Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: ZojLxUndeusvCi9wzBfUdJQto6n9sgJ7vhVFR6jVuxw=
Subject key identifier: C8:08:43:53:53:43:F8:44:82:3E:5C:8C:02:38:74:28:43:76:3F:40
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 0198D6983ABFA6902E3DA41808F5B4FCDE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:37 +0000
Manifest this update: Sat 23 Aug 2025 11:02:37 +0000
Manifest next update: Sun 24 Aug 2025 11:02:37 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: JiibLSvL18S2fBuUOZVmr+CN6+hvtfBZdWBa+w/T1ls=)
2: YeUbav6EAp2mAnn2v72RBK_mFZw.roa (hash: 6lsjmApYWIJWgcJbH7Xr/EBHcstui66uMy/hUDB8r3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:3a:bf:a6:90:2e:3d:a4:18:08:f5:b4:fc:de:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: Aug 23 11:02:37 2025 GMT
Not After : Aug 24 11:02:37 2025 GMT
Subject: CN=c80843535343f844823e5c8c0238742843763f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:a3:63:29:d8:af:75:3b:fe:c7:86:a6:78:
e8:2b:be:52:93:ff:10:81:26:03:12:b7:d4:70:1d:
60:52:34:1d:f0:a3:06:6b:e5:04:d4:f9:28:d9:92:
87:6e:d0:70:2e:a2:f9:79:aa:a5:3b:83:d9:fe:03:
86:21:d7:1e:66:55:8d:a0:2c:c2:e3:c6:36:93:8f:
4c:65:a3:d1:5b:76:52:9f:8c:4e:e7:44:33:3b:24:
5e:b9:00:bf:5a:fa:6e:8e:24:e5:41:45:81:a2:dd:
c3:d6:30:bc:8c:3c:b6:e3:15:b2:e5:c5:17:8c:17:
92:12:96:f3:30:c5:b1:6b:cc:9b:4d:7c:d5:f1:8b:
8f:b1:15:8c:7b:10:b4:e5:cd:cc:4f:54:c4:8f:9c:
98:95:7d:ba:72:46:d3:f5:6e:ed:c6:50:f5:91:97:
ec:2c:84:fe:68:69:11:41:b7:51:24:6e:72:da:be:
be:9e:03:ff:50:9e:05:ef:0b:16:e0:9d:e9:8c:45:
1e:74:8b:3b:1e:86:94:bf:8b:56:9b:17:26:0b:c6:
c7:87:f0:d1:0b:d7:e2:af:70:e1:63:1f:1a:34:b6:
2c:b6:64:b8:16:9f:3c:8f:3b:2c:95:38:c9:3a:09:
00:2c:38:d0:f3:75:c5:f5:37:dd:27:a1:ca:8d:00:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:08:43:53:53:43:F8:44:82:3E:5C:8C:02:38:74:28:43:76:3F:40
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:75:77:db:8e:d8:cd:4f:49:65:a4:61:2c:b3:95:1c:a3:0b:
59:6d:96:a7:ef:e8:e4:31:c5:20:58:6a:19:3a:ff:e0:af:f9:
5f:e0:90:20:d1:7e:f1:2d:fd:6c:5f:61:0e:49:e4:a6:a7:12:
17:af:6d:e7:cf:05:8b:96:bb:c8:72:10:a0:fc:7b:e9:11:b3:
ed:46:cc:97:11:9f:17:50:47:a6:70:22:ce:8b:af:b9:7e:f6:
94:72:e7:fd:60:8f:40:50:7f:48:bd:35:02:88:0a:36:c5:0f:
e5:77:b5:73:18:aa:4f:28:8a:e8:4b:e3:cd:7f:0d:13:a2:9b:
90:56:51:26:dd:c8:cf:01:74:bd:4d:46:9c:1a:75:4c:b7:b2:
e8:c4:f2:04:ae:11:9d:58:bc:b9:ea:26:16:3f:d8:66:ce:e4:
e3:c5:5c:f1:e4:ac:36:d6:88:9b:42:a3:9e:87:6f:46:fb:e1:
32:a1:d8:44:42:b6:a0:3f:3b:7e:32:7f:57:eb:af:71:e5:7c:
ae:07:13:af:8d:8b:b7:06:0a:08:df:bf:3b:21:8e:46:5c:54:
1f:a5:35:c0:75:54:7c:3a:17:eb:08:f9:85:38:49:26:18:b0:
88:fc:2e:d7:b1:2f:8a:5a:c0:de:a4:2c:34:f8:3e:f6:f5:da:
aa:1a:0b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:01 2025 by rpki-client