
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File: DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier: nODsA8FYZd77pk9hAW4H8IUOgxAdA5qvJmuZIqJBIdg=
Subject key identifier: 9E:61:A3:92:01:7A:26:9B:E2:28:81:6C:72:14:FB:90:F1:6A:24:1B
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer: /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial: 0198D73B6A803AF98D6480B765083AEA77B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number: 0B55
Signing time: Sat 23 Aug 2025 14:00:51 +0000
Manifest this update: Sat 23 Aug 2025 14:00:51 +0000
Manifest next update: Sun 24 Aug 2025 14:00:51 +0000
Files and hashes: 1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: sBUi5iv++xnD220DuGmEr1596r3Ubqb78QeToX7tp3E=)
2: xx1FjY8JYYnnymM_Usd0dhEPXMc.roa (hash: jThxXylFfBYyWhSUb/DWJLhZb//oHbnd3oYRtsD1klg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:6a:80:3a:f9:8d:64:80:b7:65:08:3a:ea:77:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
Validity
Not Before: Aug 23 14:00:51 2025 GMT
Not After : Aug 24 14:00:51 2025 GMT
Subject: CN=9e61a392017a269be228816c7214fb90f16a241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3a:90:8f:65:7b:d8:2a:a6:66:ee:cc:e4:87:
62:10:f9:21:00:86:5e:26:d0:c2:fb:93:e6:16:a5:
51:f3:f2:c2:f9:fa:de:dc:74:9e:47:2c:3f:11:57:
6c:7d:4a:81:59:92:3a:e1:e4:b1:ec:61:8a:c9:4d:
8d:d4:7a:04:5a:48:7a:d1:45:d6:64:84:c3:70:16:
7c:82:6b:38:f4:e0:19:0a:21:c1:4e:cf:9d:f8:a7:
02:ab:d1:cc:74:88:b2:5e:57:7a:e0:98:86:66:d9:
1d:04:c0:34:1b:c0:65:2d:18:61:27:62:4e:72:51:
3f:4d:14:a9:d2:27:e8:1f:1f:6c:61:32:29:3b:56:
71:3f:cb:14:b4:b8:7a:cf:c6:f7:12:9a:6f:f9:ac:
80:42:c0:79:40:ca:fb:56:c0:3e:e5:85:a7:d2:13:
65:87:34:3d:74:c4:c8:1b:09:a1:7d:c8:97:99:98:
30:74:14:c4:42:ec:9e:cf:79:97:f2:52:8f:00:04:
7d:c8:49:62:b4:49:18:72:ad:b8:06:12:63:15:7c:
cc:8e:e9:0a:4d:6f:e2:27:ba:db:a1:7f:ae:b4:06:
fc:a0:52:91:8e:71:78:6e:06:52:5e:0f:e1:0c:ce:
6a:d6:4a:a8:26:f3:4a:7b:8c:d5:a5:e7:09:e7:72:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:61:A3:92:01:7A:26:9B:E2:28:81:6C:72:14:FB:90:F1:6A:24:1B
X509v3 Authority Key Identifier:
keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:28:87:af:9f:52:72:96:52:14:ea:d4:91:ec:0a:d9:bd:d5:
7b:60:e4:8a:f1:a7:ed:72:c7:04:43:b2:3f:02:43:57:86:96:
fc:7e:ff:83:ec:65:e3:52:15:26:ff:85:a3:c4:91:4a:e4:0b:
bc:73:1b:62:ad:10:b7:e6:3f:e6:f1:f3:ec:7f:44:45:18:51:
b1:b5:fe:c8:ff:4b:e4:62:37:78:3d:a5:1a:73:f9:22:43:c7:
f5:38:24:d8:3d:7d:5d:c5:e8:86:7a:c4:a0:16:a7:ad:1a:bd:
28:17:21:cb:d7:f6:ea:c4:de:d7:8e:38:bc:38:e3:b0:64:ce:
07:02:a0:df:83:68:0a:41:d2:81:6f:af:01:a1:df:88:c7:7f:
0c:e9:97:ff:96:32:1c:fa:c4:b4:5f:8a:f5:9e:aa:a5:ed:fc:
11:8d:01:8f:16:25:59:c2:f6:1b:5d:7a:c5:6e:3b:3e:a6:c1:
0f:f3:b7:2f:29:b7:2e:b0:c2:94:cc:c7:84:a3:c6:ec:b7:c2:
47:92:57:62:8a:c6:12:6f:15:c8:9e:0a:55:18:45:71:d6:b6:
7f:e5:5f:9a:54:dd:db:29:9b:8d:bc:df:3a:6e:e7:d2:7c:8c:
ba:c2:90:33:d6:80:19:e5:1f:ef:42:df:cb:9a:6f:0b:b3:c1:
15:77:78:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:17:06 2025 by rpki-client