Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
File: DigqFcGl0VS72ocrNXYHqR-VCqU.mft (raw, json)
Hash identifier: e7aRkuHuepdncVRcgJRFa++fGHT5Dx7ajnVF0/fVUUc=
Subject key identifier: 84:87:8E:1B:76:20:E2:EB:99:BB:0E:23:CA:B0:A9:91:50:43:84:86
Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Certificate serial: 0198D705B4145E4B5F58DFE39D53A76B7F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
Manifest number: 1271
Signing time: Sat 23 Aug 2025 13:02:11 +0000
Manifest this update: Sat 23 Aug 2025 13:02:11 +0000
Manifest next update: Sun 24 Aug 2025 13:02:11 +0000
Files and hashes: 1: DigqFcGl0VS72ocrNXYHqR-VCqU.crl (hash: 6+Yqad0Up5wHNiWFjB4bllcaefEeI3gZagDWtQ5KabI=)
2: u3O0A5kbS_BKPuygQ5bEuCuWEmM.roa (hash: EFUICxjgOr4/W3Yre79DXYxTO7h614siVS4H6ARHwaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:b4:14:5e:4b:5f:58:df:e3:9d:53:a7:6b:7f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Validity
Not Before: Aug 23 13:02:11 2025 GMT
Not After : Aug 24 13:02:11 2025 GMT
Subject: CN=84878e1b7620e2eb99bb0e23cab0a99150438486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:af:2b:1c:fb:cf:97:8b:eb:7e:78:c2:1b:
7e:97:01:3f:16:13:0d:63:92:ce:77:1a:e1:a0:40:
36:f7:33:5b:d4:a4:d7:97:76:d1:19:a4:a5:e0:18:
30:cf:3f:4e:92:ad:ac:db:c9:02:e5:b1:1d:9d:22:
05:b4:ef:ef:66:a7:e2:84:e5:6c:7e:ac:c9:e5:c2:
82:a0:7a:03:8d:4b:5b:b3:03:0e:40:8d:43:b4:c1:
2f:ea:4e:3b:bd:dd:85:c7:e8:06:90:ac:a3:18:c7:
6b:9c:36:7d:9d:98:e0:85:44:86:c8:0f:d3:48:92:
a3:39:ad:92:d6:61:9b:f5:26:80:7d:05:d7:e9:b2:
22:d1:e4:1e:79:28:77:89:73:4d:71:03:76:f0:f1:
38:4f:e2:c2:33:cb:c7:b9:48:a4:ea:88:d5:85:c7:
2a:ab:42:ba:32:67:e6:e5:ed:86:9c:62:a8:d4:85:
71:ff:50:d5:43:cc:07:51:f0:41:03:bb:d5:8a:4e:
8d:a3:18:d0:c2:57:be:ac:dc:ca:94:f6:cd:49:44:
c7:13:a9:1c:af:b9:8c:93:ef:5d:41:6c:bc:e3:d1:
84:ff:c3:fa:c2:7a:25:f7:2e:27:af:ee:41:0e:de:
17:e3:3e:5e:45:30:b9:bf:d6:68:06:a7:99:ce:e3:
66:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:87:8E:1B:76:20:E2:EB:99:BB:0E:23:CA:B0:A9:91:50:43:84:86
X509v3 Authority Key Identifier:
keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:75:ba:a9:f1:23:1c:3e:d9:b8:e1:a3:8e:ce:f0:b8:26:1e:
a5:af:59:be:2c:b0:c2:0b:56:01:46:ae:03:2a:ac:1b:d8:a5:
2a:30:eb:b2:fe:9e:ba:05:67:d0:23:f8:90:55:f0:e9:73:94:
d1:b8:49:03:b0:49:c6:76:36:46:ca:67:68:5d:ce:22:eb:e3:
73:37:f6:d6:80:f8:1d:96:1d:1a:64:55:c4:ac:0d:a2:4a:c2:
f8:97:ac:53:1d:2e:ee:21:91:6a:cb:26:59:24:03:67:19:75:
08:1e:91:15:e9:5f:be:63:d7:bd:bc:3e:39:74:13:a2:8a:4e:
7d:dd:a7:03:87:8b:f6:d4:cd:20:51:0b:e2:46:63:c3:a6:93:
18:47:62:2b:2f:b4:05:91:c8:8d:6b:86:4d:a4:99:ef:e2:2c:
8d:12:e7:7a:d5:2d:56:7d:c7:33:b7:99:82:ad:77:b9:13:60:
9a:9e:a5:0d:85:d7:cf:0b:7a:ba:bf:65:c0:da:79:9f:d1:e5:
17:04:3f:a2:34:51:7a:16:4e:88:da:e3:af:d2:20:73:2d:ef:
43:ee:d3:7e:55:48:14:36:97:20:f8:f1:0f:07:a2:ac:48:15:
ca:0c:62:fb:af:d4:6e:91:f5:61:14:e0:4d:d2:46:12:d2:90:
00:b0:44:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:29 2025 by rpki-client