
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: /+MVrBTBKuep8QT8595d+GnysjcgGhDK8mGX/sA9Ug8=
Subject key identifier: 0E:D1:B2:58:38:74:64:5B:65:6A:3E:ED:51:A2:48:18:AC:71:D8:62
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 0198D54E4E13F0A11C812031304D3285089C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 0D67
Signing time: Sat 23 Aug 2025 05:02:15 +0000
Manifest this update: Sat 23 Aug 2025 05:02:15 +0000
Manifest next update: Sun 24 Aug 2025 05:02:15 +0000
Files and hashes: 1: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (hash: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=)
2: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: Xh7gd4gltU03cxx++Z2LL0Sk3d5isSz2wHc4aFQ6JAw=)
3: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (hash: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4e:13:f0:a1:1c:81:20:31:30:4d:32:85:08:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Aug 23 05:02:15 2025 GMT
Not After : Aug 24 05:02:15 2025 GMT
Subject: CN=0ed1b2583874645b656a3eed51a24818ac71d862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:77:f5:ab:0d:8f:ad:66:87:7f:04:e7:4c:
77:6c:c7:72:af:85:f0:e8:3d:ab:03:8a:56:84:ff:
20:53:73:c2:ec:be:36:24:0c:f7:78:b7:c9:6c:03:
6c:a2:10:36:58:80:62:86:46:a7:90:98:a0:90:1e:
80:b8:b7:40:0b:93:ea:7f:1f:fe:31:21:0e:45:35:
d0:15:e8:ee:c7:51:20:dd:77:2a:b2:02:fb:d9:67:
48:05:a6:76:d3:9c:eb:61:f7:1a:19:f4:09:be:38:
41:94:35:1a:92:37:e8:d2:83:f3:2a:8e:35:3f:8e:
88:32:b5:f7:22:4b:42:b3:37:72:70:5e:34:a2:17:
3c:c2:3e:8a:cc:a1:75:9e:dd:f5:9b:4e:f9:29:2c:
a5:fc:9c:e2:63:c8:ef:89:38:42:51:fe:9c:30:50:
9e:ee:3e:f2:01:7c:6d:7d:74:70:06:bb:5a:ef:8f:
a7:a3:3e:2b:ea:13:7b:2c:fb:7d:ab:d9:c1:06:52:
3d:de:7c:7e:0f:65:a8:be:76:e8:38:bb:c6:fd:fe:
d2:5c:52:42:eb:ff:c7:ae:9f:b9:d9:19:20:f3:d2:
ca:92:02:f1:ad:48:6d:bb:34:4b:15:17:cd:d7:3e:
a4:e1:0d:6c:70:45:03:f2:3e:93:2f:83:2a:12:0c:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D1:B2:58:38:74:64:5B:65:6A:3E:ED:51:A2:48:18:AC:71:D8:62
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c8:31:0c:34:d3:d5:58:2e:fa:94:49:ef:e9:64:d5:f9:58:
6a:a9:86:c1:66:ac:1c:88:2d:dc:05:4a:e1:7a:66:42:8c:0e:
93:f6:da:82:87:b5:ac:00:e8:10:c6:ce:0c:75:05:07:b5:0e:
e2:7d:60:7a:03:4c:5e:e8:8a:48:da:b6:f1:1c:03:e8:ed:82:
d0:f9:f7:64:48:ba:eb:04:b9:61:aa:61:a9:81:b2:79:bc:11:
97:eb:0e:11:d2:ce:e0:7e:7b:b8:44:82:69:21:17:5b:1b:66:
2b:40:18:32:94:f4:9e:13:d7:91:63:cb:28:de:cb:96:64:e2:
3f:0e:13:e9:0b:67:ec:f5:a4:1c:3f:b3:29:a2:39:e7:bb:1a:
ae:bd:98:be:68:86:17:3a:d3:ff:d8:a5:d9:a2:d0:e8:5d:08:
64:d2:0e:5c:1e:0c:8e:bb:27:d6:61:91:4e:9c:d6:17:ff:5c:
dd:61:8a:94:7c:84:bf:98:02:b5:e2:62:3c:eb:bf:11:db:6a:
5c:52:c9:2c:6e:9e:52:4f:a1:c7:be:d8:f7:1c:57:b7:6c:17:
05:2a:7f:c8:f9:e5:5d:25:bb:eb:9b:3c:66:22:a6:4a:46:2b:
b1:7f:0b:15:ac:95:64:71:09:da:d1:c9:f4:b7:f8:9e:8f:d2:
5c:7b:4e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:32 2025 by rpki-client