Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier: RJb4ZyO8HFlMX9F5M6J7nroCUXcfICHih8xcpuL930U=
Subject key identifier: 5C:BC:48:07:3A:77:49:65:BC:0E:7A:D6:9D:45:EC:C6:88:74:C6:45
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial: 0198D6CD9C15E39F1488D7058FB6005DF266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number: 0495
Signing time: Sat 23 Aug 2025 12:00:55 +0000
Manifest this update: Sat 23 Aug 2025 12:00:55 +0000
Manifest next update: Sun 24 Aug 2025 12:00:55 +0000
Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: S1BzSX8+Dh0g6pP/T+3axF+msWIjqJfUixZpLfUrrkU=)
2: YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa (hash: 2QIlFXVhcWVwoyEM0B/+slqeXVtc2ygy29IyQzPmBpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:9c:15:e3:9f:14:88:d7:05:8f:b6:00:5d:f2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Validity
Not Before: Aug 23 12:00:55 2025 GMT
Not After : Aug 24 12:00:55 2025 GMT
Subject: CN=5cbc48073a774965bc0e7ad69d45ecc68874c645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:5c:fd:d1:ed:81:a5:d7:c3:c0:a8:cd:2c:
b3:4e:4e:f8:a4:e0:0f:f9:b8:22:d4:d9:e2:40:3d:
0a:c4:ed:f4:88:18:c2:58:c4:50:55:a3:2e:aa:2a:
44:2e:82:57:6b:10:10:62:08:63:6f:73:3e:2b:61:
05:e6:75:fd:a1:c6:80:e9:24:57:b9:26:52:49:b5:
64:84:55:f3:58:b8:6d:f7:bf:d6:dd:f4:eb:fe:cd:
20:56:d8:ac:4b:e5:23:8f:78:a1:80:e7:a3:ee:7a:
38:3f:92:e5:51:57:79:89:70:8c:39:e6:47:18:66:
ca:5f:2b:cd:cc:f9:3b:16:e1:e0:91:eb:d2:e9:37:
f2:9f:9d:56:b9:49:d1:3c:b9:29:71:f0:e9:f4:5c:
59:23:a1:48:25:e9:9b:68:ad:45:fd:f4:df:57:d8:
6e:4b:d8:e3:46:f7:1e:fe:a6:39:8f:4b:48:77:9a:
61:3d:d7:0e:5a:f4:b6:b7:cd:27:f3:dd:aa:83:50:
a0:cc:66:56:20:89:78:41:0a:ad:07:e3:a2:a1:76:
29:a2:d2:5b:15:a2:fd:e7:4f:ce:0b:91:86:98:e0:
6d:09:74:7f:5d:a2:18:29:b4:25:28:b4:d0:33:cf:
11:8a:7c:50:8b:5c:36:e3:01:50:1b:7f:61:7f:5e:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BC:48:07:3A:77:49:65:BC:0E:7A:D6:9D:45:EC:C6:88:74:C6:45
X509v3 Authority Key Identifier:
keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:74:fa:e6:3b:47:33:ce:3d:4a:a8:b3:f1:e3:d3:46:8d:02:
2f:cb:83:04:6e:51:63:f4:5e:ad:63:78:5c:fc:78:2c:1f:c5:
50:b1:e3:5e:0c:c7:e2:b9:9a:72:09:44:f1:0f:46:d7:b1:74:
77:99:47:1f:3f:e8:b5:b4:40:f9:ac:e3:f5:8f:b5:7e:86:bf:
dd:ce:b2:a7:9b:80:71:8c:0a:95:66:6a:cb:34:15:76:56:43:
1c:70:4e:f7:d2:ea:a5:95:c8:41:5e:a2:2e:82:f7:79:9f:42:
58:92:af:c5:34:8c:66:2f:39:af:84:fa:61:a9:a7:a1:80:0e:
96:44:0c:8d:f9:5e:65:43:6f:a8:6d:13:5a:a2:4a:d7:68:14:
3d:f6:7b:ab:4b:b3:03:23:d6:6f:1e:5c:f6:33:95:14:46:9d:
7d:34:c3:de:06:72:c6:43:52:85:4f:9e:38:98:73:da:4d:16:
35:f8:d0:0d:05:91:3e:bc:20:21:64:b7:dc:61:ad:1d:16:20:
9e:6c:93:a7:81:44:0e:a3:4b:de:39:53:94:94:9a:1f:cd:14:
37:e4:39:34:9f:e4:e6:63:21:99:85:e7:41:e6:e9:94:27:b4:
c9:9d:4a:08:52:4c:c8:7e:3f:03:6d:7f:35:c2:22:22:4b:89:
7e:54:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:21 2025 by rpki-client