Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: 1kvfdq89XeNEtvuAfpOcjnhLIxUawCYJkPJshWbCZ18=
Subject key identifier: BD:D0:4E:CC:00:8B:96:DD:8D:AB:E9:2C:00:FB:EA:F8:A5:F9:2C:7A
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 019849D3A199E909E2B5959E0F67F1E88BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 1279
Signing time: Sun 27 Jul 2025 03:01:02 +0000
Manifest this update: Sun 27 Jul 2025 03:01:02 +0000
Manifest next update: Mon 28 Jul 2025 03:01:02 +0000
Files and hashes: 1: 1g3YzsLZ5QOCf6qi-eFi1LVqHQ8.roa (hash: +wFJ5tj+lSmxnwgEedsXBX4o8rthXQtXpU++hvEpCkM=)
2: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: DB8Pr7txQtmItlhARyZQPJ4sDPBLgAiN7lkuv3KxJkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:a1:99:e9:09:e2:b5:95:9e:0f:67:f1:e8:8b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Jul 27 03:01:02 2025 GMT
Not After : Jul 28 03:01:02 2025 GMT
Subject: CN=bdd04ecc008b96dd8dabe92c00fbeaf8a5f92c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:09:45:b1:d2:76:23:b6:c4:4b:61:14:3f:
ef:b0:7e:ed:af:60:62:7f:c0:13:16:70:45:59:77:
13:92:a7:57:5d:39:a8:82:e0:cd:8b:71:12:04:c7:
11:64:78:6a:ee:92:49:69:4a:aa:f4:2c:00:86:6e:
53:0d:71:2e:6e:62:fd:7e:f5:2c:fa:28:80:14:90:
30:c8:bc:1e:81:85:11:c9:ff:1b:b7:43:2b:ab:18:
8c:f8:0b:ff:73:1b:70:e0:c0:bb:e8:0c:aa:d1:15:
24:26:69:62:ca:28:80:9a:da:ee:e0:e8:bf:c7:ee:
cd:2d:5c:1b:39:e9:27:8b:5d:1a:bf:01:23:a3:0f:
7f:be:8f:4b:9c:09:27:c4:dc:83:be:29:59:cf:e8:
01:4b:bb:9d:48:ca:21:59:52:d2:69:a5:c3:86:b7:
75:05:56:f4:89:80:f2:83:3f:a7:d0:6b:04:74:5b:
4a:56:b2:1c:af:38:1d:e1:32:11:1e:28:76:89:2a:
b7:2a:26:d7:b9:1c:47:d2:62:b3:00:fa:1f:7b:88:
07:af:07:80:2e:66:fc:92:88:1a:5b:17:0f:3d:1b:
96:eb:54:af:83:76:13:76:89:74:55:40:03:d0:d0:
a7:34:46:eb:09:5f:2e:32:b7:ff:01:e2:aa:0d:b0:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D0:4E:CC:00:8B:96:DD:8D:AB:E9:2C:00:FB:EA:F8:A5:F9:2C:7A
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:93:d6:91:42:84:9b:d3:5e:0d:54:6b:4f:2f:64:8c:22:26:
ef:7a:a3:3b:06:a2:8a:b2:ac:97:2d:b0:cf:ea:94:ff:e8:95:
a8:6e:0a:21:12:9a:9a:de:1a:5c:c9:a3:04:c1:eb:ae:bd:2d:
bc:2d:a9:27:5f:96:ad:ce:a6:e1:06:e9:f5:6b:45:54:d3:4a:
f3:4a:d3:8a:ce:ab:fd:89:50:b4:38:64:82:0b:e7:f0:93:f7:
04:6b:ad:32:10:be:ed:3e:c5:f6:1f:78:c1:1e:83:9c:4d:df:
3e:04:6d:ba:6c:d4:70:3f:23:ac:8a:6c:cb:ad:70:e5:1b:07:
6e:50:dc:75:2c:8d:c5:90:58:9e:f3:87:5e:05:0a:eb:79:7f:
6f:e3:a2:36:57:ea:e5:a1:9f:2a:ee:8c:31:11:06:52:89:22:
68:91:d8:d0:46:4f:01:e3:9f:d4:18:cc:8c:6a:4b:a4:b6:f5:
2b:23:a9:7c:16:c5:b6:ba:bb:88:fa:b2:b2:a1:fb:75:4f:34:
f7:95:1d:72:dd:b6:06:16:f7:06:20:b2:fe:c9:25:ed:ea:ad:
f1:b4:d6:f0:9d:af:b8:7c:2b:2e:31:87:4c:03:a6:d3:a2:15:
a4:98:a2:85:a3:d8:c2:e6:df:56:04:9a:85:d9:6e:b9:45:ba:
bc:70:55:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:19:13 2025 by rpki-client