Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json)
Hash identifier: vYwd07N+d+5wufrp5nXsP/HtV2GkcQm8/+TKqD5e2B4=
Subject key identifier: 11:8C:2E:0D:8B:6E:F1:20:67:C0:DC:92:8E:47:2A:7B:F7:18:73:2D
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 0198D404DF49302D6993DED732EB0C88E80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
Manifest number: 1603
Signing time: Fri 22 Aug 2025 23:02:25 +0000
Manifest this update: Fri 22 Aug 2025 23:02:25 +0000
Manifest next update: Sat 23 Aug 2025 23:02:25 +0000
Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: 5H3hfO1Aj6wHB8gdmUyCM6DDOFhUd3eErGcYIc9F6Wc=)
2: J3l5rSoC85N4xAXm2HxvLusDt_A.roa (hash: jgHAZqarPBwPQhS0mFPS0Zo6XKz3AtLQwgXQdr9WvR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:df:49:30:2d:69:93:de:d7:32:eb:0c:88:e8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Aug 22 23:02:25 2025 GMT
Not After : Aug 23 23:02:25 2025 GMT
Subject: CN=118c2e0d8b6ef12067c0dc928e472a7bf718732d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:49:bb:03:7f:db:64:58:8d:95:05:6a:1a:
58:92:cf:1d:56:c6:b9:d7:02:7c:f9:c8:72:02:34:
66:bf:6a:dc:00:f3:67:e1:71:b2:78:48:19:0a:6c:
92:1e:b3:4c:ac:ca:fe:a8:f2:7a:08:2b:5b:63:16:
20:7a:ad:a5:ef:bb:84:54:24:3f:18:36:2a:91:31:
ae:50:69:2f:5c:75:4f:4b:a5:f0:d3:15:a6:8b:d0:
6f:f0:42:4a:8c:53:68:e1:38:e3:33:f9:80:e8:f4:
ff:27:47:5f:c3:4e:6e:c2:9b:7b:c5:03:47:4f:22:
c2:0b:59:2c:5d:08:02:1e:48:9f:1c:73:a3:b0:15:
ec:28:94:96:41:25:77:be:5c:9c:eb:4c:f4:7a:88:
0e:7a:fa:41:58:16:d4:b3:71:0e:4f:14:a1:16:4a:
1a:54:4a:21:03:75:81:b6:31:74:28:27:82:91:f4:
e4:55:c7:fa:86:e0:02:9a:6b:01:62:2c:74:2e:36:
76:02:26:73:0a:42:c0:ad:23:86:90:7a:57:9a:43:
18:9c:c3:93:44:0f:bc:ac:63:7d:99:ba:ca:2b:a7:
2c:c1:65:2e:cc:0b:6c:a4:a8:3c:94:d1:6e:de:91:
5e:1e:f0:c2:c6:5c:3a:60:e4:1c:06:c4:f1:d1:c1:
81:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8C:2E:0D:8B:6E:F1:20:67:C0:DC:92:8E:47:2A:7B:F7:18:73:2D
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6b:3f:b5:05:ff:99:1b:56:0f:cf:28:a5:c9:12:75:ee:b0:
63:50:04:f1:de:9e:9a:94:66:bd:72:dc:a5:1d:33:63:f3:53:
f7:c8:05:0f:5e:0d:f4:7f:b8:7b:72:90:2a:40:7c:5a:5d:18:
04:e3:75:8d:b1:80:cf:3f:4e:d0:54:41:48:f4:f8:7b:03:07:
9f:6e:a8:15:d0:4d:40:63:3a:a4:73:83:90:4c:07:ec:bd:81:
b3:c9:ae:86:c2:4e:73:1b:b3:08:51:89:d4:d3:40:b3:f1:3a:
a7:03:64:96:8e:55:ad:c7:3b:a2:ad:75:3f:6e:12:3a:e6:f9:
ca:1e:9c:ef:e8:4c:2d:bb:1f:42:d7:e2:4a:88:31:8a:e0:4d:
c7:cf:38:d0:e5:52:b1:3f:f5:14:92:b2:ec:82:6e:19:b6:8a:
1d:53:bd:a1:4f:81:37:83:73:1c:1a:72:2d:15:f4:09:4e:d8:
78:b1:48:b1:83:9c:4e:c0:fa:d2:79:6e:c1:b7:2d:ce:d9:68:
9e:cd:a2:d7:34:27:3c:2d:a8:a3:d3:42:11:0b:0f:23:37:fe:
74:3f:b8:42:d0:ac:c9:50:af:dd:9f:2b:37:c6:ea:be:c9:e0:
94:2a:cc:19:23:27:85:7f:6d:0d:3e:40:c5:c7:c5:5a:73:1b:
fb:ec:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:17 2025 by rpki-client