Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: /YIVBMNpI+SF0l3eeFxOSmWZTQL4H1trpLuy5D8AA0M=
Subject key identifier: 46:EC:43:9E:71:E4:CD:04:2B:13:BD:6D:FD:3E:B7:B0:13:C1:3B:83
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 0198D4E0D66073205A20E0B9AF8D2A8CD910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0C53
Signing time: Sat 23 Aug 2025 03:02:41 +0000
Manifest this update: Sat 23 Aug 2025 03:02:41 +0000
Manifest next update: Sun 24 Aug 2025 03:02:41 +0000
Files and hashes: 1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: 4ZgIOZ7tLoJhyjVb3BFtCIfaIwZbGfYb82YeOBnsmLA=)
3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d6:60:73:20:5a:20:e0:b9:af:8d:2a:8c:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Aug 23 03:02:41 2025 GMT
Not After : Aug 24 03:02:41 2025 GMT
Subject: CN=46ec439e71e4cd042b13bd6dfd3eb7b013c13b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9a:c5:05:be:ea:d2:1f:81:c1:e7:d3:35:e8:
1c:c4:da:f6:39:a6:ea:19:b5:b4:13:77:2c:3c:43:
74:fd:39:f2:19:d4:6e:b6:20:67:97:8f:56:98:dd:
04:99:8c:5b:4a:87:b5:86:08:68:fe:93:da:d6:c8:
80:83:0c:5c:40:53:8b:57:71:2a:ab:6c:6a:8b:c9:
6c:26:63:20:62:68:5a:8d:23:60:2d:ae:c7:c2:84:
e8:90:7b:54:1f:b4:8b:25:b6:68:50:84:fa:0c:a6:
fa:f0:c2:b5:43:37:e8:a4:93:d0:a5:95:0d:2f:fc:
6b:ce:14:33:0a:1e:f6:24:5c:a8:2b:4b:97:4e:ec:
b2:33:7f:9a:1e:dd:4e:df:87:7f:48:13:43:2b:f4:
67:c1:33:a8:49:d3:4e:e3:3e:ad:6f:a6:b3:3e:bb:
e8:97:a1:e2:39:06:91:c8:2a:75:9a:53:61:08:9d:
01:34:79:5a:21:42:50:c2:dc:9e:6d:f2:01:10:f3:
f7:c9:d0:ed:35:2d:06:de:95:5c:b0:9f:ad:93:33:
9e:da:6f:16:39:59:a7:5c:7c:0b:5c:10:0d:d0:8e:
9d:94:57:7a:63:4a:05:f9:cb:8a:43:13:95:dc:b8:
dc:33:47:01:70:f5:a0:1e:79:ac:06:8e:bd:fa:f9:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EC:43:9E:71:E4:CD:04:2B:13:BD:6D:FD:3E:B7:B0:13:C1:3B:83
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6a:92:7e:3b:10:fc:16:19:c6:3f:61:fe:5f:36:65:99:c3:
31:ea:ac:82:15:bd:a3:a7:8c:66:a1:55:7f:ea:2a:ba:17:0e:
4a:54:b4:4d:32:b1:25:68:8f:10:79:98:e2:71:97:bd:f7:e3:
f3:3d:fa:b8:82:3d:c6:9d:49:76:d1:40:c8:37:91:2d:6d:34:
81:31:e5:df:17:5d:87:dd:a4:ec:7c:d1:11:4a:89:cd:e4:bb:
b7:28:4e:25:6a:31:6f:b3:e6:59:04:85:8d:5c:1a:c6:d9:8e:
74:92:e4:4b:c4:9f:cb:14:11:be:ca:19:12:2b:89:80:28:91:
e5:d7:dd:74:19:a1:96:c6:4a:e0:c7:2d:33:35:be:a2:38:82:
e6:02:26:7e:2d:6d:fc:43:2d:c9:bf:0d:f9:0d:27:fe:90:65:
ed:de:17:31:f7:27:9f:b0:d6:2c:99:1c:24:a6:e5:22:ad:4b:
12:af:1c:3f:2c:f5:c5:e4:56:44:8c:ff:7d:ee:cb:2a:7f:7d:
d5:c5:46:da:26:03:84:c4:b8:5c:d9:9a:9b:dc:88:39:71:ad:
b7:e0:0d:77:a0:4e:5a:10:69:be:f4:4d:df:64:2d:63:2c:c2:
1e:a4:24:69:84:98:b2:16:ad:4f:18:e0:20:25:91:36:3b:3c:
5c:4f:4c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:22 2025 by rpki-client