Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: t8MIy/qwpLw9ym7kPvCN599winXt5F7LscIhNRkI52s=
Subject key identifier: 62:CE:EE:1C:12:21:64:E9:FC:87:CB:62:ED:27:B0:F3:8B:A6:C8:77
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 0198D54DD9B30D4BAB2DC91655AA3CCD53D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 0F4E
Signing time: Sat 23 Aug 2025 05:01:45 +0000
Manifest this update: Sat 23 Aug 2025 05:01:45 +0000
Manifest next update: Sun 24 Aug 2025 05:01:45 +0000
Files and hashes: 1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: EvIfFr13on+ob5oUW9eUdKZu6qbp2+mjdfrZuDHYXY4=)
2: C6Si8_4OvkA_L0SzhzDXIdZD70Q.roa (hash: MXDhlA4OqmmtXJ3YGQ8YOTAMBcB/6855qXcMYCrv39s=)
3: VehV-DaGpdPd27h7BeCPuf7XgGU.roa (hash: sAalVTrnmg6yf8SFv/nnSyHMnXSPLWE6BdkaiXIz7ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d9:b3:0d:4b:ab:2d:c9:16:55:aa:3c:cd:53:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Aug 23 05:01:45 2025 GMT
Not After : Aug 24 05:01:45 2025 GMT
Subject: CN=62ceee1c122164e9fc87cb62ed27b0f38ba6c877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:2f:d0:3b:17:15:80:21:72:6a:82:91:85:
72:7a:4f:75:59:04:35:62:28:71:7f:b3:33:68:94:
50:b7:46:b8:22:63:2b:c2:c3:32:48:b6:f9:90:fd:
a4:21:71:bf:9e:93:65:79:fe:42:49:52:58:58:8f:
65:f2:1a:71:1c:7a:e0:1c:2e:32:34:18:8d:ef:bd:
0a:6f:ab:74:5a:14:c5:13:72:e8:5b:28:2a:39:38:
77:73:24:d1:38:5f:7f:05:ab:e7:b0:76:41:ca:18:
f6:27:b4:3b:1b:6c:80:d0:0f:db:41:3f:3f:76:45:
bf:3f:3f:9b:43:01:fc:a1:ea:0a:8b:c7:40:d5:b5:
e4:41:a3:9d:47:f5:c0:80:d2:77:91:a8:a5:f0:ef:
7e:f7:fc:ab:a0:39:20:7f:61:20:ef:d8:cc:39:6c:
07:2e:8e:cf:a4:ee:5c:7b:43:96:d7:21:c7:b6:f6:
dc:f2:08:20:9e:ff:69:37:5b:5b:32:a7:18:e8:d9:
0d:23:ff:ea:81:fc:39:2a:ba:bf:f2:c6:6a:46:6d:
b3:09:55:96:bf:f6:b3:23:44:2d:a8:b7:7d:a9:8c:
b7:80:88:02:6e:b5:c4:4e:ef:c3:7d:d2:e8:fc:13:
49:4f:77:92:0f:2d:c2:c2:16:36:5c:01:60:91:28:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CE:EE:1C:12:21:64:E9:FC:87:CB:62:ED:27:B0:F3:8B:A6:C8:77
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e7:c2:3b:b2:38:09:87:9e:42:f6:ca:bb:3f:f9:8a:68:a9:
04:17:77:f6:df:54:28:c5:39:0f:ae:73:07:04:9b:e7:9f:f3:
c0:a5:69:38:7b:31:f2:3c:de:c1:18:39:77:e4:1c:c4:da:42:
50:3a:b6:8a:96:b3:6e:d6:4d:79:6d:34:09:5d:0c:5c:58:e6:
56:d2:39:d0:10:a5:de:25:3e:df:82:2a:53:96:6f:c6:79:de:
cb:dc:fc:7d:42:7f:e5:16:b5:e1:48:44:21:04:8f:44:3b:87:
ef:16:a3:72:c0:83:18:fe:35:bb:6c:e2:ac:ad:98:74:47:de:
64:f1:54:8e:ec:df:6c:21:b3:39:46:a9:af:ef:be:0b:ee:a7:
bc:dd:6d:b0:8c:24:4a:ac:96:f3:60:2e:b3:37:c0:c7:18:6e:
d2:31:06:ea:c9:b7:b5:b9:02:36:fd:d4:14:82:b4:1c:59:bf:
ee:45:81:ca:64:05:f2:3f:e3:ad:19:8a:e1:3f:1b:76:b2:5d:
91:59:ab:5d:84:78:5c:2e:e9:61:16:3a:da:56:ab:27:85:c5:
c6:95:34:dc:5d:0c:40:34:3c:9c:d2:6b:82:8d:65:58:b8:fc:
29:5d:60:4b:20:43:6b:bf:85:e1:d4:d4:23:77:ed:71:db:2c:
a5:b5:21:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:56 2025 by rpki-client