Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File: deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier: l0q+RkHXwKRQvST0sZqJciHBwb2DPWTQQgEjQuu+6/I=
Subject key identifier: DE:7B:DC:70:E1:70:57:C2:9C:D8:42:67:55:10:9B:A1:94:57:3A:FE
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 0198D54EB86B9AEE3F96822B74EC66AE2F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 05:02:42 +0000
Manifest this update: Sat 23 Aug 2025 05:02:42 +0000
Manifest next update: Sun 24 Aug 2025 05:02:42 +0000
Files and hashes: 1: UJAjdPQrd8bP5k3ucoOuD61_MT8.roa (hash: ugk9F1DdJco8dK5O++Cvmb5dblVQF4BV4yb8wudILQ0=)
2: WkmHxNpKrmAzpx_FXkIaqhpVbpg.roa (hash: +AeFew5fsUdx9Fz3OOuJ7ZKCrATyNvcvfW0fCxc+tvg=)
3: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: SltSfZKoLXBoPMVHns+QTBJ08vHLC0sfqtG+CUEXmms=)
4: imLX_iKSVxIt55dbqRMupQNb-6o.roa (hash: OviNWocn0RhLkHHteMWnzyr2rnMguzIPeb1JC9urBc0=)
5: iwdwl1HuN2YXg9VICxrnQ2L8T_o.roa (hash: tLBry0LnEHMR25EGcYFuNe2nISzjy4sXmppIiMI5cVo=)
6: ju7dlcjXTVtzrpg-cXuTrngFgtw.roa (hash: Odms44ovs7hGv3jdYt/7+590lUec8LGS69mCjmZU8q4=)
7: oDzpo9P1CSTveVeS7HO-MB_9-so.roa (hash: TBsZnZ6Hce91sBTky4DlDhCeMhJRvacSOmd1DwZB9+E=)
8: rsxSpj9moP8LtPzNvFBSE3jnhTY.roa (hash: EI5toUib0yn2k83FMVjkqamZ8A/+xIBPYiOu2bZVLHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b8:6b:9a:ee:3f:96:82:2b:74:ec:66:ae:2f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Aug 23 05:02:42 2025 GMT
Not After : Aug 24 05:02:42 2025 GMT
Subject: CN=de7bdc70e17057c29cd8426755109ba194573afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:11:bf:cd:19:d4:70:71:eb:88:e2:c4:8e:
ce:b7:d2:d4:14:2d:55:a2:9e:a7:af:de:76:6b:46:
a0:6e:e9:a6:ee:8d:a0:b9:5f:b3:98:7f:5a:da:f3:
55:22:7c:a4:d0:29:7d:4c:8e:21:cf:2b:45:01:6a:
dc:65:0e:55:d8:8f:51:18:7c:67:80:63:68:ef:75:
4f:79:cc:fb:3d:c4:d3:0d:06:19:67:fb:4b:bb:58:
35:4c:9a:29:88:75:da:3a:6f:4c:85:8e:ef:54:54:
e5:9e:ed:89:76:86:c8:63:fd:99:08:33:43:53:6b:
b9:65:c6:a9:46:40:56:b1:b8:c1:a5:3c:31:17:87:
4b:f2:30:b0:01:52:c6:38:08:90:79:6f:04:4c:05:
56:53:fb:d2:e4:79:3f:50:1b:86:6f:07:c7:c4:44:
6f:48:87:9a:61:57:c4:ca:2f:de:6a:12:e5:13:f6:
e9:7f:08:05:92:7f:f4:f9:ed:59:0e:8b:53:06:5b:
e2:09:61:34:27:17:25:3f:20:59:f2:18:95:2e:95:
f1:8c:bc:ef:fe:e7:70:d5:af:46:f7:ae:37:ed:c2:
e6:02:cb:e9:57:37:de:86:93:be:bd:6f:31:72:b7:
57:3f:00:fc:22:79:58:33:b0:e3:b7:14:fe:f1:43:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7B:DC:70:E1:70:57:C2:9C:D8:42:67:55:10:9B:A1:94:57:3A:FE
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:47:29:fe:5b:a2:03:99:c7:79:0c:00:26:1e:04:71:6e:ac:
95:7e:d3:77:38:97:7c:df:a5:b5:59:e3:ac:06:00:1e:f7:02:
ac:aa:56:d9:0c:59:5d:8b:e5:54:27:75:ce:f7:f6:4c:c7:fa:
ed:39:82:00:51:d9:0d:a9:b4:80:51:45:18:b3:9c:d0:8a:5f:
bb:c7:64:ef:83:7e:3d:d3:f5:1f:6c:30:2f:6a:64:ee:a8:93:
e5:cd:84:24:38:2d:c5:b5:71:02:4b:11:9b:f5:49:d9:b2:8c:
1e:01:1c:c8:d0:47:82:f9:96:d5:5c:9c:9d:96:37:5a:18:87:
6d:6c:ba:a9:23:bb:5a:db:10:44:40:2c:71:9c:10:31:f9:c2:
2a:6e:13:71:ce:cb:4e:52:7d:2e:d9:3e:49:92:97:a0:c3:38:
40:d6:e0:74:b0:41:79:94:28:c7:7b:7e:21:60:13:74:27:c7:
10:58:e0:6c:44:b4:9f:0b:ef:b0:45:65:19:20:87:1a:73:5c:
8a:17:c7:ae:8d:86:d7:09:79:80:b1:21:f8:97:fe:a2:65:c1:
eb:49:bc:d0:66:d2:19:2d:a5:10:b4:d1:b2:49:9d:a6:8f:86:
79:3c:38:87:92:17:1e:36:b7:37:e5:96:bd:c0:10:8a:4e:7b:
da:7d:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:03 2025 by rpki-client