Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier: 5dFBdm67Df4GLjpCXQcJZcgXbwXtGJ39K+PM1EtMQQE=
Subject key identifier: 2C:EC:00:B4:12:00:1D:7A:56:0E:66:FE:F5:18:80:2E:0A:5A:E6:68
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 0198D5BC48AAC6F5DD9F630B4FCA0A962DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 07:02:22 +0000
Manifest this update: Sat 23 Aug 2025 07:02:22 +0000
Manifest next update: Sun 24 Aug 2025 07:02:22 +0000
Files and hashes: 1: 69j8k9W_Kz202mE3W0ylnRGyMyQ.roa (hash: VQv9gDwWX0bKpqI6qovNd6HvrIeep8UuZ4eE64gS7zI=)
2: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: rMBagYaiOarlMMHjxauCC9cTO6Vxix7FW0f5bIJkuyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:48:aa:c6:f5:dd:9f:63:0b:4f:ca:0a:96:2d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Aug 23 07:02:22 2025 GMT
Not After : Aug 24 07:02:22 2025 GMT
Subject: CN=2cec00b412001d7a560e66fef518802e0a5ae668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:69:07:62:73:79:8b:41:d3:10:ba:92:93:c0:
86:ca:26:c1:7d:9e:92:f7:86:0f:a4:eb:6c:e2:db:
b0:f3:86:58:7d:13:4b:35:81:7d:25:26:3a:64:53:
2b:73:aa:f7:27:08:3b:bf:4c:e4:40:75:e2:5f:a4:
44:99:ae:a7:24:78:95:1b:39:1a:ce:03:79:07:eb:
4f:db:b7:fb:ca:b1:73:e8:f5:a4:be:06:59:90:ae:
62:d2:aa:6e:fa:21:1f:78:4a:83:d2:97:b5:65:01:
71:24:38:d8:8e:1d:2c:d1:9c:f8:ae:9c:69:8b:9d:
8f:a4:fd:17:56:e9:90:99:0f:7a:e5:a0:5e:29:04:
e5:e4:58:63:da:e0:22:4c:76:7c:29:e5:2a:2e:4e:
2b:63:fa:b3:7a:84:aa:9d:c4:e7:94:52:09:83:81:
7a:cb:ec:94:8a:6f:20:9e:73:0a:6e:45:8c:c2:2b:
6c:54:76:38:2a:04:93:40:5a:fe:8d:5a:63:62:6e:
0b:25:22:62:18:1a:a4:41:d3:0f:e8:c4:d5:c0:cf:
d9:74:6c:e9:8f:73:19:21:e7:fd:59:b2:0a:8b:d8:
ee:81:e0:5e:ca:79:78:33:81:fd:d8:f3:d5:97:48:
a2:52:88:09:c1:68:a3:59:01:7a:2b:90:a4:7a:08:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:00:B4:12:00:1D:7A:56:0E:66:FE:F5:18:80:2E:0A:5A:E6:68
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b1:30:58:85:a5:42:9d:c9:68:26:6b:d8:84:e6:cc:2c:d9:
01:9d:4b:af:4e:bd:e2:69:ff:a9:d7:ce:bd:99:70:f6:9f:01:
25:24:e0:18:c4:db:c9:2b:e5:f5:a0:58:89:b9:32:c4:de:3e:
1d:8f:65:54:90:19:96:2d:fd:10:20:9c:d1:eb:4c:4b:c7:69:
9c:24:85:8e:c9:79:9a:ef:4b:58:53:37:0a:d6:08:d9:d8:57:
28:86:e0:b6:77:b5:fd:c8:a9:49:94:79:b3:6c:bc:25:12:9b:
e2:a6:3e:b3:68:93:a7:2b:39:fd:81:80:3a:d8:c1:a3:4c:2a:
b3:d0:3f:74:83:cd:26:89:ed:d6:ca:9c:f7:02:39:52:5e:80:
ea:58:f0:fe:0d:ff:d6:78:cb:5a:5c:de:82:8b:0c:f9:12:4d:
ba:77:76:f7:18:80:e2:e7:41:39:8d:9d:34:c3:b7:af:ca:06:
8c:c4:d6:db:5d:2d:b3:9b:e0:df:0c:42:4b:15:26:f1:c0:4f:
f9:27:f7:cb:f5:ad:52:6c:da:89:a2:a5:23:98:31:81:2b:98:
29:22:bd:98:29:e8:36:d2:b8:77:c0:ea:c8:1e:cb:3a:eb:da:
4f:27:36:13:cd:54:02:d1:79:22:06:0b:02:07:89:dd:b3:f5:
fa:8b:11:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:18 2025 by rpki-client