Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: 3F3K7YgIgSElPKu2NYWrSFqSM+OMVkyzoov1kegQf6s=
Subject key identifier: BE:C8:DB:90:C0:62:29:34:8B:D0:2D:20:11:C4:47:2E:CB:C9:23:64
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 0198D5F13CDF0ED7696F95ADB7F4F126E3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:13 +0000
Manifest this update: Sat 23 Aug 2025 08:00:13 +0000
Manifest next update: Sun 24 Aug 2025 08:00:13 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: YT6/W0gfB9G1LSHP877F/agQxqDUr0/tIn1vxr1uzKo=)
2: Z7WQLysLOr9KTXHt3eRvtbiWeZo.roa (hash: fdaTiSBPfJFKIhyYKXlfKo3BVE4saxPRnib+dEXPrFo=)
3: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (hash: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3c:df:0e:d7:69:6f:95:ad:b7:f4:f1:26:e3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Aug 23 08:00:13 2025 GMT
Not After : Aug 24 08:00:13 2025 GMT
Subject: CN=bec8db90c06229348bd02d2011c4472ecbc92364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:fb:5d:6f:dc:19:0e:38:01:c7:42:fb:e0:
68:80:67:c6:ff:37:ab:cd:79:5a:1b:97:5e:50:ee:
00:8a:2d:0c:8b:01:25:45:6b:8d:d6:6c:f2:ec:de:
b0:8c:a6:7c:c5:fa:64:f8:30:6d:1c:89:14:15:7a:
85:93:bb:64:6e:26:b5:ee:9c:42:9f:2a:2b:29:39:
22:37:94:3e:43:f3:d1:d6:9d:61:51:27:40:51:fc:
0e:e8:08:a3:44:63:78:1a:4b:4b:3f:fc:e3:a9:b8:
67:a0:78:c1:79:f8:78:3a:13:2d:e3:74:0b:1e:d1:
39:35:2f:51:29:14:22:32:2f:ad:73:46:c9:1d:57:
50:6a:f6:47:34:e7:97:ad:c7:a8:6b:19:ff:71:92:
9b:6d:c5:b3:44:96:c4:3b:17:67:e4:1e:53:85:56:
9a:91:8c:9b:7a:6a:e5:fe:04:4d:0b:6e:e0:84:92:
ae:38:57:f9:30:2e:ea:ba:8d:62:7f:3b:6c:7f:11:
36:8e:55:46:70:70:4c:f7:68:d7:46:a7:4c:24:84:
e2:5c:cd:48:4f:8a:23:18:6b:33:9d:e8:3b:f3:3f:
21:99:a4:07:14:06:90:d1:d0:27:71:81:7c:e7:71:
70:ea:d6:89:e1:56:08:c1:55:4e:a6:e2:a1:1f:cb:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:DB:90:C0:62:29:34:8B:D0:2D:20:11:C4:47:2E:CB:C9:23:64
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:97:ed:e3:e1:45:08:de:08:b3:b4:d3:88:6b:08:08:2f:bf:
dc:b1:ae:75:0d:1d:23:ee:6f:ad:31:ce:21:1e:fc:78:bb:df:
f2:73:f4:8a:e0:8a:88:bf:e9:6a:4c:fa:5d:18:14:3d:96:40:
12:2e:2d:3e:0f:4e:5d:b2:d2:df:c3:72:7a:b6:73:92:dd:e9:
11:b5:ff:db:5c:ab:61:6e:fe:da:22:fa:f1:b3:47:24:57:81:
84:c7:81:92:73:46:51:c4:5c:e6:6e:58:46:dd:8f:4e:51:18:
85:26:53:05:9d:58:0b:6c:88:3c:c1:cb:0f:67:92:56:82:4b:
e7:3b:02:65:6d:1f:91:73:f3:c1:76:33:d3:ca:d2:ad:a4:6a:
23:72:2a:5a:f1:6d:40:57:9c:c3:69:0e:01:2a:ca:b2:b5:49:
5b:e6:3e:43:50:85:36:f4:5e:44:e1:58:a2:43:eb:fb:2a:20:
64:a2:e3:34:57:25:8f:c7:7d:00:a9:f3:c2:f6:06:1b:37:8b:
2c:a1:1b:88:32:3d:cc:09:c5:13:6b:66:6a:cc:bf:6c:ac:32:
b5:db:05:1e:d2:92:a1:26:90:05:77:a3:3d:cf:5c:66:51:a2:
f3:50:59:c8:5a:fa:33:25:0b:03:47:8d:45:72:98:14:c8:be:
02:2b:b6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:03 2025 by rpki-client