Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
File: DBATeUToh60HVp7U1BKEZzLQr3A.mft (raw, json)
Hash identifier: zjVYRCPDdicZS/YeksW/2HFUoXIA973u2S4Y47EuhyU=
Subject key identifier: D9:74:FD:33:26:E9:A6:B7:7E:92:4E:FF:76:64:F5:57:7B:3D:26:2D
Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
Certificate issuer: /CN=0c10137944e887ad07569ed4d412846732d0af70
Certificate serial: 0198D6CD97B90E6979FA5F4E79AB6F375EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
Manifest number: 0E29
Signing time: Sat 23 Aug 2025 12:00:54 +0000
Manifest this update: Sat 23 Aug 2025 12:00:54 +0000
Manifest next update: Sun 24 Aug 2025 12:00:54 +0000
Files and hashes: 1: 1teQs2-Gqr9Ttken-kpobex52GM.roa (hash: JwKmhVt10f03COhT0AoYFXxwUVkj2YdwV7qznRh2SmM=)
2: DBATeUToh60HVp7U1BKEZzLQr3A.crl (hash: H3HW131/6uKlM+xG6ku/Alw7Q/HjyQOQ5xWQ4Q9sbDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:97:b9:0e:69:79:fa:5f:4e:79:ab:6f:37:5e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70
Validity
Not Before: Aug 23 12:00:54 2025 GMT
Not After : Aug 24 12:00:54 2025 GMT
Subject: CN=d974fd3326e9a6b77e924eff7664f5577b3d262d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:46:b7:78:77:8e:51:b7:1c:55:d9:c5:bb:f8:
fa:c2:ef:40:21:7d:d9:63:88:31:38:8f:3f:08:98:
ac:f6:91:be:54:a1:59:c4:99:8f:e2:88:2e:87:f3:
33:37:b0:1d:9f:a6:2b:2c:a1:b6:eb:99:2a:4b:26:
13:68:23:e1:bd:61:50:a9:9d:7a:26:60:63:8f:0b:
db:a5:12:19:f9:8e:c7:ae:f1:f7:fa:53:84:c4:fb:
d0:44:60:37:bc:94:6c:5f:f5:d9:48:cf:12:f5:ff:
85:ea:20:4a:d5:20:0a:35:c9:d3:f4:fe:ec:4a:4d:
bd:3c:2d:09:95:e8:2c:26:9e:8e:52:a5:16:e8:c3:
d5:52:cc:f6:c5:5b:7d:fa:b5:e8:05:53:93:cb:0a:
19:28:78:e9:9a:8a:b4:a6:23:97:46:e8:1f:90:c7:
1c:a9:d7:c7:0d:34:79:ce:e3:e0:11:99:f6:41:2b:
10:f3:47:34:98:85:2c:fc:84:31:e4:1f:3c:07:5c:
9c:13:6e:cd:1a:4f:ff:f5:9a:47:96:ae:ba:20:67:
18:72:c9:58:a7:a1:f4:b7:77:82:9a:56:38:5d:73:
d7:16:92:ac:8f:ea:94:43:d4:26:d5:58:19:3a:36:
7e:f3:88:cd:ed:5d:40:2f:62:37:b5:b4:4b:b2:17:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:FD:33:26:E9:A6:B7:7E:92:4E:FF:76:64:F5:57:7B:3D:26:2D
X509v3 Authority Key Identifier:
keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:73:e3:46:de:8a:3f:63:18:4a:a9:77:77:b2:5e:f4:15:bd:
c1:e0:22:2f:ec:db:a9:12:f2:56:93:8f:df:9d:9d:6e:d7:e6:
cc:8e:9b:30:df:72:7b:8d:c4:40:b9:1e:62:ed:3d:1b:f1:3f:
39:d7:b8:33:12:a5:ab:7f:ad:79:4d:05:3a:5e:be:67:10:be:
60:5c:d2:c5:70:26:91:25:8a:08:49:bd:ff:66:56:a6:cd:3b:
91:43:64:94:01:d7:25:39:19:ff:45:90:ca:9d:8d:84:98:9b:
db:c7:ae:c6:9a:3a:b9:2e:c6:ad:34:f5:a7:48:eb:0f:e2:de:
61:c1:70:f7:d0:c7:8a:b9:26:cf:11:b1:2a:63:aa:d3:ed:6c:
79:7b:0c:85:a1:a5:bd:d3:0d:e7:5d:8a:78:8b:cc:42:e4:0b:
4e:5a:c3:5e:76:f2:2a:13:bc:ea:69:6a:7d:70:6d:5a:4a:6e:
27:9d:48:0c:88:7a:0f:a5:e2:30:a3:da:66:d5:84:16:36:2d:
4d:fd:84:3a:52:91:c5:b6:60:be:16:d4:56:7e:52:91:4b:f3:
79:19:62:b2:09:1d:e4:7f:41:bf:4a:12:9a:2b:84:a9:99:a8:
62:0f:08:63:3c:52:39:b6:77:e9:af:b6:61:7e:71:73:5c:4f:
ea:f8:4a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:30:09 2025 by rpki-client