Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: z9+ENn03Ums0O8qul6vmkMqbSAGdQTHwLQvezps1ScU=
Subject key identifier: AE:33:4A:23:4E:0D:DC:8D:00:B7:8D:3F:5C:AD:35:24:BB:C0:30:F2
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 01984776B19469681DF3BBCFD5FDBE07E152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 0C9B
Signing time: Sat 26 Jul 2025 16:00:17 +0000
Manifest this update: Sat 26 Jul 2025 16:00:17 +0000
Manifest next update: Sun 27 Jul 2025 16:00:17 +0000
Files and hashes: 1: DLstc3U0rg1XJMzpW3kLJk6bWww.roa (hash: aRJQLolF5fKnY48Uu+tEP6pfOTPeicajt7bpyIpZajQ=)
2: hw5zWhZ37cy3fl-F4c6L7KinXWA.roa (hash: JVVK2E4Q0U9kLmKrr7lDfe4ry5wJQg7f4zL2c9LIRlo=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: //TDSGmmMtn1G+CI0KOhIfCPoZMrhuF0EnMnluDFoQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:b1:94:69:68:1d:f3:bb:cf:d5:fd:be:07:e1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Jul 26 16:00:17 2025 GMT
Not After : Jul 27 16:00:17 2025 GMT
Subject: CN=ae334a234e0ddc8d00b78d3f5cad3524bbc030f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:bd:cf:ff:99:83:30:a5:89:8b:fc:fe:04:
f0:b8:38:69:cc:85:89:e0:b1:b7:c3:66:cd:1f:6c:
c5:31:81:5d:77:2c:4c:0c:ab:54:63:33:1a:9a:07:
16:50:ce:68:ae:cd:f7:72:69:eb:af:4a:f4:db:02:
06:d0:f2:05:bc:bc:ae:d1:30:63:18:fd:56:29:38:
27:9b:66:83:6a:e1:49:07:c2:4c:d6:63:4a:61:05:
14:a2:71:9a:97:42:a5:1e:42:2d:a1:62:61:7b:da:
52:f0:42:ad:31:a3:54:82:70:97:89:28:aa:3c:28:
16:7b:9f:a1:b4:d8:16:9f:e2:e8:e3:9e:30:49:4e:
8a:ee:47:00:ce:96:15:81:e2:87:22:64:a0:ea:2d:
59:95:38:81:c4:7c:94:0b:5e:22:44:55:15:04:6b:
d1:f6:7c:97:86:f4:13:ec:50:4a:e7:d8:f4:37:c0:
00:05:3e:18:9f:02:0d:bf:af:ae:38:1a:67:fa:fb:
d5:08:bf:ee:e5:0b:b1:6b:04:60:6f:ac:f7:89:9c:
e7:7d:21:65:d4:d8:08:5b:11:a1:0e:90:35:44:4d:
0d:e7:d1:60:1e:a6:f3:11:27:5c:10:30:dc:c9:16:
81:23:51:2b:bb:19:5f:9f:31:0b:46:ea:db:8b:89:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:33:4A:23:4E:0D:DC:8D:00:B7:8D:3F:5C:AD:35:24:BB:C0:30:F2
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d2:fa:7d:70:34:79:46:83:3f:e8:4e:81:6e:b4:72:cf:0d:
ee:93:30:68:02:8a:fd:bd:28:5c:75:40:13:4b:70:16:a3:a3:
7a:64:91:3e:da:06:1c:b7:32:77:2c:48:05:68:ae:05:a5:84:
62:00:f4:3d:4a:80:f0:c2:e3:7d:70:5c:3f:7c:86:a2:c0:ab:
64:c2:48:c8:29:78:70:d4:d8:b4:23:68:0f:cc:0d:18:0d:5f:
3b:13:71:00:69:a9:06:87:72:f4:32:34:ed:3c:41:82:68:b7:
8d:22:5a:ba:f8:d0:84:7f:5c:3a:ac:2a:71:94:b6:da:66:a9:
20:ca:2f:58:ed:ea:16:f6:60:60:5d:f4:24:e3:05:77:91:87:
b9:28:a5:ca:24:c2:5b:5a:21:75:75:d5:8e:d0:63:bc:f1:d1:
7c:ef:9b:04:64:60:d4:52:5a:a9:8d:ed:74:00:f7:48:fe:81:
27:6a:3c:18:27:f1:c2:a4:61:44:b1:0b:12:49:4c:9e:8b:63:
45:56:81:80:6e:04:58:f7:47:0d:cf:1c:11:19:a5:2c:ff:f2:
65:b2:64:08:d3:e2:f7:77:3d:5d:6a:b8:79:68:ca:c6:fb:72:
63:11:4b:f3:96:6b:3c:97:8e:b3:0d:c4:db:89:f9:bd:83:38:
3d:54:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:12:21 2025 by rpki-client