Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json)
Hash identifier: RYP6Vr1wle8QSk5rGmFWksvv9YGYxRKbni6QgLOEYLg=
Subject key identifier: 29:74:93:91:3C:27:BE:8E:DF:BD:95:62:19:5A:C5:C2:A9:A3:42:37
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0198D65F71EE0F03CD8665C4C8066B1D33F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
Manifest number: 0B80
Signing time: Sat 23 Aug 2025 10:00:35 +0000
Manifest this update: Sat 23 Aug 2025 10:00:35 +0000
Manifest next update: Sun 24 Aug 2025 10:00:35 +0000
Files and hashes: 1: IjTxYypUMPd9vNvxDH7e63Vss-s.roa (hash: ddL2vaX8z2K9wMCm5nW5FRiHC0CRdW6lG+EEvQKzKbw=)
2: T2MgSfJhA--awsv_yLzhSgCTR5o.roa (hash: WyuHaMn+gG0jVz0dGyAqt02pX4u9yt+Uj+QT07hTOKI=)
3: UY_6W8Weiu8wfSraZN42RZZCh9E.roa (hash: v6nlIIdPdLR7D5BuTrHHAZdgu5wLraNYTQd+Byp51pA=)
4: bpthfOzMCHmNWPoyMwo5XIQPCUQ.roa (hash: VtftbkCJkVOtxURtiBDwhwZ/TrioGRiRetZ47whwsMM=)
5: c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa (hash: AvwD63bIF1X5ZQR5fhuIKgABQi3TuCqXO/815QhlfiQ=)
6: lnoSZUl-KAxHgvChTMMkabDVOZE.roa (hash: MW0GEHPEt15f0rFl2wirejWxs1Jn9X63PZPwnku/3cI=)
7: lxlWJPcAj7vgwHk2Hyt3CXNN6xs.roa (hash: 2V4JLadPHaMoMNiFHz0+pVFh6WwhhrJwcPkeEfLnUuY=)
8: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: 0TL6A5MqRKLgc5BuD8GkicKMW5KyuyuKiDqXCfbZRPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:71:ee:0f:03:cd:86:65:c4:c8:06:6b:1d:33:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Aug 23 10:00:35 2025 GMT
Not After : Aug 24 10:00:35 2025 GMT
Subject: CN=297493913c27be8edfbd9562195ac5c2a9a34237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:84:58:e2:f6:eb:1d:c7:db:e3:17:cb:3f:42:
21:8c:05:fb:d5:df:e5:bb:0f:2e:24:de:4b:7d:c0:
04:5a:20:07:4e:49:8a:13:02:6f:a6:c9:29:a8:58:
6a:7c:26:2a:9f:c1:d8:ec:13:15:05:e8:c0:80:e5:
b7:8c:11:45:d2:13:83:f5:8c:5e:ab:ae:7b:f4:bc:
33:60:04:c0:60:e1:02:8c:b4:a3:be:2c:86:51:28:
0d:b6:93:e7:a0:0b:35:3a:a0:1e:9c:81:fa:80:bb:
5f:34:b1:c8:ba:e7:c4:3f:19:7b:49:ef:54:4e:1b:
4f:26:45:9a:d8:55:56:4a:68:1c:0f:ed:55:a4:02:
0d:a3:d6:9b:1e:c3:fb:51:4d:b0:6e:5c:37:21:db:
09:4e:2f:3a:52:6b:77:b4:97:ad:b6:6e:bc:1f:9b:
00:3e:85:c5:89:d4:8d:c1:23:ed:e4:ee:f1:65:ee:
b4:7d:85:cf:b3:ba:67:85:0c:6b:1f:63:c3:31:68:
a6:6f:f7:73:17:a5:a1:c1:c4:bf:df:b0:dd:b0:89:
77:86:fb:1d:39:b3:46:38:4f:c0:28:e8:f0:a5:22:
71:b7:d5:56:e4:2f:9f:48:ad:b1:dc:18:e9:93:c3:
cf:12:fc:65:d0:7c:cc:4a:e1:5e:f7:87:37:d3:20:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:74:93:91:3C:27:BE:8E:DF:BD:95:62:19:5A:C5:C2:A9:A3:42:37
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ec:59:5a:95:79:da:f1:51:ed:f2:da:cc:26:67:6c:d2:07:
82:ec:17:59:29:68:84:54:0a:96:9e:bc:0a:77:05:b3:5c:76:
fa:58:15:ef:21:45:bf:6c:16:43:93:fb:86:23:73:8b:71:bb:
bf:ed:4f:48:a2:6c:b3:ce:5b:76:70:d6:8a:43:7c:32:3b:cf:
66:c4:d1:39:18:26:0d:9c:47:64:37:e6:a4:96:9e:94:dd:64:
7e:3e:f1:88:c1:75:3f:a3:95:62:e2:4e:6c:b0:e9:c9:9b:79:
ed:9e:de:05:ee:d8:f9:33:12:d9:4f:03:fd:ba:f7:5b:2c:80:
12:b9:c1:8e:b7:ac:f8:12:1f:10:17:f6:15:ef:42:ed:b3:83:
8e:dd:b5:58:80:69:15:2b:9d:56:46:ac:37:be:88:04:41:79:
dc:92:25:ab:68:e1:88:33:b4:82:78:b2:11:12:26:28:be:7d:
2f:d6:89:42:17:8e:78:3d:26:91:bc:4e:53:51:9d:f3:9a:eb:
f5:53:09:8e:e2:c0:07:17:1e:ec:3a:05:27:d0:73:0e:48:1d:
6c:e9:b3:6e:32:6d:aa:5d:fa:c4:6a:2d:d9:4b:87:82:f5:a2:
22:9a:18:8c:08:b7:19:d2:3d:a9:c6:7c:06:51:94:fa:e6:18:
5a:c3:1c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:03:35 2025 by rpki-client