Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
File: D5XJyafxmprXF-TapTDIXPmauXU.mft (raw, json)
Hash identifier: OUxulqHUjSuSFBmOYejlwmZd69KGQ6AD3X7l2M6lDTs=
Subject key identifier: CD:2E:7D:26:17:00:B5:91:1D:81:DD:1C:52:96:35:9F:22:0F:84:94
Authority key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
Certificate issuer: /CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Certificate serial: 0198D65F41269C871264E042DD83F1FB2556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
Manifest number: 067A
Signing time: Sat 23 Aug 2025 10:00:23 +0000
Manifest this update: Sat 23 Aug 2025 10:00:23 +0000
Manifest next update: Sun 24 Aug 2025 10:00:23 +0000
Files and hashes: 1: D5XJyafxmprXF-TapTDIXPmauXU.crl (hash: ZCPR8hQLtyYpV0NnusoIOY24CEGm4x5rDo8NIEqPl/w=)
2: dJjjOIsvcmwG1yw0BY5P71sFVUw.roa (hash: 71ssAltTmbpploHF43pU09n+JXavvKYPHb8mMd4Firs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:41:26:9c:87:12:64:e0:42:dd:83:f1:fb:25:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Validity
Not Before: Aug 23 10:00:23 2025 GMT
Not After : Aug 24 10:00:23 2025 GMT
Subject: CN=cd2e7d261700b5911d81dd1c5296359f220f8494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d8:f2:98:f7:dc:85:4b:30:8d:54:87:0b:66:
ac:12:5a:50:21:fc:30:53:c9:3b:c4:86:3f:76:15:
21:93:ca:d8:bf:6c:c4:77:93:48:1b:5f:b1:6b:a2:
a8:70:e5:15:03:a5:98:68:71:79:17:11:44:0d:41:
57:34:55:51:c2:c1:6c:b4:22:8b:bd:66:59:b8:85:
3c:ed:14:50:9a:45:18:03:88:bf:c0:37:e6:93:90:
06:de:a3:34:bd:64:b2:3d:e9:73:a0:91:1e:3a:f3:
14:f7:10:78:67:fd:e3:ab:78:ec:2d:7b:4f:02:56:
bc:91:4a:83:5c:2b:fc:0d:de:d8:3a:72:23:2c:ee:
3a:af:8e:b4:b9:d1:88:1d:e4:cd:3e:56:fe:04:84:
b9:42:6a:20:59:58:4b:09:2f:c5:fa:71:c5:75:cf:
d2:b0:e5:3e:52:8e:37:d8:52:9a:4f:57:56:80:5f:
d5:7f:69:ef:04:9c:d0:56:4f:48:16:5a:78:b2:ff:
51:99:58:b2:27:42:07:84:51:7d:5b:a3:c7:69:a8:
16:19:f5:c2:88:b1:c3:23:eb:e1:b3:aa:03:e1:16:
29:e4:b1:fe:5c:f5:e8:03:2d:9b:4c:93:ae:9f:f3:
28:04:09:f7:aa:6c:c3:8b:c6:1e:f0:82:39:96:a2:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2E:7D:26:17:00:B5:91:1D:81:DD:1C:52:96:35:9F:22:0F:84:94
X509v3 Authority Key Identifier:
keyid:0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cb:09:f8:73:61:94:d5:0c:ff:2a:8f:a2:62:71:c0:3a:51:
0b:cb:d2:45:7c:9a:56:ff:cd:f7:bf:87:a7:1c:85:03:8b:7f:
64:a9:57:fe:d6:02:e3:77:a6:05:77:ff:7e:93:96:0e:9c:ee:
eb:3b:a9:6c:57:1c:33:2c:70:14:cc:54:c3:a8:ef:34:d3:6a:
8b:a1:fa:14:ee:0e:7a:ec:e3:0e:4e:1e:d1:98:a7:cf:1e:d6:
e9:07:ee:3d:02:34:bc:2e:70:77:2f:7f:d5:86:c4:23:a4:ff:
38:ca:5e:6a:0e:2a:37:c0:c3:6a:6a:b0:ad:9b:78:d2:3e:1d:
19:94:17:d6:23:0d:18:99:40:14:fc:bb:40:0b:b3:7e:4d:62:
2a:63:20:fb:92:71:4e:9a:e9:c7:c3:51:bd:34:56:34:a8:63:
fc:04:73:47:ad:9f:e3:5c:b7:b4:a0:ec:30:29:ff:69:46:89:
a8:5b:51:3c:28:d6:5d:93:a1:f9:26:a3:b4:55:58:e2:b2:26:
75:e8:ad:eb:0d:39:24:b3:5d:6e:3b:c9:bf:7b:ab:9c:20:2b:
29:5c:56:9d:61:45:0c:00:ed:b9:6e:ed:58:28:20:6c:11:cf:
bc:f5:e5:07:ec:cb:2e:a4:d7:5c:82:12:03:b3:3b:64:e7:a5:
98:f9:7c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:57:51 2025 by rpki-client