Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
File: Dri8RONvrhbTcQL9DVGfKE1mPZA.mft (raw, json)
Hash identifier: 5xm5QA6Aoti/z8uGV6GRrzCd8fdrLgJLA+pm9yx9pOQ=
Subject key identifier: 5B:F0:87:DD:A2:7B:A8:58:EE:76:EF:27:EB:80:F5:5C:1B:11:00:C7
Authority key identifier: 0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
Certificate issuer: /CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Certificate serial: 0198D54E89E916982164B6C9ED4CE8E52D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
Manifest number: 1594
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: Dri8RONvrhbTcQL9DVGfKE1mPZA.crl (hash: jfAPLbjGvYQ6XM9MjxBAnhaFuAmcOwUz3y7cRgoHehM=)
2: EnQM4_whnPJeaxWRQxPEz7dH7rY.roa (hash: anAGsxZMEMPM7WeK+BVeddK3oakg7+TLd3wIh7D05ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:89:e9:16:98:21:64:b6:c9:ed:4c:e8:e5:2d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=5bf087dda27ba858ee76ef27eb80f55c1b1100c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:63:c1:94:1e:8b:ed:76:2a:5b:2d:b8:6b:
4a:71:fe:2b:d9:1a:c3:54:14:c3:58:13:48:de:fa:
38:5a:83:f2:15:70:56:3d:72:ea:08:be:44:e4:8c:
18:af:1f:3b:c6:41:15:c0:2b:16:12:70:e9:a9:56:
76:00:79:ad:df:6e:37:c1:93:71:26:0c:52:22:f6:
c0:69:c2:12:2d:48:5d:84:50:37:ee:c6:4c:74:0e:
1e:9a:c7:22:58:90:7e:7a:24:15:ec:c7:bf:a4:90:
3f:24:12:05:d5:7d:bb:72:39:91:99:6e:bc:23:bf:
37:7c:a2:61:c1:1e:0c:8d:84:bd:2f:b8:67:ca:d0:
d7:45:de:3c:be:c5:71:0b:d5:89:80:47:e2:32:51:
69:a2:50:b3:48:f3:6e:4b:9d:cb:90:51:3d:e8:b6:
fe:73:9b:70:55:d4:24:46:82:41:bd:be:27:32:82:
5a:c5:1b:b0:56:81:95:06:1e:c2:ee:64:15:99:a4:
05:d0:fd:2b:ca:b3:13:32:7c:c7:e4:eb:a2:d7:b7:
2b:d6:9f:47:bf:7c:5c:55:77:65:5e:f2:b5:6d:81:
ef:7c:d0:e3:49:98:f2:9b:d0:ef:d6:c2:e3:9c:ca:
2b:37:5f:a3:30:f0:e7:8a:00:b0:4f:77:1b:ce:f1:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F0:87:DD:A2:7B:A8:58:EE:76:EF:27:EB:80:F5:5C:1B:11:00:C7
X509v3 Authority Key Identifier:
keyid:0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e2:0c:90:23:00:07:47:53:2c:c4:4b:7a:24:50:14:5c:82:
cf:21:bb:7a:bc:8b:00:29:f1:c5:38:00:fe:c4:4e:58:31:b4:
63:e3:f1:32:18:60:02:98:42:00:78:2d:c7:7e:5a:4e:50:a0:
6e:51:f4:3b:ec:93:17:c5:56:08:6c:88:5b:09:fd:2c:b0:6c:
45:79:e1:6b:7b:35:20:3f:fc:8b:58:4d:f4:fe:12:97:e9:8c:
67:b2:22:63:be:45:d4:9c:98:6c:b7:07:98:84:37:a0:43:99:
f7:ca:db:41:e5:9a:63:f1:44:90:32:d1:ed:5d:f0:6e:bc:06:
ab:99:9c:df:13:a2:09:60:40:40:05:f3:c9:c4:a9:10:f1:d9:
4d:bc:5a:b1:0d:f3:ee:47:bb:d1:25:0d:b4:d5:7c:03:ff:16:
89:ae:20:93:eb:d4:4b:48:bc:c8:61:64:58:de:ce:e1:3f:f7:
19:ee:1d:8b:00:6e:39:a5:f2:f3:9d:a4:89:ec:83:0a:eb:0b:
f9:5f:6e:59:44:39:59:8a:f0:e7:8a:1b:a0:d0:58:73:54:c1:
2b:20:6a:e5:bc:69:00:8c:eb:72:bf:13:a2:8f:79:3d:8d:32:
44:33:bf:5c:06:72:7a:30:ed:21:7b:22:47:80:50:f7:ef:24:
d3:64:c5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:30 2025 by rpki-client