Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: QMMrpel4mPoskrOWfhVSRChcx//nnQQaSg1q9ETpGQU=
Subject key identifier: E9:0C:2E:95:7C:D7:80:FA:8E:73:3C:A8:16:7F:BE:58:AE:4A:0E:22
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 0198D66101D9D24ABF3BCFE627A394C6B84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:18 +0000
Manifest this update: Sat 23 Aug 2025 10:02:18 +0000
Manifest next update: Sun 24 Aug 2025 10:02:18 +0000
Files and hashes: 1: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: tk6lc01QPOdYAXFtaGFCnb/pW3bFSNp6JP28riTqpko=)
2: Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa (hash: 7yLwIb1VffX9y/T7PbcK03UjKmQOn5ktXM/NbKeEUqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:01:d9:d2:4a:bf:3b:cf:e6:27:a3:94:c6:b8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: Aug 23 10:02:18 2025 GMT
Not After : Aug 24 10:02:18 2025 GMT
Subject: CN=e90c2e957cd780fa8e733ca8167fbe58ae4a0e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:2d:3a:5f:22:5b:d8:bd:53:a1:46:22:28:
99:76:f5:4c:1c:72:f2:bc:65:17:41:61:4e:84:1c:
45:44:fe:4d:6a:a0:2e:50:20:b5:79:60:8f:e4:9d:
5d:c1:68:b4:43:a9:86:46:1e:89:72:77:4b:53:9c:
51:31:b4:b0:da:65:ff:29:b7:1e:4e:06:e6:92:67:
ab:4a:d0:e6:51:a1:0d:d8:27:23:74:d4:df:37:82:
5d:73:29:5b:11:e5:56:3e:3a:de:86:0e:6d:af:63:
3a:52:c2:02:b0:6f:46:e5:16:46:ad:c4:8a:4f:0d:
11:fc:03:9c:04:12:b4:0a:48:ef:28:75:f3:72:1c:
b7:2f:ac:bc:d1:b6:de:4f:76:3c:d8:21:05:cb:9e:
cd:e2:c3:cd:0c:7f:ca:53:df:37:77:af:bc:2e:62:
04:08:bf:8a:b5:13:37:bf:2c:9e:2a:c6:01:74:30:
eb:97:4b:48:a9:92:09:5c:e3:1f:e4:e7:f8:fd:75:
c0:be:5b:86:c6:ef:cc:00:9e:12:c4:84:10:3e:f8:
2d:0a:f7:42:41:42:52:6f:a1:a3:54:25:9b:b5:35:
c8:fd:8c:ff:d2:38:71:4c:4f:ec:23:50:48:52:11:
bc:f4:f2:54:8f:62:9a:28:86:dd:27:ca:7a:e6:5a:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0C:2E:95:7C:D7:80:FA:8E:73:3C:A8:16:7F:BE:58:AE:4A:0E:22
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:55:09:01:73:b4:ff:ae:a6:eb:aa:8b:00:3a:63:b7:e1:77:
b9:30:5f:59:ca:75:08:c2:82:f5:17:0f:34:9a:3c:56:fa:f7:
d4:37:12:ef:4e:6a:96:7a:35:c2:9c:e3:c4:f7:8c:5b:be:89:
6d:86:75:b3:37:55:a8:f1:66:a3:63:02:4f:c6:37:d5:c7:82:
fd:d3:2d:7d:e2:d2:17:f1:33:8e:4c:33:40:0f:86:cd:48:ea:
ab:f5:f2:69:34:b7:2a:5e:bc:31:2f:f1:f9:83:5f:6b:6a:99:
70:e5:b6:b1:22:cb:36:4a:44:31:8f:60:98:22:68:cb:79:46:
b9:d5:0f:ef:00:49:ac:c8:b4:f7:14:0a:83:ce:d4:04:a4:61:
a5:7d:9e:e4:a0:d6:47:ab:40:42:af:1a:62:9e:bd:e6:d8:e0:
cf:d5:27:a3:cb:2a:98:cf:59:74:fa:d9:eb:91:ca:e6:2c:9a:
22:d9:ae:0f:2f:71:f4:0d:25:a5:20:ad:50:3c:80:0d:55:a2:
f0:13:f4:c8:71:b7:6d:71:82:f0:bb:6f:d3:6c:11:3f:40:7a:
f2:92:33:a1:1f:44:68:e1:d2:f9:74:7d:f2:7f:99:23:6c:f1:
51:f6:95:9d:23:e3:a1:82:3b:cf:0e:7c:96:6c:4c:7c:3a:33:
75:96:d4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:51 2025 by rpki-client