Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: crAzrbN63EvRfnqcpl/6o7CqsWYIa+gM5okI35K13q4=
Subject key identifier: 18:15:FD:BF:AA:01:9D:A7:80:B9:4B:72:BC:6E:60:EB:5E:31:A5:AD
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 0198D4DFEAC639B647939A2EF0890D284CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:40 +0000
Manifest this update: Sat 23 Aug 2025 03:01:40 +0000
Manifest next update: Sun 24 Aug 2025 03:01:40 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: joIZyvZ5k6iDBvZ4c3OM5ILSgykvY+Li+MCWtI4Co+w=)
2: dl4ybKFr-mjNJ3kV-IfkyZfwx44.roa (hash: /jV0BskL+oSsTISEbyqI8M7CEUXp7IlGvyGOrlDZbmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ea:c6:39:b6:47:93:9a:2e:f0:89:0d:28:4c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Aug 23 03:01:40 2025 GMT
Not After : Aug 24 03:01:40 2025 GMT
Subject: CN=1815fdbfaa019da780b94b72bc6e60eb5e31a5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:d2:27:fc:08:fa:de:52:39:ea:b5:05:1d:
74:3d:05:f9:5a:94:29:11:f2:78:b6:5f:d1:1c:72:
93:3c:c7:69:a6:81:0a:92:a6:eb:b6:e8:d5:9b:80:
51:67:89:03:ed:a6:92:a6:f0:83:70:97:06:2a:3f:
72:af:db:9e:3a:3c:a3:9e:b1:5e:7e:26:60:f9:1a:
74:7b:e9:77:f5:49:2d:f1:5a:e3:a0:aa:52:70:d0:
08:b9:27:3c:4c:04:77:4a:17:34:96:3f:4e:f1:1d:
e1:c6:7a:8b:07:49:d1:17:6e:63:a6:60:f8:68:85:
9d:69:16:8a:02:a5:85:36:ee:8c:e2:ec:85:92:d3:
e7:09:69:f6:cc:ec:f2:0e:f4:f7:e5:8c:42:8d:09:
49:cd:69:92:29:80:d0:1f:85:bb:b7:61:09:4c:5d:
c9:dd:42:ce:b8:eb:77:a8:ae:6c:43:aa:71:db:5c:
2e:3b:06:3a:4a:47:2e:40:2c:e3:08:a4:5c:45:1d:
d3:c6:07:eb:1d:14:8d:1e:bd:e9:b3:31:07:1d:70:
54:f7:d2:de:e7:bc:20:b7:d3:1b:78:a0:ac:10:ae:
67:d6:3f:18:89:05:87:59:19:1d:1e:e1:c1:bc:93:
a7:ae:39:7d:64:ae:31:4c:a8:a9:b8:12:c1:2a:e1:
c6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:15:FD:BF:AA:01:9D:A7:80:B9:4B:72:BC:6E:60:EB:5E:31:A5:AD
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:af:05:f8:1a:8b:82:d9:24:3e:38:b6:40:3e:5c:d8:c7:2a:
90:bc:87:2e:d1:2b:29:3b:e2:51:9e:b1:da:38:63:88:0d:e6:
04:fc:7c:8e:69:26:db:87:56:c5:e6:fa:df:0e:6e:f8:95:1b:
9d:0b:a9:2c:04:7c:da:71:9c:2e:f5:28:2f:ff:bc:5a:83:9b:
70:ce:b0:87:d5:a6:6f:38:a9:4b:05:01:07:d4:81:28:f6:13:
12:70:65:ad:fc:14:95:bc:4c:b2:50:50:04:48:ee:9e:6d:8e:
5d:85:29:0b:8e:3b:e7:0a:de:92:d8:1c:48:47:56:61:0f:ae:
97:7f:1f:ce:2c:5f:be:81:6b:bd:b1:59:4b:4f:1f:7f:17:c4:
27:12:bc:fe:96:19:c0:e2:87:e1:6e:f3:6b:83:de:e9:34:64:
51:65:06:d5:63:50:0b:93:4a:35:4c:72:3c:64:2a:02:ef:c2:
d3:26:38:88:7b:35:e5:b5:c3:e7:12:20:4a:e6:a3:d6:e4:91:
ce:55:9a:1a:0d:0b:41:ed:35:22:91:9f:0a:4d:ae:40:28:b4:
8d:86:45:b3:18:9b:ed:da:09:bb:a5:a4:7a:4d:12:cd:08:c7:
9a:60:7a:ff:ad:0b:dc:69:2d:29:34:a3:90:8c:3a:45:20:1c:
eb:af:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:19 2025 by rpki-client