Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: G70t5wdKqXXyTlKUpBfwz41Rr6n/H5FmfZFb+K7baJs=
Subject key identifier: 2A:BF:14:8B:44:17:15:87:39:AC:7D:24:B6:96:C8:4D:B1:F5:0C:2C
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 0198D7A8C1359B0B884A84A1A90200545A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 16:00:17 +0000
Manifest this update: Sat 23 Aug 2025 16:00:17 +0000
Manifest next update: Sun 24 Aug 2025 16:00:17 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: 4W1BxmcLdXedk9V0lR3FYdLLKjtkTutYrmDtz/FGuQw=)
2: Fa4rtvztLobT1gePEYyc0DRCu2Y.roa (hash: C1CnICPh2LaUpEFyvXsX8GWWmclYO2wcMr6Jq76RYVQ=)
3: n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa (hash: M/0C5qRusrhAnj6tAMLK/NHBLWKiMm5trd2xt/8UodI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:c1:35:9b:0b:88:4a:84:a1:a9:02:00:54:5a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Aug 23 16:00:17 2025 GMT
Not After : Aug 24 16:00:17 2025 GMT
Subject: CN=2abf148b4417158739ac7d24b696c84db1f50c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:0d:0b:68:ab:18:09:07:cc:20:b3:84:a5:
39:1e:d9:c4:1c:f4:c5:c4:2a:c7:78:d1:09:7d:f5:
b2:27:41:ea:80:f8:b3:da:c1:04:4f:5a:a4:7d:3d:
61:e2:b8:c7:50:24:f0:c3:75:ac:f4:38:e9:e0:56:
4f:56:61:a9:23:ba:55:34:5f:23:3f:29:2d:13:1d:
aa:63:ac:a4:68:0a:b9:ff:a3:37:1c:66:c7:c7:1e:
c2:91:88:0a:5b:9f:60:d7:8d:c6:54:2c:26:fe:36:
23:81:ea:c3:4c:04:87:40:19:ab:d2:7f:ea:ba:cb:
db:66:62:48:10:10:b2:bf:6c:9b:50:c2:26:cf:df:
c8:bb:77:f0:48:d1:ba:a2:69:c2:3d:6e:b0:c0:da:
c8:13:d9:85:34:33:39:f7:ff:82:e5:17:4c:e6:7d:
5d:3e:b6:52:88:d1:c3:e7:95:51:48:ed:67:02:54:
cb:2f:ea:3a:25:de:23:fa:bd:6f:ea:45:8f:36:fe:
1c:2d:3c:08:2f:3b:87:d9:51:18:de:74:1d:6e:06:
54:b7:ed:3b:64:c7:8f:6b:e1:9d:a6:8a:81:f9:2e:
fd:9e:35:28:7b:e7:e1:9e:04:d4:7e:b4:09:3d:3b:
02:f9:58:d7:51:e6:d6:0c:20:67:04:23:5b:4d:fd:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BF:14:8B:44:17:15:87:39:AC:7D:24:B6:96:C8:4D:B1:F5:0C:2C
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0f:f7:d0:e3:f1:a7:c1:95:ab:dc:98:15:29:d7:6a:1d:71:
cd:79:8c:8a:0f:39:1f:ed:f8:cb:bd:ab:ba:a9:e7:d3:43:53:
28:dd:f3:02:45:49:50:1e:1e:fa:28:f2:b5:40:6f:a0:b0:33:
2f:c2:43:ee:ea:bb:29:3d:3c:84:b4:b4:2e:2b:4b:3f:49:3e:
05:98:e8:ae:0d:9e:ac:4a:00:e9:95:5b:3f:5d:34:1f:41:1f:
a8:62:40:67:6d:65:8d:ca:a9:f0:7f:70:f7:de:1a:8f:69:bc:
46:af:f4:bc:8a:2b:22:a2:f9:cb:10:a0:48:63:16:03:4a:a5:
85:ce:7e:f9:9a:41:2a:77:91:df:1d:d3:9e:39:5e:c2:6a:c8:
fe:1c:78:13:7f:7d:ae:2e:12:ff:c3:25:a8:c8:82:ca:46:0e:
5c:39:96:d5:63:68:7a:43:6d:a6:a9:8d:9d:7b:75:88:da:b6:
82:36:dd:dd:60:fa:ac:60:ee:a6:2d:84:62:c3:b3:f2:e4:11:
18:00:df:c8:2a:62:36:0c:4a:a9:58:30:26:77:5a:b7:da:65:
ee:92:19:8f:ce:eb:b2:36:c2:45:13:44:f6:f1:37:bf:b9:7b:
3f:50:3a:4b:2d:53:ca:5f:59:0f:cf:fe:6b:d3:a5:a0:08:be:
23:71:b0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:45:07 2025 by rpki-client