Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
File: dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft (raw, json)
Hash identifier: CBlOuSDnnzU3vniulbXz4jG8wIFR/I3x4NvKv4CmIjU=
Subject key identifier: BF:25:CB:C6:51:6F:24:C1:0D:7E:85:86:20:46:AE:1A:60:C9:9B:8C
Authority key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
Certificate issuer: /CN=769a0ed13591d4b84ca79a8eb577226076651a14
Certificate serial: 0198D66000D4862C2807C14C5625C583C6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
Manifest number: 0A58
Signing time: Sat 23 Aug 2025 10:01:12 +0000
Manifest this update: Sat 23 Aug 2025 10:01:12 +0000
Manifest next update: Sun 24 Aug 2025 10:01:12 +0000
Files and hashes: 1: dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl (hash: fHrSjSwXJzLtlfBWpimivJxmNC0M+r0XQhtR3fRNYtA=)
2: r2xenfWR41SW-pcJkK2n6k9oW9c.roa (hash: 9h5yss6Wot3H0ZXysamwxUCIRFlANswYmfwPee5G6HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:00:d4:86:2c:28:07:c1:4c:56:25:c5:83:c6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769a0ed13591d4b84ca79a8eb577226076651a14
Validity
Not Before: Aug 23 10:01:12 2025 GMT
Not After : Aug 24 10:01:12 2025 GMT
Subject: CN=bf25cbc6516f24c10d7e85862046ae1a60c99b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:e2:dc:1f:c6:4e:9d:39:0b:a6:8a:08:f9:
cd:f9:9a:27:26:6b:91:78:ae:fd:c3:f1:bc:19:2b:
d3:df:ef:72:d6:bd:a9:75:42:ae:15:62:11:5a:ea:
8e:79:a3:64:7d:a3:f6:34:a0:e0:2f:51:d0:8e:a6:
6f:72:54:33:2d:87:84:78:67:be:39:09:85:d1:68:
d8:d1:ac:13:1f:ce:e1:0a:7f:1c:3e:c0:6d:67:e4:
03:d5:32:21:bd:3e:3d:ab:42:a5:38:3a:60:0f:b4:
e3:fb:22:c7:72:d0:7d:48:19:ff:56:0a:fc:9f:37:
03:0b:c6:72:2b:58:ee:1b:1b:cf:e6:65:3b:da:24:
65:11:a4:9e:5b:2b:5d:27:4b:b2:16:13:c5:2b:2e:
7f:bd:a7:b1:f3:b8:09:d4:4d:a7:35:d4:fa:60:32:
a5:99:69:94:35:fa:24:98:db:0f:5c:fa:38:d5:a9:
af:1e:f8:67:26:42:19:5c:7b:49:a0:02:26:4a:c4:
6d:88:81:cf:07:53:ac:e2:dd:20:9b:f7:81:c3:6d:
2b:fa:4b:c5:0c:56:cb:ec:19:d1:1f:eb:74:c8:b0:
63:57:dd:50:4f:59:12:d8:9f:8f:55:8d:cd:ea:14:
85:cb:7d:a0:a4:77:d9:ac:a4:5f:05:b0:4e:57:49:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:25:CB:C6:51:6F:24:C1:0D:7E:85:86:20:46:AE:1A:60:C9:9B:8C
X509v3 Authority Key Identifier:
keyid:76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:03:4a:cd:de:fd:6e:2c:4f:74:81:4c:5b:ea:6f:48:ef:be:
b6:38:8b:9f:b3:23:24:8c:25:23:5f:80:ce:d0:a9:98:bc:23:
ad:6e:a0:fd:7d:3a:bf:a5:e2:04:93:eb:f9:2f:75:2e:83:78:
3a:8e:89:c3:32:dd:91:e3:26:9d:42:bf:8c:c1:a1:b1:d6:38:
da:51:78:9d:6d:a3:91:1d:d3:21:9f:a1:e9:8d:90:ce:3d:1e:
aa:91:62:2b:65:fa:ae:8b:06:23:a1:e0:39:58:b7:e1:ac:49:
73:47:3d:e4:3f:21:07:fa:5a:49:75:bf:59:23:d6:41:76:40:
05:57:7a:cf:b5:50:9a:f3:ba:86:a3:3d:e9:fd:24:e5:c7:2c:
5b:be:bb:f3:af:a6:ea:ac:fc:af:c1:79:52:9d:46:14:90:7a:
ec:0c:d8:ee:61:f1:83:ba:29:99:6c:01:a7:dc:af:a9:5e:5c:
0b:c3:4a:14:26:e2:88:30:77:9e:fe:1c:58:4b:82:bf:c1:97:
d3:b9:bb:5c:2d:ff:ec:2b:32:74:02:7e:be:5e:56:31:5f:b8:
8c:fd:9b:3e:6f:97:e4:5b:17:9f:17:1c:c5:f7:1e:45:18:69:
e9:bc:50:d2:bb:2e:d7:ac:8d:77:8e:de:f3:cf:4c:31:a1:b0:
2b:74:31:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:40 2025 by rpki-client