Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: i1cp5JFzCO+bJ4+BbuLwLWdeWjsP4Vl5K9dQlHNxkIA=
Subject key identifier: 2C:CF:6E:F9:B2:3C:6C:1D:75:DE:10:2B:3D:36:33:A5:68:12:58:8F
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 01984BC1BE73E5825F53E8230C25E2D530E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 12:00:44 +0000
Manifest this update: Sun 27 Jul 2025 12:00:44 +0000
Manifest next update: Mon 28 Jul 2025 12:00:44 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: XKXV3JrOpCEcirDYQ1HOvM/KY4y6u+WVFtITYofMJ/E=)
2: KXd_5OhpNxA2dAEUBM7BRlNmng0.roa (hash: naKbPeMlQvH49cTjg2nRiud0MzlhFN73NWmhIANkiB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:be:73:e5:82:5f:53:e8:23:0c:25:e2:d5:30:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Jul 27 12:00:44 2025 GMT
Not After : Jul 28 12:00:44 2025 GMT
Subject: CN=2ccf6ef9b23c6c1d75de102b3d3633a56812588f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:f4:b3:a9:7e:34:3d:7c:0b:7e:e6:e5:1d:
68:62:09:cc:7e:2f:91:24:68:60:e0:70:3a:93:1d:
87:f5:1e:dd:6d:3f:2e:04:81:72:c6:de:5c:e4:7a:
6e:ae:c0:6a:70:6c:d8:28:2d:92:0d:7f:bc:60:47:
6a:53:ee:f2:38:70:1e:73:7e:1e:b7:ea:bf:fd:52:
02:ee:a1:c1:1b:3a:b6:97:63:08:a4:f7:b2:0d:54:
f4:23:d5:a8:97:08:41:7b:e0:87:2b:ac:78:7a:56:
ea:f0:45:d8:9d:4d:3d:8d:92:3e:49:bc:64:e1:a7:
69:82:77:2c:d7:0e:65:4f:6e:9c:04:21:95:c0:48:
1b:13:8a:d8:b7:72:77:69:9a:6f:20:9a:5f:29:56:
89:3b:47:b9:e2:66:cb:76:af:af:22:98:77:00:3f:
e1:f6:78:4e:15:f9:ad:6d:87:dd:77:5e:9b:03:89:
af:cb:30:09:c7:6d:1f:13:8e:f3:04:c2:e7:58:dd:
dc:eb:77:53:a2:89:b8:98:3d:58:ec:f2:6d:5c:22:
75:a0:ef:13:2a:82:ce:97:5d:7b:33:5a:23:ab:f1:
4a:c9:f2:10:3e:20:db:e0:1f:1b:c4:a0:45:69:cf:
f1:bd:70:2f:63:2b:eb:55:7e:97:c0:fb:ef:61:8b:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CF:6E:F9:B2:3C:6C:1D:75:DE:10:2B:3D:36:33:A5:68:12:58:8F
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:08:cb:a5:1b:5b:2c:64:bc:e3:2a:18:85:c9:bd:da:c0:fe:
fa:66:0d:1b:8f:72:c9:d4:7c:20:ce:d4:5f:4f:31:23:1e:c7:
51:c2:de:c3:e2:6d:14:34:8d:89:4f:e4:0d:44:02:6e:e1:3e:
ac:cc:7f:93:15:1e:4f:74:e4:f3:f2:c7:46:8d:6e:3a:e3:2d:
d3:25:15:ef:a2:4b:50:1a:3a:f0:14:5d:36:fa:ab:13:c6:33:
71:ec:d6:c4:ce:29:cd:00:cc:40:5c:64:31:b0:2f:30:ea:4c:
b1:16:3b:fe:2a:b5:e1:eb:11:07:11:9a:8d:f9:76:77:72:7f:
94:44:33:98:65:db:8d:df:61:67:19:fb:9b:d7:62:6f:80:25:
66:56:43:94:4b:f7:2f:5f:fa:d3:26:2d:37:be:f7:7a:d1:b4:
39:6a:53:e1:11:b6:f2:ec:29:05:1c:30:42:71:4c:99:21:e7:
a3:a1:29:26:ed:af:97:f4:1c:3b:d5:c4:a7:39:a6:01:63:89:
3c:c8:b3:06:7a:77:b1:b3:1f:0c:d6:d2:c4:05:0e:e6:92:39:
80:5b:e0:9d:da:f9:2d:2c:5d:55:ba:38:e0:02:83:f3:96:61:
3c:32:b1:ca:2d:85:5c:7f:87:eb:03:52:a1:46:c1:11:ff:06:
e8:1e:65:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:13:18 2025 by rpki-client