Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: w/sP77OTvrMtr5paKtu/g3wFQFXMOPhZdccmGl2k5CU=
Subject key identifier: A4:B4:28:90:D4:0F:D8:E8:68:F3:37:12:EA:30:E2:AB:20:57:D5:E6
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 0198D4DFF64773002FE6C85CE35B4B5E27B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 0F9E
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: DqHnzYWuxMllYj4fNdyjlN5bOt8.roa (hash: Ct+oA/iZNUzEaqp34vmPr/rb2NLctNCZu0gWWKERVjE=)
2: Lf8_T-o7ZHygGu0g3mlzua1_1HA.roa (hash: CQIDTTHcfVlCnxAPq4hAkvv2QsASVNkVlmr+LBxrlLU=)
3: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: blQQVb8okNvPoewlhrVI9NljSUqhEwi9vaoiKQ+JzWw=)
4: vYaVLKXY1-Vrl86mKkE3Y-3XdFU.roa (hash: 8y0C99LYt4H2oUrCqNFHSxS/1TMmBVBqFKxb6zfEFoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f6:47:73:00:2f:e6:c8:5c:e3:5b:4b:5e:27:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=a4b42890d40fd8e868f33712ea30e2ab2057d5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:30:62:3b:b9:41:2d:48:c8:c6:69:a3:d1:c1:
ff:d8:18:79:f0:69:d7:21:6a:88:b3:b2:3e:35:10:
48:3c:64:00:27:1f:90:2e:20:06:5b:1b:41:b8:00:
c2:34:58:2f:86:d1:b1:4e:b3:a1:c4:e6:d0:d7:59:
29:9b:57:30:58:3c:9c:b6:b1:e0:12:a3:4c:56:c5:
dd:70:71:19:6f:9c:86:6e:de:7c:da:a9:03:54:55:
ec:da:0c:c1:34:36:73:40:b9:6c:1a:91:a5:fe:72:
90:18:1b:ae:03:45:7a:ed:04:0a:19:e9:34:61:6b:
8f:45:78:8b:6f:07:73:c4:76:c0:3a:0e:71:85:a8:
f8:7c:a2:a4:f8:81:5f:65:77:9a:2c:69:0e:94:4c:
20:b2:7f:f9:ca:e3:e2:e5:2f:e4:0b:b4:9c:61:7c:
b4:27:cd:7b:28:a2:82:bb:06:6b:48:57:6d:c0:68:
29:e2:78:1f:11:ee:56:50:b3:b9:b8:b3:b5:0e:21:
8e:cf:e9:75:42:73:c5:fe:f5:a7:1a:f0:66:22:39:
fa:32:67:10:66:c6:45:99:ff:c5:cb:f6:7e:d1:cb:
5a:68:1e:7a:c8:b4:27:ae:fe:b1:0d:a6:f4:31:e1:
d6:27:f1:1e:28:69:0c:f6:5d:7b:f5:30:40:c7:c3:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B4:28:90:D4:0F:D8:E8:68:F3:37:12:EA:30:E2:AB:20:57:D5:E6
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:03:f1:ee:fa:ff:f4:2a:16:5f:a1:3c:85:47:b9:39:9d:1d:
5f:ac:89:1d:00:bc:fe:c2:6c:f5:ea:24:3c:11:eb:99:20:13:
7d:c8:aa:94:98:7b:5e:d9:72:53:73:bb:81:00:2e:53:f4:f8:
61:5c:2e:69:34:78:37:3b:45:10:80:ca:9b:2c:5e:48:df:d2:
8a:56:0f:b4:6b:30:1c:47:79:58:7a:a8:d1:8b:d3:04:59:ef:
fb:c5:d1:c4:0c:e9:04:50:55:88:ef:22:d5:1a:67:50:1b:12:
74:06:29:6f:5e:1b:9e:4a:5e:62:70:29:d7:d6:7e:d6:64:4b:
a6:39:a6:aa:72:97:c0:96:5c:66:14:50:2f:84:53:33:70:ca:
4d:08:7b:f2:18:4b:4a:4b:15:a1:5f:9a:76:29:ee:a0:12:34:
23:0c:93:16:d5:b2:55:15:18:96:57:79:7e:4d:7a:16:29:26:
0b:6c:c2:22:3f:e3:82:3c:ef:14:b0:65:a4:54:92:b5:71:aa:
43:dd:d3:18:8a:20:83:07:8d:f4:91:31:d3:0e:06:d5:5b:4e:
54:50:66:c8:27:be:a5:51:5b:24:31:ee:64:f1:bc:ff:15:ad:
03:66:ff:00:d4:3f:2b:19:2e:01:08:f1:e5:e1:39:25:a8:10:
5e:1f:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:46 2025 by rpki-client