25:8b:b1:56:f3:
fe:5f:57:b4:b4:c4:b0:2f:5a:5c:af:84:40:78:a4:
3b:19:a5:73:2d:1f:5b:77:50:67:a8:54:cf:f9:1d:
f2:2c:99:86:c0:43:94:70:f0:e0:ec:83:86:47:d3:
33:fb:a7:c7:50:4f:49:b4:be:ba:18:48:29:7e:b5:
84:77:b5:4e:48:7c:10:95:09:83:a6:a2:32:1c:87:
d8:bb:e7:6c:2b:d0:1e:77:05:59:e5:7c:1a:b0:54:
2d:dd:30:4f:e0:0b:25:c1:79:98:6b:ad:9c:bc:35:
dd:a9:ad:4f:5e:60:f6:eb:16:40:f8:39:77:5a:0b:
3d:87:5c:9d:48:81:3b:83:a6:4e:b0:48:c6:1c:2d:
3f:75:4f:fd:3b:d5:02:a6:fe:c7:b3:31:5d:3d:40:
c7:ad:5f:f4:6c:22:8e:2d:6e:35:01:89:e6:0e:93:
97:20:0a:3d:21:9c:f5:28:70:09:bb:30:8f:05:0a:
de:3c:0b:28:84:83:db:2e:e5:bc:0b:5d:bf:03:72:
0d:fc:0a:7e:66:b7:ff:50:aa:db:06:07:80:4f:19:
db:15:fb:0a:32:17:e7:ea:f1:8c:ef:97:17:2f:8f:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CC:FB:C6:AA:E5:1C:B4:17:B1:C7:A7:1F:6B:80:07:55:CE:C5:81
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2f:68:b9:ae:90:34:8e:21:8d:2e:66:42:40:1c:a9:b9:09:
c1:df:76:59:10:02:ed:53:fc:76:20:49:48:fb:b5:90:b8:0a:
c7:67:ac:86:f9:8e:2d:7a:ee:58:36:c2:47:01:cd:70:76:ea:
e2:6e:b2:d7:d6:36:c3:15:0c:a1:ca:4a:04:31:b3:bc:53:b6:
9c:80:82:00:d1:18:ce:1b:c8:6a:89:a4:f9:2a:8b:84:0a:90:
18:36:02:a9:15:da:d4:7f:ed:fe:76:fc:47:2e:22:83:2d:3e:
4b:aa:da:5f:a2:28:41:7f:89:0e:ca:f9:b1:3c:f4:90:8a:47:
0a:f8:1d:2f:d8:16:4f:a0:95:6c:03:68:10:2f:77:78:a1:d7:
18:99:38:b3:94:69:b9:6a:8a:43:82:9e:b7:37:69:04:6d:ce:
f6:99:25:95:64:1c:73:bc:97:9b:3a:f0:b5:66:61:90:d1:95:
fc:55:02:31:1b:90:8e:e4:87:20:b9:45:86:e3:49:ca:1d:26:
03:f5:77:3e:37:2a:b8:21:d8:68:a1:6c:0b:1e:ad:a7:21:c6:
2a:f4:ed:9b:a2:8a:46:43:24:2b:e9:79:31:ae:8b:28:03:fe:
32:f4:cf:d4:8f:8d:8c:9d:7c:d0:6e:69:4f:71:b2:05:ed:4a:
00:b1:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:31:20 2025 by rpki-client