Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: EY32jQCBDmtZ022ZQjrTWOC7o7wXbxL9NRfonVOO2p4=
Subject key identifier: 26:29:8C:7B:8E:F6:60:A5:42:57:CC:AF:A9:60:53:01:0C:CC:F4:76
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 0198D473BC8D6E20F84D5FB1BA7CC07C9083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 01:03:31 +0000
Manifest this update: Sat 23 Aug 2025 01:03:31 +0000
Manifest next update: Sun 24 Aug 2025 01:03:31 +0000
Files and hashes: 1: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (hash: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=)
2: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: 4sqUPHcyrTJ4DnlHmTF2l0O4qzECrbdNhermh+WllGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:bc:8d:6e:20:f8:4d:5f:b1:ba:7c:c0:7c:90:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Aug 23 01:03:31 2025 GMT
Not After : Aug 24 01:03:31 2025 GMT
Subject: CN=26298c7b8ef660a54257ccafa96053010cccf476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:73:3b:06:6b:e7:b6:7b:cc:62:82:36:c5:
93:6e:13:5a:4b:59:01:38:7b:94:86:4f:fb:24:9f:
f9:3e:86:b1:75:b4:48:8f:cb:9d:ba:b7:c8:79:35:
0b:79:25:82:f4:33:e6:e6:08:c3:51:f1:a1:dc:24:
f0:50:00:80:05:6b:66:b2:20:e2:9d:05:92:b7:6a:
b6:41:c3:c4:5b:30:6a:ac:7a:bb:2d:19:35:8a:c0:
e8:0e:31:be:d3:21:dd:78:32:55:8b:a9:b7:27:cd:
e8:c7:c3:2d:9f:fe:6b:58:c9:78:92:c3:69:8c:ff:
c6:be:d5:08:02:80:04:38:5b:84:f1:37:df:4b:1e:
07:2b:09:cd:bd:4a:b2:ef:40:bf:7e:a9:69:32:9a:
04:a0:f5:48:26:c2:0b:83:f9:03:b7:5d:88:18:c7:
73:a2:1b:ad:19:cb:f7:5d:13:b6:0a:1b:d2:b0:c6:
10:db:56:49:17:ea:31:eb:61:e3:b2:ac:46:94:ba:
3e:06:45:c9:d5:17:7c:ea:b9:26:0a:fa:56:38:33:
1a:78:07:ce:e4:ad:71:f6:96:4d:ba:63:e7:9d:5f:
5b:2f:bb:5f:a4:a7:e4:3d:2e:60:a8:1b:df:88:82:
64:5e:32:47:9b:36:ca:51:f8:e8:4e:f9:f0:7c:04:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:29:8C:7B:8E:F6:60:A5:42:57:CC:AF:A9:60:53:01:0C:CC:F4:76
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a3:fa:b8:8c:51:44:c9:24:2a:ff:4b:a2:36:e1:08:5f:f6:
38:c7:78:08:13:2d:0f:0d:8b:c2:53:c0:35:b4:b2:7a:69:9d:
28:2c:ab:52:b0:91:f9:fd:c3:58:9e:6f:42:61:31:8f:64:e6:
3b:21:e6:81:70:2d:92:8f:b3:f4:14:9c:58:61:23:5d:75:f9:
54:40:f9:2e:d3:55:68:18:60:b3:38:11:8f:87:cb:73:d3:a0:
ed:91:50:f7:24:25:dd:01:31:30:02:8b:2a:c7:c1:a3:0e:4a:
d9:fb:e4:38:15:8d:93:cb:e4:73:cf:b5:78:7b:54:32:ac:46:
4b:48:b3:2b:ad:67:26:db:1a:7d:25:d2:f0:c2:13:9c:82:87:
1b:e8:e7:d6:d2:29:06:03:14:39:06:55:29:7c:db:17:c3:00:
43:3f:a6:a3:2e:af:9b:e6:99:d9:f7:a9:b7:c3:36:1c:3c:34:
ad:18:04:52:75:0b:b7:e5:fb:32:90:90:ba:7e:7a:1d:92:a6:
c3:8e:66:42:45:80:48:e2:5b:48:e9:bf:0b:45:43:8a:19:2f:
2b:e1:21:5d:88:84:20:a9:7c:2e:20:00:d1:32:ae:da:e5:19:
5f:1b:9f:12:36:c2:61:a1:a1:e8:27:68:2f:3b:0a:4b:1a:47:
8e:cc:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:22 2025 by rpki-client