Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json)
Hash identifier: db5L/BrJOw8aVw5ezqb0DsdlILMDyvGvN4i0xyCB0G0=
Subject key identifier: 61:59:01:E9:FD:2F:80:1E:E0:46:F4:EA:6A:FA:45:0D:71:5C:2A:8A
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 0198D4DFEC6E7E9BFFA0B823B9982ADDF9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:41 +0000
Manifest this update: Sat 23 Aug 2025 03:01:41 +0000
Manifest next update: Sun 24 Aug 2025 03:01:41 +0000
Files and hashes: 1: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: vQ38Wl3FFH7PdmWKcSTTEicBEgkLGstq6PmMeXGTQgk=)
2: SUwSO2Fs2FjhvtnhOTiiq1oGzWM.roa (hash: olDxnIOko1Itz17Pa+h1ZPnFbbCInWHBCOkMHLf/KiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ec:6e:7e:9b:ff:a0:b8:23:b9:98:2a:dd:f9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: Aug 23 03:01:41 2025 GMT
Not After : Aug 24 03:01:41 2025 GMT
Subject: CN=615901e9fd2f801ee046f4ea6afa450d715c2a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4b:c7:ed:4c:78:17:33:92:90:07:b1:0c:09:
41:7a:d5:d8:71:77:a0:04:d4:5d:7f:ee:58:e0:33:
31:e6:6f:06:8e:a2:80:ce:38:94:35:36:4c:31:53:
0d:b1:e8:ba:8a:5f:13:5c:c4:13:c0:95:47:31:a9:
65:aa:cc:b6:1e:be:18:68:fd:e7:1f:7a:4f:af:74:
61:40:79:c9:d4:18:f5:f0:a3:d0:9f:5a:b7:b0:82:
89:09:db:6c:3a:47:12:a8:e5:70:c5:be:8f:78:1d:
f7:81:d8:b5:79:9e:eb:53:51:96:99:e1:1e:b5:0a:
f7:44:ee:52:a0:9f:f1:d1:06:1f:c5:45:04:70:f0:
2b:6d:8e:a1:6e:a1:1b:ff:0f:38:df:fb:c6:8e:ea:
cc:7b:ca:31:c1:39:20:8e:2e:a9:df:a0:50:b0:4a:
37:0f:72:84:64:04:57:fe:3e:cf:0a:2d:0f:02:60:
12:e7:33:c1:4d:14:7c:c3:49:8d:78:e3:ba:ca:fb:
1a:3e:67:ec:b9:39:48:d4:b8:37:65:6d:9d:d5:cf:
e0:39:5e:4b:97:af:df:f3:3e:1f:39:51:2a:7b:1a:
07:dc:bc:cb:40:fc:9a:5e:24:2b:90:ed:93:80:47:
1b:8c:9c:fa:4c:24:89:d5:4d:d5:55:f7:56:9a:fb:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:01:E9:FD:2F:80:1E:E0:46:F4:EA:6A:FA:45:0D:71:5C:2A:8A
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d7:d3:3b:8f:2b:e9:df:0f:6b:e6:17:78:19:5d:61:e8:3f:
5a:c2:38:f7:20:c9:6b:3e:1d:9f:77:62:a4:06:7c:31:ff:95:
37:b5:b2:0a:ad:be:12:da:dc:93:3b:62:dd:a1:63:09:65:97:
bd:da:17:1f:54:77:ae:58:19:5b:38:26:00:4d:00:77:ec:04:
a9:68:17:c1:3f:44:17:cd:78:cd:22:d2:5d:6c:59:e0:c5:f9:
24:e4:5b:26:3f:54:b3:a3:88:ab:95:bd:69:ac:d4:d2:d5:56:
a2:d1:c1:11:fa:a6:27:c4:48:2c:3d:e1:ab:dd:51:46:fa:91:
f1:97:02:45:55:22:63:34:ad:71:cd:9c:a9:5b:fc:e9:dd:61:
53:79:46:ee:8c:d0:99:01:88:02:ab:22:79:51:1f:e3:78:61:
b5:ce:12:34:74:68:8f:9b:66:0f:a7:e0:04:b5:c2:d9:2d:ae:
fd:e1:a6:aa:ea:00:e2:8b:de:2f:32:01:f0:cd:de:e8:f3:26:
6e:40:94:9c:a4:81:68:12:69:1a:4a:6d:3d:80:b3:ea:8c:fa:
ee:61:13:8b:66:0c:fd:b9:e9:0b:d2:f8:48:29:6f:7d:a7:90:
55:8e:79:9f:39:f4:58:cd:94:3a:cb:70:b6:32:b9:66:6c:80:
40:29:39:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:09 2025 by rpki-client