Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: 3vB11C53E7azqAZFoIbsm9sEXkUSFQEBx/T17iIqiPA=
Subject key identifier: 1E:D3:A0:6C:A4:13:FC:32:31:05:FE:F9:E5:94:34:56:7F:61:8D:F9
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 0198D4724D4B8A05F027C2C919DDE2FB58A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:01:57 +0000
Manifest this update: Sat 23 Aug 2025 01:01:57 +0000
Manifest next update: Sun 24 Aug 2025 01:01:57 +0000
Files and hashes: 1: 8GPy1nq-d8qyd5DzcEoD7_wmnRk.roa (hash: VU25KKsH1DHg8pytMPBtSMEdGMuo9BZsAecAtygfZnk=)
2: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: qEX8p+i3NQKYv06P3t7BGUCK5X0GHtLJ9ZL9HJMCVaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:4d:4b:8a:05:f0:27:c2:c9:19:dd:e2:fb:58:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Aug 23 01:01:57 2025 GMT
Not After : Aug 24 01:01:57 2025 GMT
Subject: CN=1ed3a06ca413fc323105fef9e59434567f618df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:19:80:eb:95:f6:eb:85:88:52:3f:eb:76:
32:d7:4f:44:7f:d4:3a:d1:f0:f2:de:f1:1b:ab:e0:
a0:c7:2c:5c:b0:73:c2:58:14:8f:fe:0f:ea:c7:ee:
ac:7b:6e:98:c1:4b:53:87:85:63:cb:00:d0:2b:13:
01:13:fa:11:38:97:60:27:ec:a0:4d:bf:5c:c1:af:
83:d4:da:6b:a6:e2:f8:d1:6e:f2:91:c9:9c:a1:68:
c3:4c:46:b2:b7:33:91:3f:40:36:2c:0b:32:d5:3a:
70:de:f1:28:5d:9c:ea:ea:02:b3:09:b9:b6:9a:58:
c3:ce:17:81:c7:6a:04:d8:9c:b7:aa:c2:3c:3a:ea:
82:4d:9a:37:2c:ec:3b:e9:a6:eb:1c:cb:40:0b:db:
c8:5d:e7:6a:1e:b4:c9:1b:ac:c7:f5:dd:4c:b7:9e:
42:f8:9a:65:89:3e:01:14:8b:ab:97:fe:e3:c6:55:
a5:69:9c:1a:03:b0:e3:ee:60:ed:cf:ac:d4:97:61:
9d:73:9c:f7:66:25:d6:75:28:29:02:5d:11:06:f6:
c4:da:ff:ef:95:b4:2d:ad:e2:da:98:c0:af:fd:4e:
ec:fe:20:87:dc:ef:50:6e:1b:08:f4:b8:69:d1:20:
5c:7d:ed:13:ad:51:ea:c0:d7:cd:e2:3d:b2:b5:4e:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D3:A0:6C:A4:13:FC:32:31:05:FE:F9:E5:94:34:56:7F:61:8D:F9
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d6:37:fc:ed:c1:f1:6f:04:b4:30:b8:de:a8:db:20:9d:e7:
a8:c2:cb:c2:12:6a:cb:43:e8:b9:5c:9c:b2:4f:90:72:54:05:
db:1b:5b:1d:5c:91:e3:94:20:3d:b1:11:85:1b:8e:dc:2c:2c:
4c:db:10:f6:8d:e2:4c:55:5e:06:1e:26:aa:9a:b7:52:49:b2:
af:80:92:7b:ca:1e:86:42:ce:55:f9:df:16:4b:85:28:4d:a9:
15:5f:0b:73:2a:26:fb:3a:6c:82:cd:4a:84:76:f9:db:eb:74:
ba:b7:47:98:55:6b:c1:db:1e:04:5d:fc:c5:6f:a3:3a:e4:7d:
1b:d5:e5:7e:b9:22:93:df:b5:3f:86:24:2a:c4:24:da:0d:6f:
19:a1:71:09:23:5b:c7:eb:04:80:81:6a:4c:16:df:c8:74:62:
26:75:53:65:2d:6f:63:d5:92:f7:f3:b1:e4:30:07:cb:dc:4f:
dd:70:a9:0a:32:10:4b:53:38:83:27:e1:d2:07:68:48:5b:01:
2d:d4:a2:27:1a:29:a1:e0:52:95:42:af:55:13:e0:da:c0:47:
85:09:54:1b:e4:69:2f:f4:ca:e0:c3:cd:0a:e5:cd:1f:dc:9c:
db:a2:a3:14:f1:f8:84:a1:80:d6:2c:25:1d:0e:d6:32:b5:38:
14:5e:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:47 2025 by rpki-client