Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: td3DuWVBOOaUB+4Ksz19UXNaChV9zqcQlWWjVaMoIZI=
Subject key identifier: 13:3E:5A:28:89:56:34:50:BE:9F:52:C3:AE:78:F8:7D:91:6B:EC:F7
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 0198D516461CC75BA7881FD5C106AB146644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 04:01:03 +0000
Manifest this update: Sat 23 Aug 2025 04:01:03 +0000
Manifest next update: Sun 24 Aug 2025 04:01:03 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: K8IRDtQ8wyx9q2RagjpJ1rioW4r0r+ytes2TZ7mhehQ=)
2: G0J3ZwqY7nqQ1F-r-kfCdSWuyO4.roa (hash: +njzM6YBvg7QKHzm9fDQxiSdZRBXgF7BQneYn5PkN18=)
3: zYDOCeKC7kKgpKbk0isuZ6zgxdU.roa (hash: w347S4U24N5+dIdmg0/S6hyDG1PqUwaZbQe5AD4eTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:46:1c:c7:5b:a7:88:1f:d5:c1:06:ab:14:66:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Aug 23 04:01:03 2025 GMT
Not After : Aug 24 04:01:03 2025 GMT
Subject: CN=133e5a2889563450be9f52c3ae78f87d916becf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:d4:3b:db:4d:2f:8f:f4:92:be:19:15:20:
e0:44:31:42:ba:32:6c:08:d3:34:77:93:79:7f:8f:
e2:b0:a3:5a:2f:f9:0c:72:be:d8:1e:c9:53:84:94:
48:71:c1:e9:c8:35:6d:bc:3d:d3:06:8f:ae:41:9c:
57:2e:69:fb:13:a3:90:a6:4d:fb:5e:2b:a5:47:63:
3b:38:98:bd:ba:96:9c:7f:08:4b:60:e7:f4:93:0c:
94:ad:4a:50:ab:fa:9c:9e:62:ff:a9:ef:05:64:4e:
ee:95:75:82:ad:2a:47:02:76:06:a2:37:e9:f1:5c:
29:4c:29:1b:89:e2:9b:95:00:c6:86:26:1d:b8:ca:
53:36:3d:35:c1:32:86:76:b4:b9:59:d0:83:e0:ac:
70:33:a2:3b:95:f1:c1:55:da:8d:f7:7a:7a:c1:04:
24:6b:dc:1a:1d:3a:ab:19:81:2d:0e:8c:ff:fb:84:
27:8b:8e:8a:93:9c:c1:95:c0:2c:af:25:c2:8c:76:
1d:ec:c1:1a:41:0a:2e:f9:8b:7f:c6:a6:b2:e4:08:
c2:b1:16:5e:b6:95:ef:c1:c2:ec:c4:cd:6c:a6:67:
97:11:c1:19:b1:8a:6f:11:03:73:8e:66:51:67:b4:
29:86:a4:fb:a7:b0:99:0c:cd:20:bb:75:a5:c8:7e:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3E:5A:28:89:56:34:50:BE:9F:52:C3:AE:78:F8:7D:91:6B:EC:F7
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:01:61:1c:89:90:55:20:40:4d:c6:bc:91:54:94:48:4e:26:
bb:17:0a:b0:37:a7:7d:aa:53:b3:d8:e0:28:80:7c:de:80:41:
f2:69:00:fd:7f:58:b3:30:6f:3e:c8:f5:41:2e:c5:fb:d9:e6:
88:76:6b:a6:5a:dc:68:fd:0d:a8:47:3e:2a:f5:67:cb:16:9e:
19:53:93:a4:e1:e8:a5:7f:da:88:85:a3:02:38:e9:62:c3:7b:
b9:7d:82:05:0a:14:c4:76:df:41:3b:99:3a:3f:7f:e6:54:a4:
a6:43:3d:d6:bd:cf:94:fc:ec:52:4c:5e:43:65:a8:ec:c9:c7:
a0:53:6f:57:63:4c:3b:7c:02:13:05:3e:2e:5c:95:6a:ef:61:
e7:cb:62:14:c1:f9:5c:6a:96:bc:c9:88:46:94:a0:eb:cc:d8:
80:06:04:b6:0a:fa:80:52:c0:0e:af:08:97:ce:db:e3:44:e6:
64:a6:e9:a8:3b:57:69:e3:ec:17:49:47:df:a1:c3:de:6a:83:
33:f6:09:7e:0e:a5:35:26:10:f6:05:4f:ff:f7:eb:12:80:16:
98:5e:97:8f:7e:f2:95:3c:4f:f3:f2:ab:f4:48:28:37:88:3e:
0a:09:75:e8:1a:2d:0b:65:ce:71:92:bf:75:3f:77:dd:f2:d1:
7e:31:02:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:29 2025 by rpki-client