Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: HoRpB7MhkxE8x5L6d1LL4AquzYz35Kwb/UOzkPcaNJo=
Subject key identifier: 7F:CC:2E:B3:32:57:66:31:CE:97:07:B5:92:92:F6:DA:19:5D:47:D6
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019A00DA38E1FB88B5A43DB62865371A2B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 0589
Signing time: Mon 20 Oct 2025 09:01:32 +0000
Manifest this update: Mon 20 Oct 2025 09:01:32 +0000
Manifest next update: Tue 21 Oct 2025 09:01:32 +0000
Files and hashes: 1: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (hash: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: utGALkJEOoeCg3PPwDkz2eCZi2fKw3eScfJXPP/9N4w=)
3: Zj1rmMEpOraplrkaquOM2ubO6Mc.roa (hash: oIS73RHQscBvRjMMzd2FUWBDj9UGJrVmsW4v2M6hJEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:38:e1:fb:88:b5:a4:3d:b6:28:65:37:1a:2b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Oct 20 09:01:32 2025 GMT
Not After : Oct 21 09:01:32 2025 GMT
Subject: CN=7fcc2eb332576631ce9707b59292f6da195d47d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:32:91:59:70:d4:b7:0d:7a:db:58:d4:43:
0b:89:97:ec:4a:20:82:cc:08:82:12:91:2a:0d:dd:
b6:24:d6:3b:c2:37:3c:c2:31:f5:c8:e1:11:21:bc:
83:b7:46:4c:db:66:f4:62:2c:9c:1c:b5:ce:cd:83:
82:3a:be:39:7d:eb:4a:8a:f3:9b:f4:6b:e9:19:f5:
7a:68:89:be:62:72:23:a4:d9:09:4c:b7:85:86:61:
a0:f9:4a:fe:7e:b2:6a:98:ad:7b:a7:e5:ea:64:fe:
60:e4:5c:fa:2a:8c:e2:80:0d:4a:db:31:7e:d8:ac:
de:91:44:4e:dc:51:b5:7c:c5:d2:78:40:e8:a0:cd:
59:ed:2e:02:92:46:48:24:99:fa:0e:86:ba:3f:a2:
19:77:1d:41:61:6c:ba:21:43:7b:16:74:97:f0:86:
fa:38:33:f0:e8:10:9c:bd:66:12:fb:c9:33:36:35:
14:7f:84:4e:a5:db:2d:55:06:4a:04:21:63:4a:f5:
73:a8:be:45:51:de:78:12:08:3c:10:d0:d9:f1:3b:
7e:ba:aa:3b:ca:8f:d8:e0:e5:b9:68:27:3a:28:bc:
58:94:be:a2:65:b3:a2:1c:f1:9d:6b:32:56:46:d8:
87:b7:76:73:92:9b:28:4a:1c:0b:b9:9e:38:dd:ae:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CC:2E:B3:32:57:66:31:CE:97:07:B5:92:92:F6:DA:19:5D:47:D6
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ce:12:18:97:28:e9:12:7e:cd:37:61:ba:cb:03:fb:ef:e3:
3b:cd:bc:f7:fa:bd:7f:23:b8:34:11:98:5e:fe:b9:69:8f:be:
94:6e:70:a7:a5:25:ed:e5:a5:f5:b1:6e:d4:88:37:6f:b8:c1:
17:52:0c:92:b9:ef:5a:e3:ac:24:86:38:f4:92:3f:41:1d:06:
42:a0:27:c6:f9:11:7d:a4:14:0e:6d:cf:42:fb:05:f0:8a:27:
e3:4f:dc:71:59:b9:a4:d6:d7:71:29:7d:89:1e:fd:62:b1:92:
59:69:72:e3:ca:57:a5:ba:8e:6f:08:3b:22:d8:d3:38:c2:b4:
69:20:3e:04:cd:34:d1:3a:78:43:8e:3a:74:45:11:a4:a4:2b:
ca:63:6a:48:40:c7:2a:bb:e8:5e:7b:ba:40:58:4c:fe:7d:62:
09:5f:e1:3f:fc:c3:39:a5:24:e4:cf:00:77:cc:aa:d5:23:83:
78:33:6c:05:8a:68:05:c5:0b:64:ba:8b:40:70:f5:dc:77:3c:
35:34:33:c7:4e:bd:ef:29:c1:61:0b:98:d3:6b:c4:09:05:83:
79:5c:82:e2:c8:bf:4d:7a:31:56:da:b6:a6:8d:21:27:05:f9:
6d:59:f1:3b:49:e6:5e:93:ff:69:45:a0:60:73:2f:5f:07:e9:
a8:d6:4e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:08:07 2025 by rpki-client