Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier: H6qvsfNqrEEYQylWXZVeuxk5ad4YqS4XmXHY0r6Cowg=
Subject key identifier: 30:26:97:45:32:20:CE:D2:E0:75:7E:04:07:AD:48:01:4D:61:8E:B0
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 0198D6980178D804017830082362FA0A6E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:22 +0000
Manifest this update: Sat 23 Aug 2025 11:02:22 +0000
Manifest next update: Sun 24 Aug 2025 11:02:22 +0000
Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: kQLAJ7fzpzVJrovXWbDIEOTxzI18gDbIEcPIEiILb4c=)
2: x2MfmeFdkAhvqtMnijQj44RaTsU.roa (hash: vo8DVrtFsZbAKsU4/jySKYry7q+PSUACGGuHHoeRqBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:01:78:d8:04:01:78:30:08:23:62:fa:0a:6e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Aug 23 11:02:22 2025 GMT
Not After : Aug 24 11:02:22 2025 GMT
Subject: CN=302697453220ced2e0757e0407ad48014d618eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:c0:ef:1d:a4:ca:46:3c:b7:98:71:09:30:
29:88:7e:69:b2:56:0e:ef:bf:29:de:e7:5e:ec:8f:
77:2e:aa:71:41:8e:fb:06:ad:5e:db:67:e8:b6:52:
0f:ae:0b:b6:ec:ae:c8:b4:87:3a:94:3a:6f:c7:68:
1e:bf:e1:79:3e:26:40:2b:d6:b7:7a:fe:8a:0d:d4:
b2:2f:98:f6:68:c8:6b:c0:3f:eb:25:aa:1f:59:38:
56:78:87:4a:6f:2c:e8:ea:b2:9d:67:31:05:0f:bf:
7d:2f:78:5f:18:bc:9e:c7:12:8a:f5:ae:ac:60:63:
22:be:52:65:d3:98:64:cb:52:2b:0d:c3:0c:2b:8e:
b1:c4:d9:fd:17:2f:8f:ae:ab:e5:35:fc:eb:85:b1:
65:4a:8b:0c:5b:fb:82:67:16:ef:e1:ec:cc:47:f6:
84:1c:02:85:c3:19:a5:2f:40:9b:99:f3:68:a6:96:
99:a0:79:9b:03:3f:31:8e:ec:5b:a5:79:dd:2a:a7:
78:65:06:cd:d0:f7:83:7c:e8:40:16:9d:e2:6d:27:
cf:44:7c:d6:ee:a2:a4:bc:be:c4:7f:15:ec:42:a4:
ac:df:79:4d:6b:da:af:47:f3:da:c9:21:c9:7b:2e:
f9:17:c2:c3:06:6c:ea:73:dc:28:84:8c:82:e0:d3:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:26:97:45:32:20:CE:D2:E0:75:7E:04:07:AD:48:01:4D:61:8E:B0
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ec:da:9d:8e:d8:0f:0c:94:f2:e8:a6:6d:5c:b3:00:38:aa:
48:87:e0:4c:7c:55:96:c0:27:f5:1f:b3:7d:22:7d:99:a3:57:
e0:e6:3d:66:66:c9:2d:54:96:94:79:ae:d5:e1:ee:83:fe:0b:
5f:6a:89:b2:96:ed:f2:f0:ab:51:d7:0a:ae:6c:2e:dc:47:8b:
57:9c:c6:6b:ac:d8:a8:27:23:0a:ad:75:67:71:d5:ef:f3:09:
b6:8d:24:24:38:81:c6:d6:be:d8:8e:d9:c3:96:cd:a6:7b:a0:
52:c0:af:0a:ee:b0:3c:94:67:53:aa:b5:97:c6:b7:83:7c:e2:
5a:c6:ba:8d:31:00:8a:57:c0:ce:82:7c:32:ba:c7:40:e9:66:
b4:36:1d:a9:f4:77:e4:9a:10:33:0c:34:0d:d9:15:2a:65:1b:
d7:27:af:66:e4:dd:3a:dc:37:bb:fb:d1:83:dd:75:5e:cb:8e:
82:87:67:de:cd:0f:54:fe:ec:f6:2c:8d:8d:4b:bb:5a:ed:18:
fa:95:7b:4e:bd:82:55:6f:81:76:f7:e7:43:81:eb:bc:ec:24:
7e:b7:98:5f:62:17:a4:7d:ff:63:31:b6:05:52:ca:4a:fa:a9:
31:32:54:61:b8:d0:35:21:6a:31:c1:34:b7:93:a2:a8:80:47:
ec:b1:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:38 2025 by rpki-client