Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
File: DhcO6FnpH0lz3kpXKxutLzpdGCU.mft (raw, json)
Hash identifier: T3NcRY8FIyb865l+5xICt2WN3aWp09BpAdWqv3fLZUc=
Subject key identifier: 5A:D2:BA:60:FC:25:B7:41:05:DA:1D:93:E8:26:C7:40:79:0C:D0:48
Authority key identifier: 0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
Certificate issuer: /CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Certificate serial: 0198D54E0D5DA63239A7FF1FE3ED0984AEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:58 +0000
Manifest this update: Sat 23 Aug 2025 05:01:58 +0000
Manifest next update: Sun 24 Aug 2025 05:01:58 +0000
Files and hashes: 1: DhcO6FnpH0lz3kpXKxutLzpdGCU.crl (hash: QNQKOvaVON+fclsxwa7r3VB9Pe0BUjrN56nu+mLoLgY=)
2: ULOFbzP3h9-3w0H4Yx7Si28ClYo.roa (hash: d25VIffAJQDV7vgvStWkaS/C+7kyYqCn7zctEo0yqWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:0d:5d:a6:32:39:a7:ff:1f:e3:ed:09:84:ae:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Validity
Not Before: Aug 23 05:01:58 2025 GMT
Not After : Aug 24 05:01:58 2025 GMT
Subject: CN=5ad2ba60fc25b74105da1d93e826c740790cd048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:55:94:00:35:66:2a:5d:fc:9f:4e:cb:ef:
d8:93:12:5b:61:86:7f:16:b3:aa:fb:48:bc:36:0d:
5b:b3:63:8e:c4:89:3a:22:04:cf:a1:2e:2c:de:ce:
5a:66:4e:17:85:34:7b:18:9d:3b:e5:97:a6:f2:50:
c1:16:50:be:8f:d8:3b:97:b5:38:a0:ce:4b:30:e2:
8c:14:b2:0f:50:c8:37:f0:4a:9a:41:2c:fc:fc:89:
b1:53:44:d7:8b:ff:b1:4b:6d:8a:0c:fa:b2:66:c5:
23:87:e7:99:61:a5:e9:bb:8b:35:34:c3:86:dc:5f:
75:e5:a1:28:7a:28:bc:56:55:d4:61:b1:ba:4f:d3:
53:25:d3:92:36:c7:d6:39:d8:e9:29:7a:1c:08:76:
db:27:79:40:4b:1a:9a:5a:77:35:ae:bb:e1:1e:6f:
61:23:2a:59:0b:bc:21:e5:89:5e:cf:8c:2e:82:37:
00:eb:b3:cf:26:fd:53:58:e5:64:25:72:e9:6a:3a:
00:36:36:5c:e7:20:35:9f:d8:17:35:f3:b2:80:61:
a5:fe:98:68:75:15:ff:3a:2f:e1:86:44:43:db:34:
3a:a7:d0:54:c7:0c:ad:3c:6e:81:e6:1c:38:6d:48:
d5:27:4b:0e:c6:7d:94:16:4e:7f:3c:57:86:25:f7:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:BA:60:FC:25:B7:41:05:DA:1D:93:E8:26:C7:40:79:0C:D0:48
X509v3 Authority Key Identifier:
keyid:0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fa:e3:22:77:be:c8:09:81:7e:33:57:db:fd:85:5a:a4:8e:
1d:b9:61:25:f1:67:65:59:a7:25:41:0e:92:d2:2f:ad:26:15:
f3:2c:c7:4c:91:0a:c6:60:ba:11:fa:dc:93:ae:96:4f:e2:7d:
c2:26:4a:50:61:5e:56:0d:86:6e:6e:65:b5:ea:8f:18:e9:8e:
e8:aa:3f:11:31:64:a3:b9:28:a6:c2:65:4a:c8:8f:ad:f7:9e:
61:e4:75:c2:74:7e:a2:f2:9d:41:ba:d0:36:d7:fd:ea:c8:a1:
86:3c:c2:83:3c:56:2b:7b:b4:9f:c3:ef:5d:c2:47:fe:26:b0:
a0:3d:06:84:34:d2:c9:eb:d7:93:50:37:0b:ed:19:16:41:dd:
ba:8f:a7:6b:9e:38:0d:66:8d:89:e7:05:81:1b:67:9d:42:af:
0a:6e:be:9a:2f:21:cc:3d:8c:53:13:cd:cf:80:3b:54:16:8e:
9b:bd:d0:0a:8c:54:89:93:92:97:9a:32:9f:c8:48:7e:18:fd:
2d:76:10:df:f5:53:25:29:41:80:f7:6c:33:59:51:a6:80:a4:
e8:7e:7f:aa:2b:3e:2a:53:dc:21:95:88:0d:34:12:5b:d5:04:
ba:ec:d9:fe:d5:98:e9:77:ee:38:bb:a1:a5:ef:30:9a:04:d1:
73:22:f6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:02 2025 by rpki-client