Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json)
Hash identifier: wMjqrUCU78uRlVEpsqzRrIqUQOmyVrorXA6HTuuqYu8=
Subject key identifier: 05:7A:FB:3C:C5:F7:4F:E4:16:18:DD:3E:0B:F2:08:1C:0E:4C:9C:88
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0198D660B082A147E580570CF02DC3B4E7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
Manifest number: 0A9A
Signing time: Sat 23 Aug 2025 10:01:57 +0000
Manifest this update: Sat 23 Aug 2025 10:01:57 +0000
Manifest next update: Sun 24 Aug 2025 10:01:57 +0000
Files and hashes: 1: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (hash: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=)
2: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: /GpoYMtiDRIJ5SZTuLlewyhjp43xUDqiPM0RscQ5awY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b0:82:a1:47:e5:80:57:0c:f0:2d:c3:b4:e7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Aug 23 10:01:57 2025 GMT
Not After : Aug 24 10:01:57 2025 GMT
Subject: CN=057afb3cc5f74fe41618dd3e0bf2081c0e4c9c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:9d:be:a2:56:44:2f:99:f2:b1:d0:74:53:
4c:54:d3:21:a9:cd:04:4c:ad:8e:a2:88:b1:40:d5:
1a:b9:72:04:66:db:6b:f5:e4:cf:4e:af:b6:4e:bf:
16:4f:c8:3b:2b:6d:d5:02:ee:63:07:2c:29:2b:25:
74:48:55:3b:4b:dd:0a:b8:7f:e9:68:00:b9:36:e6:
43:c5:35:aa:a6:eb:a3:ac:e9:b1:70:68:1f:1a:c6:
58:45:b2:2a:87:55:08:15:b5:15:8c:fd:b7:bc:bd:
5f:42:8a:25:0c:32:a9:64:f2:c5:50:a0:22:5b:25:
8e:61:1f:20:1d:b3:de:d1:f9:c7:40:49:15:76:7b:
84:da:91:19:18:2f:14:cc:e4:c1:9d:9d:d4:85:5e:
77:f8:73:b6:3d:a7:b3:d5:a6:ec:25:52:2a:0e:d2:
c6:60:cb:bd:b4:55:07:da:c4:16:19:59:93:ef:15:
81:9a:8b:a0:37:8d:72:f9:e9:4e:63:08:9c:c1:08:
03:ee:96:c5:3a:6d:21:d4:78:a4:51:04:a5:e2:28:
44:6e:8c:cc:04:36:de:91:a4:6a:31:c0:b5:ec:e9:
32:55:67:8f:98:ad:36:3e:89:f7:92:a6:8d:d1:f2:
60:2e:df:fe:20:ad:d9:bc:1d:3f:20:bd:67:41:69:
db:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7A:FB:3C:C5:F7:4F:E4:16:18:DD:3E:0B:F2:08:1C:0E:4C:9C:88
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3c:07:96:8c:7e:2a:46:f0:64:c6:91:19:bc:72:fe:77:1f:
2e:33:0a:c8:ac:f8:0b:8b:82:96:85:d9:dc:e3:44:c1:8c:1f:
41:71:a8:38:c3:b0:70:6c:ca:df:86:43:9e:bf:86:de:3c:79:
71:80:1b:bd:f0:c3:2c:7c:f9:dc:d3:52:cc:7b:68:a5:da:84:
b3:03:27:f4:2d:fc:49:e2:db:05:d1:10:2d:bc:23:04:93:8b:
83:a6:d8:f7:0c:6a:d8:99:d2:3f:26:9f:6c:c8:a3:fc:2f:66:
aa:d9:62:89:47:54:7c:44:fe:c9:fa:ac:ce:a1:09:cf:ce:57:
91:f1:87:42:ab:53:84:58:8b:d9:6a:de:25:58:46:d7:59:3d:
e7:f2:90:0d:9c:fe:a4:0d:4f:36:6e:96:ad:61:41:b7:76:67:
2a:2d:97:f5:ed:62:cf:c6:d5:00:59:ff:c9:7c:44:02:fe:04:
2c:5a:fe:98:19:c1:fb:84:64:08:fa:97:24:d9:ca:99:98:e6:
37:66:e1:14:e4:6f:e2:70:f0:7a:d9:7b:0b:51:48:9f:4c:c3:
30:4d:73:fe:da:16:5c:30:5c:1a:38:c0:64:8b:18:73:be:6d:
49:81:bc:74:15:17:76:ce:5b:1b:1e:33:bd:77:91:a7:44:32:
a7:27:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:08 2025 by rpki-client