Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: YDT4EUu9HREq3qvTrNwZsMdlNJinLePXW4lZdZvaaqA=
Subject key identifier: 79:87:26:C2:AE:AC:21:1D:A3:05:20:E0:1E:F5:98:24:5F:0A:66:F5
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 0198D4DFEDD9709052AC99A89A90EA63C3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 126A
Signing time: Sat 23 Aug 2025 03:01:41 +0000
Manifest this update: Sat 23 Aug 2025 03:01:41 +0000
Manifest next update: Sun 24 Aug 2025 03:01:41 +0000
Files and hashes: 1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: ea1EBkC40L2T4dlbaDeMvg7dyH9iYlwV+NQbypnYwlk=)
2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=)
3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ed:d9:70:90:52:ac:99:a8:9a:90:ea:63:c3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Aug 23 03:01:41 2025 GMT
Not After : Aug 24 03:01:41 2025 GMT
Subject: CN=798726c2aeac211da30520e01ef598245f0a66f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:fe:95:87:e6:59:97:1d:a1:0f:79:fb:cb:
5a:bc:d8:78:4b:11:00:f1:fa:b6:8f:30:cb:13:74:
86:4e:90:4c:1f:88:e2:bb:f4:bf:c3:5b:59:81:12:
d1:c8:4d:a2:34:9f:f3:c8:26:c9:55:3c:25:29:14:
ce:b7:a4:80:c6:ba:3e:54:5b:47:e2:e1:61:d9:14:
b2:a3:ff:9b:a2:aa:b5:13:fc:f4:8e:a6:b1:e6:43:
97:65:e0:40:c2:ca:14:22:e1:64:5e:68:8c:85:d6:
e1:e7:ae:ee:96:49:21:a3:34:07:a1:7f:0f:50:e9:
9e:62:42:ed:32:ba:ad:e3:95:12:dd:63:66:42:db:
0a:b6:34:68:c9:46:e6:2d:37:77:cb:31:8c:a0:67:
16:d2:d0:9b:45:a8:3f:51:d6:d5:b3:dd:42:73:e4:
8c:72:94:c7:6c:c4:5b:c5:fc:70:fe:a6:e0:5e:d2:
3e:26:6c:7d:58:e3:a5:f1:48:be:d9:4c:92:8e:f7:
64:4e:fe:41:66:11:f2:50:8c:14:19:a7:db:f5:0c:
78:d7:c8:4e:57:28:92:2b:62:10:f2:e9:c2:e9:51:
da:81:94:fc:62:06:ae:72:46:30:54:c8:2f:7b:05:
44:05:3c:6e:92:d5:29:1e:b3:09:84:14:11:79:2e:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:87:26:C2:AE:AC:21:1D:A3:05:20:E0:1E:F5:98:24:5F:0A:66:F5
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:93:8e:d6:fd:4a:c9:c8:e8:c2:81:e7:18:60:3d:cb:1c:cb:
8e:dc:19:be:6e:c8:ac:22:94:ad:69:f5:74:d3:2d:1f:45:5d:
69:20:99:4c:55:15:31:81:7a:93:f9:4f:85:07:76:0e:8b:b4:
29:d0:84:ce:27:0b:b8:95:65:db:0a:23:3e:6f:6f:78:4a:55:
ee:5c:fa:2e:e7:ca:f7:2b:93:cc:20:3a:8f:9a:51:27:93:01:
d7:52:44:ba:e0:d0:d5:88:ad:5a:88:4a:0d:57:1a:80:26:ba:
b9:06:6e:d7:51:2a:88:50:51:46:17:2a:cf:c4:94:c9:d5:a1:
e7:06:7c:0b:85:20:66:94:a2:b8:cb:f7:79:9b:b0:88:56:7e:
30:23:4b:fb:8a:57:a1:78:36:fd:a8:2c:7b:e4:f2:6e:16:b4:
93:0e:fc:ea:a5:08:34:eb:b0:3e:79:1e:a0:aa:57:25:4f:e9:
91:a0:a2:7a:f2:ae:86:c8:56:5c:d6:43:44:e6:dd:cf:d0:46:
0e:a3:4d:81:ce:2e:32:0e:1e:71:1f:9b:04:4d:a8:7e:cf:13:
f1:f2:44:8e:6e:c4:45:cd:2a:ce:e0:db:5e:6e:4e:52:0c:ad:
04:0e:e6:0c:82:ec:6e:26:c6:82:db:fe:82:16:34:ba:f6:58:
66:62:93:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:12 2025 by rpki-client