Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: 4ulifqimJs9xn6Ru9yCAFICOX6FnskwiGVL6dSPfC/8=
Subject key identifier: A2:A7:32:C3:3D:15:07:42:E1:7F:32:6E:6A:50:73:5D:A7:F0:03:AB
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 0198D4E03774963B7D689F102190B4546EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 09E5
Signing time: Sat 23 Aug 2025 03:02:00 +0000
Manifest this update: Sat 23 Aug 2025 03:02:00 +0000
Manifest next update: Sun 24 Aug 2025 03:02:00 +0000
Files and hashes: 1: 9AG_khzlUq_52M_uwAyAT--X2D8.roa (hash: j5npHva08ps2FjnGO8hTZ3BTaOYOIDt9K8fTqv+VPPw=)
2: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: QmDGMRjDJgY8L4pGlvydJyUruy70l92lTWvzsvMK3Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:37:74:96:3b:7d:68:9f:10:21:90:b4:54:6e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Aug 23 03:02:00 2025 GMT
Not After : Aug 24 03:02:00 2025 GMT
Subject: CN=a2a732c33d150742e17f326e6a50735da7f003ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:ec:e0:20:1d:1f:e8:be:ba:91:e5:82:69:
55:6e:d6:e8:8e:a3:81:d6:cc:fa:08:3f:67:b4:e7:
fc:4f:9c:7a:ca:6d:fc:d6:74:1e:6d:be:28:70:f8:
1d:62:93:01:3c:5f:93:3b:b9:8c:37:13:8a:41:a3:
ec:d1:b0:8a:c2:f0:20:40:a7:de:b5:69:ff:7d:af:
d9:6b:73:fa:be:7e:c1:0f:02:87:ab:9c:66:a2:77:
11:ff:b0:12:2c:b3:fc:b4:d4:62:e0:65:e7:bb:f3:
d3:8d:2f:b8:cd:58:7a:bc:2d:c5:a0:43:fd:b3:f2:
b0:02:25:00:6f:e8:45:23:9c:57:c4:69:3f:92:2b:
17:36:44:35:2c:31:fb:a9:fb:d1:c4:0c:4c:77:f6:
db:a1:39:e1:25:cb:87:4d:36:b0:c7:3d:8b:90:82:
7b:2f:7f:b3:34:9e:93:39:5b:1c:5d:51:d5:b6:0a:
12:a3:b6:9d:b5:40:ae:63:d3:4d:f5:dc:4f:90:f2:
bb:ef:85:2e:70:51:9d:59:f6:3b:8e:85:b6:ab:6a:
74:1b:16:7b:7d:cb:e2:26:ce:79:ca:f8:64:ae:89:
1f:f3:f7:d4:87:3e:6b:24:f9:16:67:32:61:6a:b0:
e7:df:0d:7d:23:2b:95:ea:d4:3d:64:4f:ea:fb:54:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A7:32:C3:3D:15:07:42:E1:7F:32:6E:6A:50:73:5D:A7:F0:03:AB
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a8:94:b4:6e:6e:96:4e:26:1f:6b:74:84:7d:ee:30:9a:ff:
1f:3f:ac:ea:85:2e:4d:4f:9d:0c:32:e9:72:d2:e6:ea:e3:41:
02:af:4f:73:a8:0e:57:d9:e3:87:7c:af:a5:0c:c4:33:b8:30:
8c:a8:a5:70:3a:49:54:2d:5c:99:8f:ed:57:dd:ef:a1:24:3a:
38:6f:cd:cf:4f:09:ae:17:6d:7e:3c:24:6a:82:f3:fe:ea:8e:
87:ab:07:40:cd:fa:26:02:46:23:09:5a:26:2f:50:81:18:f8:
90:ef:c5:eb:60:65:fa:72:fd:f1:74:de:f7:85:6a:16:60:1f:
3b:35:21:58:2b:3b:5e:ac:c2:b1:47:2e:58:e5:77:89:8b:4b:
8c:e3:c3:26:7e:bc:df:aa:c4:98:b4:67:88:b6:66:55:65:d3:
2e:c9:53:44:47:d6:94:be:7d:58:bd:44:13:1a:01:4c:0f:3c:
30:cd:51:1f:42:69:1c:2b:6e:a3:a3:b8:e1:c7:9a:12:67:da:
19:ee:c7:5e:83:0c:39:12:a8:a4:20:60:f0:15:31:d5:57:93:
6e:5c:83:84:6c:a7:ed:9d:e9:8d:99:ed:0c:c4:23:7f:15:12:
e3:64:71:9e:32:fd:44:36:52:f9:ae:e7:9d:68:a0:e9:57:d1:
0e:a2:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:11 2025 by rpki-client