Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier: pUjwucxFdJ4QU8gXM5B9A10VWZBVpDITX9bTkOqmZB8=
Subject key identifier: D2:27:9A:18:67:AF:F8:7D:E1:D8:FF:80:94:E4:31:7F:C0:18:43:8A
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 0198D4A7D04AD1C814DC41E670F2A648BD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number: 1659
Signing time: Sat 23 Aug 2025 02:00:24 +0000
Manifest this update: Sat 23 Aug 2025 02:00:24 +0000
Manifest next update: Sun 24 Aug 2025 02:00:24 +0000
Files and hashes: 1: C_ziNaXKn4VDpbrAEu9weVF52JA.roa (hash: uW9Tu1YIQ5nRvRVJvhMOdJvsptWQiAhpmFSnfRGl4eY=)
2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: TFvzPw1fHoLMs3JSz3/APpGowbym8Xuu5Hwp5n6geds=)
3: bOLd_g3LzxzjAnCOuuC_Q_9gA6k.roa (hash: 5Jf6m6sD98CMKb3WTweoZbVfKZTiMzSlEHYjt0bnWhE=)
4: uqUylZbw2V7XHMMPlt0smOkdOBE.roa (hash: 3G9ODJS5eJVlImugW9SB7DFrUNhhTxGc7u4YCGLBIF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d0:4a:d1:c8:14:dc:41:e6:70:f2:a6:48:bd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Aug 23 02:00:24 2025 GMT
Not After : Aug 24 02:00:24 2025 GMT
Subject: CN=d2279a1867aff87de1d8ff8094e4317fc018438a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:d6:f1:91:95:79:c0:c9:66:54:f1:c1:75:
7f:59:28:e4:4f:55:93:20:00:1f:28:bc:e4:ed:cf:
9a:b1:e5:d1:35:bf:81:d5:14:45:ed:a3:40:b3:4f:
30:8d:b6:0f:3b:3f:08:56:a1:4b:8f:ae:7d:e4:03:
43:37:21:ce:97:8a:e2:4c:6d:d2:54:9c:c8:27:81:
44:d8:48:d8:2e:0b:bb:bf:05:26:c5:31:f5:65:6e:
86:ea:a1:fa:2e:96:1e:55:21:7e:30:e3:6c:e0:26:
2e:a1:7b:17:ac:3d:02:cf:ae:cf:64:9c:a3:9b:d5:
5e:dd:9a:0b:08:5d:a8:68:19:c8:74:bb:12:23:5d:
4f:97:f3:b8:d9:5c:94:1e:a8:b9:ca:c6:9c:d7:89:
96:2f:61:ca:36:36:1e:6b:63:ad:5a:11:6c:6e:de:
00:f4:c8:12:4f:72:9b:1f:97:03:33:81:1e:6c:cd:
7e:40:d6:c7:38:ff:1e:15:0c:5e:76:ff:6f:85:7f:
8c:ad:62:8b:b3:16:23:96:53:a3:be:e6:2d:58:26:
66:b9:21:91:07:4c:67:5a:e9:b1:45:08:ed:51:cb:
44:29:3a:4b:71:0d:ed:fb:58:2b:ef:4b:a5:51:5f:
7f:bb:10:9a:eb:dd:31:ed:6e:a1:50:69:10:93:3e:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:27:9A:18:67:AF:F8:7D:E1:D8:FF:80:94:E4:31:7F:C0:18:43:8A
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ca:6a:69:7e:99:85:7d:41:43:4f:d4:71:27:ab:93:9c:26:
93:30:03:e4:24:a5:ba:c2:49:65:3e:8d:3d:aa:ce:26:67:51:
46:25:3b:04:7f:e2:bc:c4:c7:bb:ae:8b:5f:6c:7a:ee:78:1f:
18:52:6d:57:54:6f:0b:c2:07:89:98:94:47:5d:85:ed:1b:6f:
df:13:e3:a6:9e:b4:82:2f:82:6b:90:22:0c:18:30:ff:cc:fb:
84:b7:80:08:b7:5c:7d:46:37:04:f8:6c:d4:c2:c4:72:ad:b9:
72:c6:79:42:34:a2:f1:1d:6a:d3:fb:09:20:82:5a:b7:44:d7:
61:23:72:df:85:fc:e5:62:29:f7:d9:bf:0a:4c:41:1a:01:5e:
36:e3:02:4e:f9:97:f6:59:bb:9e:43:9a:5e:e7:8f:b4:af:ab:
d3:ee:06:5a:ed:ed:b7:ba:0f:de:5a:ef:22:6e:fa:39:19:2c:
b8:fe:87:52:93:52:39:b6:bc:9b:1e:ac:19:5b:d3:11:0b:66:
63:a9:49:c8:a1:4a:1f:53:47:c2:61:43:ae:65:6c:c0:1b:7f:
26:23:3b:c2:40:a1:2a:dc:05:d3:61:19:e8:f5:b9:9b:a2:ef:
c3:73:27:64:55:d5:a1:75:fb:3d:f4:fb:53:3b:7f:bf:89:13:
75:1d:34:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:35 2025 by rpki-client