Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: xlsSY/ZWkO4LqdJHcLsIhwZPDl3F/ksrk1DYVWnvb38=
Subject key identifier: 11:DF:29:A6:CC:AE:44:82:1F:5D:84:B7:48:66:18:65:AB:1C:D2:40
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 0198D583DF373764A882CC6D6734357B0AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:45 +0000
Manifest this update: Sat 23 Aug 2025 06:00:45 +0000
Manifest next update: Sun 24 Aug 2025 06:00:45 +0000
Files and hashes: 1: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: vfofHJL5fUJSKxdgSC2jxhLkmyGkzXR1p6ockad8IjQ=)
2: ej_BjAFbZm6hQCW3kEzJ6VoPdPc.roa (hash: U8mMSnb2Uo3FLs8ZgRPpDiQ27ni+P67f58AC/CHMeBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:df:37:37:64:a8:82:cc:6d:67:34:35:7b:0a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Aug 23 06:00:45 2025 GMT
Not After : Aug 24 06:00:45 2025 GMT
Subject: CN=11df29a6ccae44821f5d84b748661865ab1cd240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:aa:88:2d:5c:55:c4:c1:be:43:ec:40:68:
ee:ec:2f:e6:66:e5:2b:d4:8d:43:58:c8:0f:04:d9:
fd:37:c6:d7:94:cd:02:c4:3c:1c:41:a5:32:0f:ca:
41:ee:f6:31:8b:d9:4d:57:b7:f6:83:be:e0:6e:a1:
bc:69:f9:00:78:3c:bf:b9:08:2c:45:0d:65:b0:57:
64:f7:59:b0:6d:a4:66:61:67:10:9c:70:ed:7b:76:
2a:5e:18:3a:8c:1d:66:11:dd:bc:b1:89:7c:2a:f2:
35:bf:c6:a1:db:ed:8b:41:f0:fc:2c:0e:e0:ca:20:
d2:3a:94:ae:c8:ff:1f:4f:fe:bf:26:62:31:a1:16:
c2:16:88:61:4c:5c:95:99:27:e3:ec:b1:1b:65:7a:
c1:f5:83:92:b9:29:8a:d7:7d:a2:43:19:18:2a:9f:
3b:e7:ac:07:da:a3:1c:34:eb:ee:ea:2b:b7:f2:37:
66:05:81:0a:3b:4a:23:b1:5b:63:46:70:8d:05:fc:
c9:e2:33:14:f0:89:97:71:73:55:46:76:b5:68:72:
11:a2:00:be:07:9b:65:80:49:38:80:51:d8:4b:46:
f4:a5:59:c8:c4:76:f8:f0:e8:a2:91:51:47:26:8f:
b9:97:aa:b4:13:9c:50:3c:3c:84:fe:7a:f6:7e:63:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DF:29:A6:CC:AE:44:82:1F:5D:84:B7:48:66:18:65:AB:1C:D2:40
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7b:47:63:80:ff:65:9a:ec:c6:74:a9:c0:c7:26:41:77:46:
87:5c:12:65:83:46:f7:00:d5:0c:da:db:88:ef:22:1b:e9:77:
6e:90:eb:3f:36:d8:d6:ba:62:56:a1:bf:b5:75:7c:b9:76:04:
71:49:3d:3f:1f:3c:c2:60:d7:de:70:03:d1:66:a2:52:43:fd:
98:11:d2:78:84:e0:be:01:a9:0b:91:0e:88:ab:3a:d2:1d:61:
df:84:33:d5:d0:bd:44:8b:84:6d:6f:da:64:21:c5:61:1b:7b:
02:05:78:a3:e1:b5:91:72:2d:23:29:48:86:81:bf:42:77:c9:
66:fc:cd:fb:22:69:8a:3b:ac:e7:fd:2f:45:1b:f3:a4:6f:87:
f3:50:32:33:9e:62:fd:24:b3:7d:17:a8:51:b3:cb:1d:99:bc:
90:14:1f:2b:2f:a9:db:e1:a7:13:6a:ac:a1:af:8c:e4:03:83:
7c:7f:95:91:1d:64:47:df:fb:6d:1b:45:5f:46:47:6a:f1:71:
ba:61:fd:e0:3d:8b:b9:23:e8:2e:b5:64:27:50:86:aa:17:a3:
74:84:dd:c7:01:5b:20:ed:c5:e3:e3:26:ca:65:df:70:4b:ab:
ea:51:88:76:d1:45:12:dc:a2:8a:ad:aa:11:0f:50:e5:2a:09:
36:cd:82:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:03:52 2025 by rpki-client