Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: MvoQdE6cnuniQ39QG9DH+JD3gRCr6RbmwKkw1G3xIBs=
Subject key identifier: BD:A4:0B:C1:26:02:A0:96:9C:5B:7C:00:F2:9E:5B:FF:1E:F3:68:96
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 0198D660309481CF49632892EBD897471FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:24 +0000
Manifest this update: Sat 23 Aug 2025 10:01:24 +0000
Manifest next update: Sun 24 Aug 2025 10:01:24 +0000
Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=)
2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=)
3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: JOdOwxDABsb6N8HK3LsqYjTjMRmcEqX4J5pIErBD13o=)
4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:30:94:81:cf:49:63:28:92:eb:d8:97:47:1f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Aug 23 10:01:24 2025 GMT
Not After : Aug 24 10:01:24 2025 GMT
Subject: CN=bda40bc12602a0969c5b7c00f29e5bff1ef36896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:dc:26:02:b5:ef:66:c2:fe:bf:7f:25:7e:
d8:de:0a:f4:e9:b1:e2:04:15:7f:f7:bb:43:a4:cf:
10:f5:86:98:32:d8:cd:3b:a5:ed:9c:b7:c8:64:bb:
29:b8:0f:52:cd:5a:bb:fd:52:7b:8a:8b:f4:c8:82:
12:80:d3:bc:f1:59:8a:54:75:aa:6c:2b:f4:3f:20:
3c:b0:2c:40:b8:56:d8:6f:92:2f:b5:b1:59:66:02:
a8:1c:42:61:b3:e0:05:10:e1:6c:74:a4:8d:33:3c:
a5:61:2d:c1:e6:2a:2b:17:a6:25:ff:44:c2:ee:b4:
fb:0d:da:53:c0:0a:df:96:66:61:88:27:84:5c:e9:
40:ee:aa:46:f6:a3:9b:cb:3c:e1:1d:7f:40:1e:2f:
ef:86:5d:a8:08:c1:00:35:ff:b1:72:92:0c:1d:c7:
2a:b0:21:1f:83:7d:c1:13:bb:4d:29:46:1c:f8:d0:
92:e8:00:66:fb:43:57:54:59:bb:be:c3:60:4e:26:
ac:86:01:ee:7b:3e:3f:4f:46:74:74:0c:9c:18:84:
58:44:8d:f4:d0:5c:df:7c:a2:02:1a:ae:df:c7:14:
30:76:d8:95:96:2a:ed:b7:0f:3f:61:0b:e6:b6:f8:
ed:12:0a:ba:cd:c3:78:56:40:8e:a3:68:4f:5f:d2:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A4:0B:C1:26:02:A0:96:9C:5B:7C:00:F2:9E:5B:FF:1E:F3:68:96
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bf:ac:47:2b:a9:2e:d1:15:30:fb:b0:1f:89:5d:84:50:4d:
4c:41:da:64:58:6e:2a:96:b5:36:ef:2d:59:d1:53:e6:9c:86:
67:c5:75:ad:cb:1d:8c:0f:c5:24:24:68:b4:4c:73:ec:18:5f:
3b:89:14:14:a7:6f:13:9f:87:23:b3:f5:3a:fe:92:85:00:b8:
23:b5:f6:e3:c6:b0:95:92:78:d1:a8:61:51:c7:da:af:d0:a4:
66:15:32:08:84:f4:85:23:32:a5:4c:69:28:b6:d3:b2:9e:48:
3d:4b:92:eb:da:7a:1c:29:34:18:66:34:2c:d6:2a:4d:d8:56:
83:eb:fb:d2:09:33:93:ec:8d:3d:e6:e4:19:c8:67:5c:ea:f3:
a2:5f:f5:8b:fa:99:b1:0c:1c:42:dd:b5:c0:44:4c:2d:ad:77:
ce:55:ba:ef:7e:60:a6:e9:01:66:2f:ca:7e:39:43:ee:22:cd:
8f:c0:e3:2b:0c:69:dc:33:49:fd:f8:6e:85:ec:11:c8:fa:e3:
08:e3:de:70:dc:47:43:37:96:35:bf:80:03:62:db:71:e3:a8:
67:ce:05:c7:5e:33:2d:72:c1:e1:17:d7:49:4b:4c:73:83:18:
7a:a8:c7:48:26:58:c7:a8:cc:9a:c0:92:45:a1:64:89:ce:2f:
b6:d6:1a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:25 2025 by rpki-client