Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: io/nxn1d1JHmDVI3Qj5XQXCdCcI4UULLpGhxmSQzsaw=
Subject key identifier: 5A:8E:A5:06:DB:01:68:BB:A8:47:9A:32:DC:4A:66:11:D1:75:5F:29
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 0198D6CDCE9BE0562B7B37F266E9009EC993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 05C0
Signing time: Sat 23 Aug 2025 12:01:08 +0000
Manifest this update: Sat 23 Aug 2025 12:01:08 +0000
Manifest next update: Sun 24 Aug 2025 12:01:08 +0000
Files and hashes: 1: 2CWxlLP-g2_NKa4Kkpj2mT541B8.roa (hash: mmFiMDnNmanIcg6TQLMQsrDR/+z17sNvs6gtqCoQhp0=)
2: _fP9Z6Qv2kJn-Wq44o76SeffPHk.roa (hash: 4imK77f8nPoaw3AiGFAa7c39oqo+0JEgUABlegcK0lE=)
3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: NPtKQ5hSXnZQGmx/IkaktMZzu2Um2TmYUdlTqlGzN9s=)
4: l65724QI29Rvj8Dehw-WDE4zXrs.roa (hash: GIynNXgCpE42jnQGxrKvLDY9GYzVvsdz2aApBnrj/3E=)
5: zGpb-ZeCY1IKeaoUCFy7z97Xemo.roa (hash: mbhMc1h15zK2CFg+s3mq9POrXrfojhoCA2jehVwrtX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ce:9b:e0:56:2b:7b:37:f2:66:e9:00:9e:c9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Aug 23 12:01:08 2025 GMT
Not After : Aug 24 12:01:08 2025 GMT
Subject: CN=5a8ea506db0168bba8479a32dc4a6611d1755f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:bc:ea:69:17:b5:ed:9b:59:82:d7:25:48:
97:44:bf:a5:6d:0c:05:b6:34:86:e2:7e:48:5c:64:
e3:c3:d5:8e:57:e7:9d:92:e3:85:f2:e3:a2:13:3e:
33:6b:53:8c:86:ff:e3:aa:df:49:af:95:95:fe:7a:
6b:df:94:b7:38:b6:8c:8f:7c:a4:7b:c6:59:34:0a:
5f:a0:5a:40:f6:b3:c5:e2:22:27:e2:e6:24:90:f5:
a8:49:32:70:81:1c:ba:ef:81:4c:f3:d9:81:ff:ff:
c5:6d:97:c3:d7:fb:56:87:20:9f:13:a4:91:46:dd:
4e:0a:a1:60:88:75:cd:9b:0c:cd:42:e4:a5:61:25:
2f:93:0b:43:30:63:60:35:e8:ad:95:d3:7f:57:71:
d6:aa:7b:27:67:51:3c:8c:d9:89:bc:4f:4c:c7:4b:
c3:21:b2:d5:3c:81:6c:61:7c:66:54:3e:3f:b9:f3:
2d:15:76:05:95:90:a6:20:5b:f6:f5:8d:16:00:5c:
aa:21:fb:6c:48:8c:8b:3f:73:f0:5c:7e:a7:9e:d0:
e4:c9:9a:52:fa:e7:dc:c7:2c:48:27:12:47:1c:6d:
7c:a8:28:4f:bf:ed:3f:12:cb:8a:3a:2e:9c:7b:57:
85:9d:67:ed:e4:4f:d1:75:5a:65:8e:c8:8b:e3:d4:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8E:A5:06:DB:01:68:BB:A8:47:9A:32:DC:4A:66:11:D1:75:5F:29
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:33:7a:d9:4b:7f:19:73:41:61:6e:38:4e:ae:c4:94:86:f5:
87:35:5a:63:83:3a:07:fe:fb:db:f5:3f:dd:f9:8a:3f:ea:17:
2a:6f:68:d5:0f:79:ee:54:4e:84:3b:a2:9e:2c:38:e9:fb:85:
38:63:57:c5:f0:cb:6b:c6:0c:db:e1:be:76:0f:de:72:ff:8e:
b2:19:6c:97:05:67:99:62:48:fb:9d:af:e9:87:04:bf:05:72:
9e:f6:13:99:72:23:51:03:0e:b9:52:fd:36:47:03:dc:31:5d:
a9:5e:a8:9c:af:e3:47:a2:03:6b:1f:b3:2c:77:18:a0:cd:95:
5d:e4:1f:2d:e7:3f:b0:49:cc:27:3e:d6:6a:08:3f:18:33:2d:
e6:51:cd:dc:6c:ad:4f:f8:39:c4:7c:d5:23:cc:f1:ce:b2:e4:
50:5f:ff:e4:b3:1d:3e:40:12:f0:dd:13:91:1c:3e:b6:e2:c0:
c6:9f:4b:93:54:4f:30:fb:2d:af:17:60:93:9f:c3:57:21:4c:
ea:c0:de:d7:b9:99:9e:ff:a3:79:dd:75:c5:99:61:84:bf:d5:
c0:09:69:3a:8a:20:97:c3:85:96:a5:3b:8a:90:f8:4a:28:ad:
50:dd:f1:51:4c:71:5b:37:72:1e:23:a6:89:4f:59:cf:2e:7e:
89:77:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:13 2025 by rpki-client