Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
File: DigOW_CXDHM8w0vBvnkmdZrDHe0.mft (raw, json)
Hash identifier: e20A1Qm/k/SWGHHj4dNPVONoOIhlJaQwRU9zUw420xM=
Subject key identifier: DF:DD:D7:E2:95:84:5E:5E:23:18:EB:F8:5B:69:45:EC:8B:3C:7A:3E
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 0198D65F9D3ABBB7424EB0027D890F5BE138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
Manifest number: 1361
Signing time: Sat 23 Aug 2025 10:00:47 +0000
Manifest this update: Sat 23 Aug 2025 10:00:47 +0000
Manifest next update: Sun 24 Aug 2025 10:00:47 +0000
Files and hashes: 1: DigOW_CXDHM8w0vBvnkmdZrDHe0.crl (hash: Qtopj9RRAyx7wJnyRkrnffv8ScdqXpB9LUSmIqlKnk8=)
2: nitfhwT5zdpxb50hXlk4jgWzdQE.roa (hash: Cnmglk4tBEqztiio9IkWbUek+XEbAwr0Bjp+MAHYUSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9d:3a:bb:b7:42:4e:b0:02:7d:89:0f:5b:e1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: Aug 23 10:00:47 2025 GMT
Not After : Aug 24 10:00:47 2025 GMT
Subject: CN=dfddd7e295845e5e2318ebf85b6945ec8b3c7a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:65:3b:a4:96:c0:a0:66:2e:e5:8a:d9:ee:
41:ab:db:96:6a:cb:d2:95:52:08:0d:db:e2:d6:8a:
da:7a:52:15:b3:50:88:5d:95:79:f1:e8:58:72:9c:
4f:38:2b:d8:a6:90:f6:bf:39:09:89:07:64:ee:fe:
48:ee:53:6b:39:92:4a:0a:27:15:4b:9d:50:33:e7:
07:9f:ba:40:f3:1e:88:37:eb:e1:19:8b:09:bd:5e:
38:3f:d9:f1:c7:91:93:77:76:45:48:6d:46:40:92:
96:3d:65:5d:48:a4:4a:8e:e0:71:78:96:f1:de:6b:
7c:9b:7c:fa:ef:b1:b2:74:86:69:49:ec:c9:40:3d:
53:9c:e2:1b:e1:4f:4b:b5:c5:70:76:26:7c:f7:64:
0d:fd:47:26:cf:57:c3:bc:db:79:98:24:40:5f:b1:
ae:f3:0c:fa:3e:1b:45:27:89:b4:4e:71:ea:15:45:
1e:7d:37:f4:92:ed:65:4b:90:fb:9a:a2:df:5e:7f:
83:1d:81:9f:57:26:14:65:37:e1:a5:a8:2c:17:87:
02:d3:83:21:42:41:80:97:37:ff:40:bb:b8:05:53:
73:e3:7c:03:38:8b:5b:ff:22:70:0d:1a:bc:87:32:
8d:10:b5:28:c6:da:0c:a0:4b:59:dc:99:a6:67:05:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:D7:E2:95:84:5E:5E:23:18:EB:F8:5B:69:45:EC:8B:3C:7A:3E
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2c:61:8b:02:2b:ad:d1:52:f4:f7:41:5a:c5:97:7f:10:26:
9e:c3:71:53:bb:89:f9:3b:91:cf:3e:bc:58:ef:57:c2:8a:a8:
1c:01:42:48:0f:6f:ce:f5:64:ee:c7:e4:ff:81:e2:ce:eb:36:
7b:38:03:35:85:18:e5:f9:f4:0c:18:25:a5:15:5f:57:0a:e2:
a1:00:1b:bd:7e:11:4d:42:35:fb:9f:9b:78:71:b9:33:d6:0d:
d8:93:57:6e:7f:f2:a8:35:c7:56:7b:78:27:06:b3:2c:65:f2:
05:10:15:0c:ac:57:f2:d6:41:12:ea:e8:0c:6d:95:4a:7b:d8:
91:4c:cd:b8:ce:3d:d7:90:0c:96:2b:d5:c3:1c:d8:fe:89:28:
99:be:b3:c1:95:f1:84:ed:d3:61:f1:40:24:bc:03:b0:cc:29:
91:20:1a:50:6e:a1:fa:63:66:51:bd:98:cd:93:3b:c0:df:ba:
c9:9d:01:91:9a:d1:49:96:61:5a:14:d3:4e:6c:a3:bc:bb:8e:
f5:0a:18:68:0a:f5:d8:a3:08:79:b9:f2:7d:1e:30:2a:fb:67:
e4:9b:1d:2a:ca:4f:9a:3a:ba:6d:9e:35:83:7f:52:5e:45:26:
aa:6c:12:50:94:bc:60:61:ed:8e:97:a6:85:9e:bc:40:ad:4c:
a2:f2:82:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:14 2025 by rpki-client