Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
File: DL6R62OkTx6fGoPt0hih7HXCXpE.mft (raw, json)
Hash identifier: kcYxy27FJShDkvJKprNvsmGf8qUefvoN1gjZLRs573o=
Subject key identifier: 7C:02:22:A5:27:D5:19:3A:A4:FE:96:EE:C3:49:1E:3E:B0:7A:03:92
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 0198D65F6B5CBE9E7F4E81AD84B719CFBA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
Manifest number: 080E
Signing time: Sat 23 Aug 2025 10:00:34 +0000
Manifest this update: Sat 23 Aug 2025 10:00:34 +0000
Manifest next update: Sun 24 Aug 2025 10:00:34 +0000
Files and hashes: 1: Abi5pH7cUtL8rs9zrgavPjQRxnI.roa (hash: 7ApJuHPbwwQ8ZW2QLt3m10DbTaxlvMl9pvX3Esbaw0s=)
2: DL6R62OkTx6fGoPt0hih7HXCXpE.crl (hash: MFTOMLCZTht2dr2kIVN11tvaaZvGdBaVu9bJzazhQKc=)
3: rub7QgF_m8ViZ2zh8TifmWsv33k.roa (hash: D3MkLEEj8OyFp5olxebWk6+e8+j7slJr87cSCNkpbeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6b:5c:be:9e:7f:4e:81:ad:84:b7:19:cf:ba:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Aug 23 10:00:34 2025 GMT
Not After : Aug 24 10:00:34 2025 GMT
Subject: CN=7c0222a527d5193aa4fe96eec3491e3eb07a0392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:e2:47:31:11:f7:82:af:b6:6c:77:71:7f:
65:8c:ee:62:64:00:ec:09:18:f3:a2:83:e5:12:cf:
b4:79:6a:a1:e9:be:4f:f9:2c:e2:86:82:9e:c0:75:
2f:88:95:03:8a:1c:87:42:df:90:4f:d4:ae:99:dc:
5e:99:cb:75:a1:2f:e8:c8:52:50:1d:ae:a1:73:0b:
ef:9c:ec:e2:c6:6b:bc:da:33:b6:20:c8:29:02:c0:
43:44:98:5e:c4:96:bf:a3:5b:c6:da:28:a6:76:bc:
64:89:ea:1a:a0:d0:20:6f:60:fb:73:3a:b2:c5:bf:
f7:48:0d:76:05:cf:0e:0c:f2:32:df:2e:48:c5:45:
20:ea:86:3e:93:a1:4c:99:11:e7:f1:42:ba:69:24:
06:63:c6:4e:3c:53:01:dd:f7:6b:77:f8:c8:a7:aa:
ff:72:17:bf:a9:e9:2b:ee:cc:74:b8:f3:5d:a3:c5:
59:60:38:10:2b:da:46:89:76:2a:89:ec:d6:47:b3:
49:52:ba:88:d6:ed:77:71:6a:53:cc:35:d9:c3:9f:
ac:7a:65:8e:29:7a:f7:7c:36:8a:56:4d:8d:3d:03:
96:42:55:a8:1f:f4:c0:94:bc:e0:81:74:69:31:23:
84:d2:cd:3e:48:42:17:65:22:85:9a:b6:3f:d4:9c:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:02:22:A5:27:D5:19:3A:A4:FE:96:EE:C3:49:1E:3E:B0:7A:03:92
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:77:57:9b:57:78:f9:8e:57:d4:b6:8c:b5:b7:0f:68:b5:ef:
e9:82:1f:6b:3e:fe:b9:4f:f6:ee:51:a7:b5:81:31:f7:04:39:
0d:f1:fd:1f:3a:b9:d3:8d:76:e8:30:32:c1:7f:4f:8c:84:17:
d7:4e:ef:82:46:b0:28:69:43:c2:e6:d7:c2:7f:83:b7:6b:db:
14:30:6d:7a:05:ff:ab:29:f2:60:c9:bb:07:11:b7:f4:e2:32:
2a:f3:3d:cd:89:f0:1d:cb:18:9c:48:5a:53:ab:3e:ad:53:8c:
fe:50:68:e9:a0:d2:e2:aa:7d:c8:99:8b:3e:75:0e:a7:bf:b8:
a2:27:46:3c:92:dd:dd:9b:c1:aa:a1:3b:83:f7:3c:27:da:92:
4e:a5:8d:68:ba:fa:97:c6:27:f9:15:f5:6c:32:e5:d2:a5:7e:
90:b4:4d:8d:27:c9:4d:3b:09:f3:65:8e:21:45:10:bc:09:32:
33:0e:82:96:5a:34:ce:74:76:bc:5e:c7:04:fc:88:de:b9:7f:
54:99:55:a7:d8:73:07:6e:cf:f8:3d:f8:e7:45:1c:91:4d:80:
86:f2:ef:59:bb:7e:a1:47:2b:43:dd:62:5f:a3:d5:a7:8c:b9:
4c:df:fc:68:46:37:ef:cc:f4:bf:22:a0:e0:5a:07:4a:b5:1a:
6b:a1:8e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:02 2025 by rpki-client