Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier: eo3coRpt+mdR7Wlgvwtw82TbpJR7TiEXCeNRzXbh3I0=
Subject key identifier: AF:98:48:82:2C:9B:7D:EC:59:C0:59:DC:23:EF:55:02:E2:02:EA:7D
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 0198D5F1CC08C658F61E6BF1F8EF91BB56A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: af2h2RUuRmyJFocvvwcMhS0MicUreic7xrbBglYX3XQ=)
2: V9zLJ_snXWssBPY1Rmgu3ZTD-rU.roa (hash: hUff0lfnMQTwyppmA7CbM6Vyj9Moq1TvnfUvdLLp36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cc:08:c6:58:f6:1e:6b:f1:f8:ef:91:bb:56:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=af9848822c9b7dec59c059dc23ef5502e202ea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:32:41:1f:58:90:70:d8:1f:ed:5e:d6:df:
33:26:81:9f:4a:3c:84:ad:f9:de:ce:6d:97:48:fe:
46:71:19:91:2e:4a:e0:08:08:c3:ba:51:b7:21:7f:
1b:1e:66:66:59:9e:e2:78:85:50:aa:f1:5a:1a:0c:
b7:1e:ec:2d:4f:fc:be:7e:24:0d:79:12:39:4d:9b:
54:3b:6e:07:b6:82:0b:1a:0e:7d:be:b6:0a:8c:31:
49:5b:c3:7e:1c:e1:5f:57:bb:a8:00:9f:7e:e1:bf:
5d:36:73:b3:b9:02:36:5d:4d:67:7c:69:78:1d:bd:
b9:94:18:6e:53:c3:df:4a:6b:f6:37:69:d4:1d:49:
58:56:bb:8e:3c:4b:f3:a4:0b:05:ba:96:08:48:18:
c7:19:cf:48:1e:8e:06:21:e7:c0:ed:1b:31:19:82:
0f:c0:96:e2:74:f9:63:cf:f1:a3:79:bc:12:e4:90:
5a:59:6a:0f:da:74:8b:87:a5:7a:b9:cf:a6:ca:85:
f1:5e:13:91:17:b5:3b:f9:f4:ef:56:7b:05:cb:c8:
b1:2c:38:13:02:30:be:d2:de:d6:2c:38:b5:b4:62:
c0:df:ab:da:49:75:f7:45:45:db:b0:fd:34:af:7a:
4c:71:fc:c6:60:3b:61:ac:c8:d7:34:0b:92:c0:27:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:98:48:82:2C:9B:7D:EC:59:C0:59:DC:23:EF:55:02:E2:02:EA:7D
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3b:41:6c:7c:da:b5:f5:50:ad:66:28:b2:14:11:85:3e:99:
42:3c:33:39:db:d0:dd:04:ec:f8:02:e8:e8:87:25:52:16:79:
a3:35:ad:ca:d3:85:e5:9e:37:a3:b0:0c:53:11:78:f4:a3:b4:
0c:9c:b3:ad:6f:55:b4:39:b2:cb:2b:cc:f8:51:84:fd:d9:f8:
72:ed:46:05:17:d1:b0:1d:a1:e2:43:e1:67:13:13:98:0f:5d:
bc:2a:3e:fe:38:52:7e:e0:55:2a:55:14:da:1a:c3:34:83:d3:
b9:1e:d7:d7:99:79:e2:0d:31:1e:4f:c6:d3:e8:e9:76:a1:34:
c5:20:09:a3:2f:e8:13:be:3c:27:85:93:90:94:00:ac:74:1e:
46:a3:0a:be:f6:0a:77:81:fe:7e:1e:1d:6f:4f:8b:27:db:3c:
de:ee:53:6b:e1:a6:0c:87:9e:63:af:f6:ed:08:3a:27:77:73:
87:38:e1:89:6c:6e:c9:b9:39:82:15:27:00:12:89:c7:0d:49:
7e:d4:45:98:7f:49:72:13:ec:92:48:a4:48:eb:b1:fb:59:df:
6e:aa:d4:4a:46:c5:65:59:1d:27:04:5e:27:93:cd:2c:58:b0:
fe:9a:d8:6b:8d:c0:fa:28:cd:a4:23:fd:c8:f3:e5:9c:43:f2:
c3:c3:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:40 2025 by rpki-client