Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
File: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft (raw, json)
Hash identifier: 0PsE+sIcepEPM18HxHwxfsmmpMamLb/qHHtl/Yrp/YA=
Subject key identifier: 89:26:22:94:63:24:77:6D:8E:DD:30:49:3B:E9:62:0F:E8:A4:1A:E0
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Certificate issuer: /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial: 0198D515AEE76F2FCA7D64125E286761F124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
Manifest number: 15E0
Signing time: Sat 23 Aug 2025 04:00:24 +0000
Manifest this update: Sat 23 Aug 2025 04:00:24 +0000
Manifest next update: Sun 24 Aug 2025 04:00:24 +0000
Files and hashes: 1: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl (hash: PFPeWvcQ8G3ToXOprw3Q4l4gCKTzG2Hh4Nz5gX3L7aM=)
2: egtmxNDK9FDAgrarU-Xyuo-QkfI.roa (hash: e278lOu7Zhdc/1PtGLzkkZXNU5WcrL6PKLI2BzSWdWQ=)
3: qYoYfUlCCn9zP-yDwbrlHyj3qyU.roa (hash: AiZ+gWtLdz0jof3tMOVdLJ+BBsLKxSxUlK2q0zbs/tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ae:e7:6f:2f:ca:7d:64:12:5e:28:67:61:f1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Validity
Not Before: Aug 23 04:00:24 2025 GMT
Not After : Aug 24 04:00:24 2025 GMT
Subject: CN=892622946324776d8edd30493be9620fe8a41ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:59:8b:87:6b:ab:c9:3e:41:cb:b2:55:73:
0a:99:b4:aa:f3:4f:e4:17:cd:f3:2c:20:aa:86:cc:
95:7b:de:be:15:27:59:5c:03:7d:25:d0:b5:3f:a0:
e9:9e:c0:c6:9d:ee:aa:16:b6:86:32:a3:c3:e0:a4:
46:7b:78:60:23:d4:1a:61:ba:c4:95:3a:ac:c1:90:
fc:9c:07:ee:7f:99:5e:e9:24:a2:98:8d:29:3d:51:
31:4d:4b:b7:87:bf:f9:50:e6:73:a9:63:8a:d4:17:
0a:f9:72:68:c3:ee:2c:43:f7:76:a0:d4:ff:81:81:
a8:54:08:b2:61:ca:df:1f:dd:b8:b9:0b:e8:0c:2a:
fa:fd:da:18:72:26:36:94:5e:d5:59:3f:3b:5a:ad:
9a:a9:9f:61:6c:c1:cf:07:da:a1:0e:13:95:39:04:
36:b3:ef:ed:e4:d3:95:88:18:a3:cb:31:cf:65:05:
bd:c4:d0:93:d7:57:ca:9f:3a:f6:40:ff:69:43:c6:
dc:70:c9:dc:e6:8c:94:e9:3c:f3:d7:74:28:25:37:
50:b5:48:cd:76:9c:32:49:5e:da:fe:0f:47:9c:1f:
4e:58:b1:92:bd:22:b1:6b:52:c8:8f:da:b3:21:f7:
7f:bb:e8:6c:c7:85:af:53:6d:b7:c6:10:e0:00:80:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:26:22:94:63:24:77:6D:8E:DD:30:49:3B:E9:62:0F:E8:A4:1A:E0
X509v3 Authority Key Identifier:
keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:86:cb:17:88:d0:05:21:05:1c:6d:e6:10:75:5d:51:ad:f9:
89:ac:59:c5:5f:e7:46:59:cf:35:46:60:bd:45:89:6c:d7:2c:
e0:c0:12:76:76:d3:41:1d:fe:18:ec:85:eb:cc:fe:5d:5b:54:
ef:67:d2:c3:70:0e:57:71:d8:d5:78:1e:ed:84:c1:42:f9:1d:
34:86:b7:e8:71:9c:d2:47:93:61:85:45:9d:b7:45:38:e0:fa:
66:b6:3d:11:07:8b:bb:a2:db:46:e5:79:1f:06:b5:c2:8b:ba:
5e:88:f1:15:56:86:42:8a:56:68:0b:58:3b:a2:41:27:40:7a:
29:b5:b3:ec:78:c2:df:4a:8d:a1:53:0c:cc:f1:fb:f5:ee:3d:
e1:db:b3:80:6f:8c:87:bd:23:78:f9:1b:87:70:61:a9:4f:df:
ac:ee:52:7d:50:e7:5f:c8:f6:69:91:6f:9c:69:fb:ad:e8:28:
82:b3:07:4f:0c:7d:6a:0e:51:c7:85:e1:15:47:e2:85:cd:8b:
8d:29:53:55:9f:09:cc:b5:5d:8d:5e:78:b3:e9:98:e6:8e:7b:
19:51:2c:ae:6a:e2:f9:87:40:2b:cf:85:05:d8:59:e8:a5:18:
f6:7d:96:d4:35:9c:d6:bc:82:b1:dd:33:e0:ba:92:2d:92:41:
8c:d4:a8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:49 2025 by rpki-client