Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
File: DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json)
Hash identifier: gK9/y9ZaMEu7zdymcDCN4so/RIEUTeuPVMU6n/FgOKw=
Subject key identifier: BC:B1:F8:35:5B:70:1A:33:A3:0E:45:08:73:BF:A1:0F:0F:D7:1D:FA
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Certificate issuer: /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial: 0198D5837BEB1C8F2C12C1679CBEB0D30157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
Manifest number: 0870
Signing time: Sat 23 Aug 2025 06:00:20 +0000
Manifest this update: Sat 23 Aug 2025 06:00:20 +0000
Manifest next update: Sun 24 Aug 2025 06:00:20 +0000
Files and hashes: 1: ByGHodkRngTWyaxrywBx9HU_pgo.roa (hash: +PGhvckml5x5MT6xt2SMtvcfa7zw9W0WZ25LYIkA+NY=)
2: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: LF0HqX2F2zGYLuhOD8c1Fpwaz88osIlbSwJ2dMUOStw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7b:eb:1c:8f:2c:12:c1:67:9c:be:b0:d3:01:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Validity
Not Before: Aug 23 06:00:20 2025 GMT
Not After : Aug 24 06:00:20 2025 GMT
Subject: CN=bcb1f8355b701a33a30e450873bfa10f0fd71dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:46:27:0e:a4:6b:b3:db:33:38:f7:dc:aa:
c4:8e:a1:87:6c:5c:17:a5:6c:86:0d:aa:7b:b1:3e:
75:22:0e:e6:24:3b:26:b3:61:5d:91:db:a6:2d:26:
4e:eb:a8:17:0a:fb:58:73:23:03:63:99:44:0e:5a:
c5:ac:bc:2f:62:80:d8:94:45:3e:ed:65:44:f4:a9:
2f:bd:9c:de:99:78:df:55:4b:69:ed:43:70:e4:80:
bb:0d:92:ed:7b:0e:88:2e:2e:58:d2:ee:d6:b0:3e:
ab:d2:f8:39:b0:23:97:b0:86:04:d0:78:b3:a2:6c:
f7:77:7e:07:83:55:97:30:79:50:0c:ec:81:36:9f:
39:33:4b:f4:94:3c:fd:ce:79:b7:8f:b2:a5:e3:16:
18:ed:1e:d6:4d:09:4c:a0:be:9d:5b:83:f2:d8:35:
92:1e:a0:f4:ed:7f:b2:b4:7f:9e:f4:fe:6d:e3:b4:
28:6b:63:6a:2f:5e:a9:fe:a1:a1:44:27:b6:89:ed:
4a:5b:87:9c:69:e0:85:ef:c1:df:c5:95:67:56:e1:
fe:6d:eb:49:41:b9:b8:87:29:0e:90:5a:a8:2d:cf:
7c:36:57:21:5c:48:d4:f3:9e:5d:69:19:b0:50:10:
e3:f2:17:e6:61:8e:4a:cc:60:42:2b:76:51:6b:83:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B1:F8:35:5B:70:1A:33:A3:0E:45:08:73:BF:A1:0F:0F:D7:1D:FA
X509v3 Authority Key Identifier:
keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:57:49:97:7c:fe:0f:c6:b2:c0:0e:07:66:c2:87:1e:24:62:
f9:d8:78:dd:5c:64:85:44:de:38:de:5e:8e:2f:6b:0d:ab:3d:
7b:83:78:bc:49:3c:27:cd:f9:d9:cc:ce:54:2f:ee:0a:aa:71:
da:d5:57:82:72:58:d6:9d:99:0f:f7:20:6f:39:94:2c:2e:a6:
4e:b3:44:c2:e8:87:7d:20:07:41:29:00:88:dd:2d:08:37:f9:
b7:64:89:06:ce:93:56:e5:9f:31:71:11:92:e2:c3:fa:a1:c1:
f9:6c:3f:c1:3e:fb:ee:c7:95:08:d6:89:1d:fe:ee:a7:42:68:
9d:5d:16:7f:2f:10:bc:a5:6c:53:f8:1b:8d:86:02:ae:e2:1d:
30:6b:e7:a5:41:22:d3:10:d1:7b:03:e7:cf:51:54:52:9a:cb:
a0:1e:57:56:82:1b:5a:2b:94:79:b2:d9:f1:0d:9c:fa:2b:22:
01:36:f6:4c:5d:0b:91:c1:dc:a9:dd:4b:c0:27:b2:44:99:53:
0a:30:f6:93:d3:63:b8:55:d2:a6:f9:63:f5:4d:e7:91:48:1e:
41:b3:4e:7a:23:98:0f:95:de:bc:01:cf:1b:2e:41:ec:ce:85:
c1:0d:e1:86:66:72:8f:e8:f3:48:48:29:2f:2f:bc:a3:1c:ed:
7f:f2:e0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:49:33 2025 by rpki-client