Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: 78vjkXyMF55zHAVgV76M85cwSaPuapBkk3bgwC6LH6I=
Subject key identifier: 66:86:E2:DC:7B:E9:BF:9C:4C:DE:2B:0E:99:20:7E:BA:73:6F:68:F9
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 0198D9CE8076AFD95517D3952D46D40F2023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 164B
Signing time: Sun 24 Aug 2025 02:00:45 +0000
Manifest this update: Sun 24 Aug 2025 02:00:45 +0000
Manifest next update: Mon 25 Aug 2025 02:00:45 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: 5EIZVO4ihVRfh+hLMuX9GikMfmJJkvRnhe/fPlGyS2E=)
2: Z6E4tQnRvUpfPcdYuFNVxcJ0ync.roa (hash: xKAWINx5skT5zUOU5FUOicB7VLSOKSuOkc+JGT8/lwg=)
3: icdzN3903U-G6DI4zKp6RZE4flA.roa (hash: kshaHbPYaGNmmaMCwtIlRpH9RaK824cfmas4wivc8R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:ce:80:76:af:d9:55:17:d3:95:2d:46:d4:0f:20:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Aug 24 02:00:45 2025 GMT
Not After : Aug 25 02:00:45 2025 GMT
Subject: CN=6686e2dc7be9bf9c4cde2b0e99207eba736f68f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:85:19:99:03:f8:17:7f:87:bd:4c:c0:0f:
50:34:83:f3:ef:6e:fc:20:4f:33:18:e7:ed:f0:15:
60:46:d4:64:a2:36:24:a6:e6:3b:f4:77:b4:b5:f4:
b4:83:c0:ac:ab:22:14:44:d1:92:01:3a:0a:81:f1:
a6:c3:31:84:30:72:84:09:99:95:55:1f:be:a3:d2:
08:b2:fe:6b:9f:2e:9d:8b:9d:61:98:b3:34:a1:b1:
e6:17:16:b5:a2:17:f3:40:f4:01:68:fd:1e:33:cd:
00:80:ee:4c:37:01:cd:18:2a:7c:aa:a6:c3:f7:0d:
fe:3e:27:10:50:96:f4:e3:5d:5d:f5:e9:58:3e:fd:
e7:62:cb:c9:c2:36:0a:85:69:23:85:e0:82:b5:ab:
49:77:88:52:8b:82:28:e1:17:ee:c6:a0:de:ca:76:
86:aa:bb:13:29:03:65:aa:85:97:e1:38:85:a2:c6:
8f:b7:3b:54:54:54:2c:9d:60:95:73:31:91:ac:6f:
ed:29:ec:ba:64:87:11:8b:c1:9b:88:be:ce:4c:70:
7c:69:8e:55:98:bd:0e:0b:24:d3:4a:92:12:fb:8e:
79:40:e2:88:58:bc:3f:70:b6:49:20:18:80:41:fb:
a9:7d:31:65:8c:7f:80:d6:8b:9c:5b:a9:42:02:09:
25:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:86:E2:DC:7B:E9:BF:9C:4C:DE:2B:0E:99:20:7E:BA:73:6F:68:F9
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:03:d4:90:52:d9:95:41:79:21:66:a1:55:96:5c:72:f4:90:
a9:0b:49:35:54:eb:a8:1d:67:46:18:2c:3f:e7:5e:36:f3:a3:
27:52:81:2a:f3:e6:bc:12:7f:4b:7a:46:6a:3a:1e:eb:47:8f:
55:6d:d1:68:f3:25:92:67:6a:6d:81:9b:9d:ab:36:1f:b1:ab:
fb:5a:14:31:6f:3b:1a:3c:ac:0a:7b:e9:bb:3f:cb:f2:3b:8d:
64:1b:c1:74:b0:ab:d3:a6:90:35:fe:b7:e3:4e:bb:bb:02:3a:
82:75:51:2f:89:34:35:f0:84:e7:f0:aa:0f:64:a0:3d:35:df:
8a:30:06:ca:9e:76:f7:b7:7c:ad:79:2f:f5:d4:27:b1:4a:d8:
85:4f:e6:56:d8:78:7e:53:41:06:63:dd:2f:d9:ea:0a:3a:66:
f2:4f:8a:b0:9e:6d:b7:a6:95:54:48:f1:44:93:ef:20:42:e1:
31:f2:10:1c:f5:2f:39:de:14:f3:93:bd:0e:71:12:5e:e3:16:
96:f1:f4:4d:14:c3:6a:87:09:e2:81:00:e5:4b:92:ee:6e:d6:
10:98:08:7b:a5:8e:4e:6b:0c:a0:b5:97:4b:e4:0a:f5:04:af:
ce:0c:9f:85:cc:37:9b:d5:60:70:0e:96:f7:cf:55:46:18:f9:
e0:cc:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:17:15 2025 by rpki-client