Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: WTZ2WKQ3F3YpWEmg79xlxJJiqn4eQZYYWgqpni64FD0=
Subject key identifier: EC:0D:FF:37:4D:E9:C2:A8:51:71:E7:C8:12:07:F7:42:96:91:3E:D3
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 0198D69822AAF2CE7D036E403A313209F8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:31 +0000
Manifest this update: Sat 23 Aug 2025 11:02:31 +0000
Manifest next update: Sun 24 Aug 2025 11:02:31 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: ebTxvOO+mhCo5ZqpcUNR7uTcYnxllOAMtEh5rK38aR0=)
2: WtAp0tL-l96y_gbMlR5puzdruQc.roa (hash: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:22:aa:f2:ce:7d:03:6e:40:3a:31:32:09:f8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Aug 23 11:02:31 2025 GMT
Not After : Aug 24 11:02:31 2025 GMT
Subject: CN=ec0dff374de9c2a85171e7c81207f74296913ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:38:e1:8e:05:a0:97:a3:6a:2a:1b:50:6b:
e1:ed:5b:49:ea:da:8e:9f:ac:20:08:ab:4a:81:8a:
4b:3f:c3:1f:f4:06:f6:cc:9d:7c:63:fe:51:b8:c5:
b9:ad:17:aa:8c:c6:4c:5a:49:ba:7a:3d:d6:aa:9f:
83:2c:e2:08:d7:4e:a4:bd:b6:72:bb:39:14:e0:eb:
77:5a:87:4d:f6:f5:ac:da:17:bc:2d:d4:0a:b5:0e:
5b:3d:e3:8e:11:58:19:40:83:60:c6:d4:23:39:7a:
2d:b6:d0:f0:05:5c:89:a7:f0:94:57:07:8a:b5:3e:
f6:d6:a8:65:a6:61:29:d5:ea:43:ca:88:0f:46:12:
e1:46:32:b5:ab:41:ab:ed:e0:c6:0f:83:3a:94:7d:
b2:55:f6:e4:17:69:b3:5f:3f:65:70:61:bf:fd:d8:
91:b9:02:9f:9c:36:d6:b8:07:ed:86:59:7e:be:97:
3a:eb:86:47:e0:24:da:6e:31:b2:b0:ca:ce:0a:0a:
3b:11:6e:6e:76:58:f8:8a:58:a9:8e:a6:4e:71:79:
99:2a:84:fa:76:a7:71:94:db:28:a3:ee:5b:65:72:
c3:34:e0:c8:ec:d2:30:ca:96:81:ab:39:87:b7:f1:
c1:ca:eb:0e:00:17:93:c6:11:b2:78:0e:13:08:67:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0D:FF:37:4D:E9:C2:A8:51:71:E7:C8:12:07:F7:42:96:91:3E:D3
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:83:8f:6a:a9:90:6e:cc:bd:0e:4b:1b:e2:e6:60:df:37:d0:
78:eb:45:f8:c3:c2:c9:f9:dd:e4:f2:9d:93:e8:58:ef:53:92:
8d:f3:fd:aa:d0:94:40:83:85:9b:33:37:49:c7:1d:ce:51:87:
e1:63:22:8c:46:9c:54:0f:c6:72:a3:59:1b:ce:c4:78:58:b9:
d5:ab:46:18:a1:3a:2e:a9:4d:26:89:30:a7:50:e1:8e:87:86:
9a:02:f1:ad:d0:3f:6b:22:67:be:88:42:ce:aa:40:22:47:a0:
21:1e:69:e2:ee:6c:8c:57:bb:98:f5:c6:0a:c9:5a:bd:ff:0b:
88:32:43:25:cc:84:f6:4a:69:3c:56:a6:25:f8:fa:8c:5b:e8:
70:86:c3:10:03:ea:f6:da:6f:fb:ae:37:c7:ac:4c:0f:31:33:
bc:3d:0b:8d:d6:04:da:92:b6:ab:7a:dd:8a:2c:d9:7e:1d:7b:
e3:8a:fa:5c:37:46:4d:81:6e:14:a3:01:bd:57:a7:2f:37:ba:
b6:b2:4a:51:3b:89:89:da:e6:40:3b:15:81:65:05:07:37:c2:
a0:ba:2d:64:6d:92:64:63:1a:f3:03:38:59:3b:29:d0:c3:88:
7f:27:50:92:20:d2:ce:9b:1d:03:a3:45:c1:5c:ab:74:f0:9f:
56:16:35:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:21 2025 by rpki-client