
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File: DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier: gVo9maVbWoW0fGJiQEO0VsgO5j8lcRSbgOH9HIK8wSs=
Subject key identifier: 20:A0:E1:95:4E:A9:52:43:8A:FE:79:EE:C4:31:04:05:9A:80:A7:BA
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 0198D4727FB6446123F1494FB5FED4457106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:10 +0000
Manifest this update: Sat 23 Aug 2025 01:02:10 +0000
Manifest next update: Sun 24 Aug 2025 01:02:10 +0000
Files and hashes: 1: 4PWYJzFLE2aK2EnppYvU-q2XFOY.roa (hash: f33gLiliUjw9+UyIBB1FbTny80dDA5WlmPfCkJepk4k=)
2: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: EFMkZKUKyhDi38QqiIv3CfphlrUGJCvc0iCL2gc2JXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:7f:b6:44:61:23:f1:49:4f:b5:fe:d4:45:71:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: Aug 23 01:02:10 2025 GMT
Not After : Aug 24 01:02:10 2025 GMT
Subject: CN=20a0e1954ea952438afe79eec43104059a80a7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:24:9a:05:e3:02:9d:b4:b4:00:83:62:98:
05:11:70:dc:44:ca:28:a7:a7:2c:68:9a:b9:c8:e2:
a3:0f:31:d4:70:d8:97:26:ff:51:e7:c3:94:26:92:
96:3f:f6:91:7d:8f:82:e7:8a:d5:65:7e:ba:b7:00:
92:d1:06:fc:0f:09:2e:68:63:b4:fd:bf:c7:ba:29:
78:a7:52:85:8e:9e:ce:82:78:f7:81:3b:cc:01:d8:
26:d1:6e:75:8a:15:10:91:3b:3f:2b:e6:1e:70:00:
3f:b8:39:98:8b:d9:e7:06:22:1d:0f:09:ca:18:37:
00:a9:9f:17:78:50:65:25:88:05:8e:c1:fd:c4:64:
00:49:4c:04:21:12:62:94:b0:1c:03:aa:25:c8:ed:
43:a6:72:1b:d1:a6:a8:4e:d8:01:76:2f:88:65:4e:
ef:05:18:76:55:40:c6:71:12:be:2e:26:57:cb:3b:
b7:d2:78:e5:7d:8c:29:22:78:85:bd:91:0c:e2:b0:
78:a5:20:4c:fc:b6:ed:c5:9c:33:28:b5:ea:3e:04:
2c:15:7c:3b:1b:f5:c8:32:2c:57:af:df:22:c2:30:
89:4e:94:e4:2a:58:d2:67:e9:9a:ff:9c:ef:c8:bd:
d7:77:ee:77:cb:4b:76:18:37:fd:f7:b2:36:e6:76:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A0:E1:95:4E:A9:52:43:8A:FE:79:EE:C4:31:04:05:9A:80:A7:BA
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:70:3a:2e:7a:35:44:41:6f:c0:a3:8d:b8:5b:5c:ab:85:a3:
7d:3a:ed:66:0b:26:48:81:6e:2c:38:47:38:cd:ba:13:d6:c5:
1e:f6:34:77:f7:7c:98:57:23:66:ad:c4:84:10:14:fc:4a:bb:
af:b3:2b:5e:ae:a3:5a:2b:d1:7a:fc:48:51:55:ff:2a:10:94:
8c:8a:11:a8:b7:6e:54:af:36:2b:47:c1:21:8c:c9:7f:53:cf:
52:20:20:15:51:ff:27:7c:f3:e9:9d:3e:04:e8:46:26:45:7e:
5f:a4:f1:8a:72:46:c3:cb:13:af:d1:d6:e4:4c:ee:d1:1b:c7:
bf:73:a5:f9:19:54:9e:23:dc:47:bb:9f:9d:b4:fe:2f:18:da:
32:ad:5d:c0:71:da:6c:b7:0b:b1:28:f0:79:29:77:80:2b:79:
ae:e9:a5:5c:19:a6:50:13:90:f3:df:c2:fd:03:b4:40:93:d7:
de:ca:70:78:b3:4d:d4:ae:96:12:fa:85:1e:69:53:bc:6f:b2:
8b:ab:05:b5:37:e2:10:f4:83:75:34:f5:f2:2e:e0:80:ab:97:
28:ce:89:ae:93:9f:13:44:81:37:4c:ee:41:92:5d:b0:94:a4:
7b:0c:ae:37:c6:08:4e:22:e6:e0:55:3b:f2:23:a8:52:2c:89:
0e:cc:6e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:00 2025 by rpki-client