Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier: yjAvBwi/sAgy/vrYzo8VpwciBuhTondC27Ouo0mIIv8=
Subject key identifier: 24:79:9E:42:D4:FD:D8:CA:FC:B8:27:A9:F4:9C:92:34:2E:6C:6C:D7
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 0198D5159118AB248565C73C29803F0DB667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number: 0BD4
Signing time: Sat 23 Aug 2025 04:00:17 +0000
Manifest this update: Sat 23 Aug 2025 04:00:17 +0000
Manifest next update: Sun 24 Aug 2025 04:00:17 +0000
Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: uXa3Ym/3nnulrZNrJZattz5mfgH5ZzfWrCOHTCGiTZ8=)
2: IMYt28KGsc1J7qdCJ8FZoivbBms.roa (hash: Lt2Qrrojs7l5TEl9OlYCV0+zE4iekqC1xALJxPDqCnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:91:18:ab:24:85:65:c7:3c:29:80:3f:0d:b6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: Aug 23 04:00:17 2025 GMT
Not After : Aug 24 04:00:17 2025 GMT
Subject: CN=24799e42d4fdd8cafcb827a9f49c92342e6c6cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:28:80:41:7b:56:f5:9e:04:7d:ae:0a:07:
e3:b1:18:a4:a6:98:13:6a:90:03:2a:9e:7d:e8:c1:
7c:ff:75:fe:4f:e6:d4:a1:8d:27:b5:17:86:23:2e:
df:b0:8b:1e:13:8f:43:09:9f:b8:34:3c:fb:bf:e2:
b4:74:dc:a1:66:30:b8:97:73:6d:f7:a7:86:ba:64:
b9:37:d9:4a:41:e7:16:1b:1b:c5:1e:e0:b7:36:86:
33:7d:63:46:6c:59:c6:90:54:05:43:36:57:42:68:
2a:5e:e7:8b:7d:24:26:80:d1:34:48:7d:db:9f:83:
74:ef:eb:2d:fc:af:1a:6e:37:3d:02:47:79:8b:05:
f7:82:ef:e9:b3:32:f5:42:3e:d1:e2:bc:f4:7c:3a:
2b:17:f1:d8:be:cc:1a:36:9c:c5:90:0b:9d:bd:8a:
a5:0c:fc:7a:97:1b:78:85:58:03:67:6f:a1:8f:14:
0b:b3:66:6f:ca:6e:bd:05:a8:77:e9:d7:51:aa:e8:
a9:9c:9c:0a:ec:f8:0c:59:dd:65:d0:60:d6:fb:00:
c1:9e:78:d8:5f:af:87:4a:73:2d:93:70:37:3f:30:
f7:af:ed:a8:44:e8:b8:9d:7d:22:50:8f:d4:8c:7b:
b8:23:3e:b1:74:d4:10:43:9b:64:62:82:10:69:29:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:79:9E:42:D4:FD:D8:CA:FC:B8:27:A9:F4:9C:92:34:2E:6C:6C:D7
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:25:d3:48:f7:f4:c9:92:a7:b0:1f:8e:5e:33:b8:ce:6f:2b:
fc:fd:62:0e:d3:fe:c6:55:5f:71:a8:ac:de:da:d7:de:dc:6c:
a3:4c:24:0d:45:ac:9c:6f:2b:5a:8b:52:ab:50:26:20:f1:61:
2a:eb:60:80:29:e3:8e:f4:33:04:24:05:a9:f1:5d:5d:35:cd:
db:78:9f:69:07:a2:9b:f0:b1:d2:05:ea:31:a0:6e:dc:4d:d0:
66:a5:d7:af:5f:43:28:03:13:b9:31:46:2e:ab:77:b5:43:64:
68:67:c4:b5:78:65:aa:fa:67:6e:ee:85:d2:c8:4b:19:ed:1d:
57:cc:7e:48:dd:bf:ea:33:b0:e7:cc:7c:d0:6b:d1:16:f2:11:
14:06:91:8e:3a:aa:5f:c8:77:99:7b:a7:13:72:c2:57:40:cc:
b5:64:52:f0:b9:1f:98:5c:68:63:d5:28:70:29:4b:df:f2:a0:
bd:0a:1f:47:58:85:0b:20:ae:ea:cd:fb:8d:f2:62:b5:18:8d:
64:3a:2b:e0:61:d8:1c:1b:c7:46:78:32:83:b5:41:d8:5d:c9:
47:a9:1b:b9:64:cd:49:13:1c:52:20:47:63:85:81:dd:d3:c5:
f3:59:69:cb:ba:30:29:00:3a:50:e3:2f:09:b3:f1:85:67:c3:
88:ce:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:44 2025 by rpki-client