Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: W96ODxEss7QYb0FG7MpfItYUYTmTxbV5xJt0pb4O22Q=
Subject key identifier: 3A:63:71:6C:C9:64:7D:53:E2:93:6F:15:91:51:9A:9F:80:05:B1:B8
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 0198D705969C077ACB21BD620A65C5E480C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 15A8
Signing time: Sat 23 Aug 2025 13:02:04 +0000
Manifest this update: Sat 23 Aug 2025 13:02:04 +0000
Manifest next update: Sun 24 Aug 2025 13:02:04 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: urvpmGH3d5w066oPG5RHigWnFYN62qIJ/sMJuSdCrz8=)
2: UgQOVXjSfDZ0oMmnpF9LnBZc5Iw.roa (hash: EuORew0X+P8iEghXgdkM03dJatTHGRU6W9xGTUJPJEY=)
3: WnLaCz0whNUAj7xt1GXCRyC0ff4.roa (hash: 1NkpD3wTqpaneQCvPoyVPVIPTREHfmPMSbzyzikhuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:96:9c:07:7a:cb:21:bd:62:0a:65:c5:e4:80:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Aug 23 13:02:04 2025 GMT
Not After : Aug 24 13:02:04 2025 GMT
Subject: CN=3a63716cc9647d53e2936f1591519a9f8005b1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:91:1d:49:b6:2e:94:70:7d:d3:d1:b4:d0:
b9:89:6f:7b:a3:03:34:9f:bc:6c:b2:d0:c2:f8:9f:
0c:91:c7:ed:99:9c:90:5b:c4:3c:1f:64:d4:89:8d:
96:0a:31:58:81:d0:78:71:7e:ae:66:4c:01:59:dd:
e1:db:c0:d6:ee:48:ce:7a:75:f8:2a:67:8c:c2:97:
6a:d7:b0:25:50:42:d2:a2:87:8a:25:f2:91:8b:23:
f0:7a:89:27:17:43:cd:98:e9:91:35:46:d2:73:a6:
92:03:fd:74:a6:98:70:11:72:5d:11:27:0c:dc:cb:
c5:dc:c7:00:dd:75:70:62:54:c0:28:2d:10:a2:b1:
bc:42:91:eb:73:0c:ef:bd:6f:c6:4b:7d:fc:43:c9:
cb:c2:d7:5c:36:9f:c7:e4:dc:38:bb:c4:bb:97:43:
df:67:b6:ec:49:27:a8:48:c6:61:f2:d7:fd:16:39:
b4:7c:8b:c2:0e:38:b8:01:dd:8f:48:98:cd:6c:1f:
cc:80:12:ca:fc:89:69:c5:6a:f9:15:2e:da:2a:b0:
a5:f6:f2:54:36:fa:6b:cf:9d:6f:a5:00:14:fb:c9:
d7:a8:b4:8c:89:39:d1:09:71:98:80:b8:34:93:ee:
e1:79:93:5c:59:e4:7e:fb:e8:df:e9:2d:e3:d8:e7:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:63:71:6C:C9:64:7D:53:E2:93:6F:15:91:51:9A:9F:80:05:B1:B8
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ab:4e:16:c8:85:ea:d0:d0:3a:70:cb:b6:0d:0e:7f:6d:c5:
0b:c6:31:da:70:76:dd:43:b3:0f:76:67:03:ff:bc:b2:77:87:
05:f7:f1:73:35:cf:70:b1:75:f5:64:7d:e7:38:0b:3f:7c:50:
60:87:3e:1a:e1:8b:1a:41:33:f8:bc:82:21:c4:69:43:37:3b:
5a:78:c0:4c:4c:31:80:58:e5:5b:58:e7:f3:28:63:b2:97:51:
7d:f5:5f:ee:44:07:5a:c3:f3:ba:c2:da:96:a2:07:0a:94:d5:
63:90:07:5b:65:96:ba:5d:6a:7a:48:9d:2f:92:d3:92:92:df:
24:fd:e1:38:c3:1a:9b:f0:b4:e4:51:10:d3:bb:34:d6:ec:98:
f2:6c:c6:99:05:a1:87:bb:ee:a7:dc:ca:05:61:b3:b5:a9:77:
1d:df:6e:0e:45:96:11:e9:c0:d3:f0:e6:82:72:0d:f6:e8:bb:
1a:90:d1:fb:e5:f6:ee:00:74:dd:da:10:8d:47:b1:75:93:d9:
5b:ca:5d:2b:b3:dc:6d:b0:bd:a6:62:39:dd:10:a7:2e:35:10:
01:60:34:ab:67:a0:74:81:84:5b:d2:d8:35:03:d7:99:4c:ff:
e6:bf:3b:9d:89:60:45:f5:44:3a:a3:fb:7a:2f:4e:1f:41:b7:
6b:26:83:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:07 2025 by rpki-client