Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: THpkr1JL+hciXedmS2N5ousYy4b0DKc2mtPEKU6V6iA=
Subject key identifier: 8F:28:97:69:4E:89:AB:BB:CF:A7:C7:A1:8A:E8:93:28:24:02:67:B7
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 019845889FD668D121DED67A2FD66698BD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 14F0
Signing time: Sat 26 Jul 2025 07:00:38 +0000
Manifest this update: Sat 26 Jul 2025 07:00:38 +0000
Manifest next update: Sun 27 Jul 2025 07:00:38 +0000
Files and hashes: 1: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: nnElHeL3frf4r9dqEu8VL+OsSKOvvirm3dGFeZFT/q0=)
2: TSvZLiAEM2CqBOpzEquX-L_n02A.roa (hash: I0g5fDPCn3RgZfwIeTKeigQ5B1u0G9JlwOBJf1pZ4jg=)
3: ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa (hash: YWkayHgIhYTNLiz4XAeekrNCTOGkXpvO+aHI+JpNUpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:9f:d6:68:d1:21:de:d6:7a:2f:d6:66:98:bd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Jul 26 07:00:38 2025 GMT
Not After : Jul 27 07:00:38 2025 GMT
Subject: CN=8f2897694e89abbbcfa7c7a18ae89328240267b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:45:15:70:d3:94:86:a6:e6:2b:86:e4:8a:
e6:b4:2c:6c:6d:b2:fe:81:69:ea:a8:0c:9a:f6:fa:
b2:0b:d8:da:3b:dd:26:31:ae:d9:3d:35:bb:09:7e:
f7:68:48:b5:9f:85:4e:72:9e:3c:ca:3f:da:d1:7b:
9e:3a:5c:84:ec:b3:09:f6:79:fc:fd:a1:b2:22:d4:
1c:ff:11:0a:e3:4f:ec:76:5a:8c:9c:c9:48:85:e2:
c7:d4:b9:b2:98:4c:cf:42:db:56:2c:45:9b:18:80:
4a:92:71:49:23:c5:94:2a:27:b8:7f:a6:9f:f6:c0:
d4:75:04:53:1d:4d:dd:ae:cc:b8:d1:33:af:7a:83:
4e:40:b8:59:b0:9c:cd:ad:2d:73:81:d0:9a:02:46:
8d:44:7a:a4:40:36:2a:c2:56:98:e6:28:bb:f3:1f:
a4:92:c7:2a:af:c4:15:c1:2a:c5:9b:70:f5:cc:e9:
a5:b7:53:2f:72:0e:d0:b6:ab:64:de:d1:7a:53:39:
81:2f:8b:b6:82:66:a2:01:c2:80:a7:c6:ee:26:38:
26:a0:8f:6a:51:7b:f2:bf:55:55:4a:1c:92:a1:fd:
23:70:d4:fc:36:78:90:a8:26:57:77:dd:05:d7:56:
ee:f4:98:9a:85:4b:23:be:72:ef:31:8f:b7:a2:a0:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:97:69:4E:89:AB:BB:CF:A7:C7:A1:8A:E8:93:28:24:02:67:B7
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:95:37:31:ea:21:b9:27:55:77:20:85:14:88:54:28:68:49:
ae:c1:9d:28:c1:a4:5e:44:0a:68:79:17:ea:ee:2d:01:a4:5a:
71:45:85:e4:23:eb:a3:1a:00:9c:b4:b3:90:98:a0:8e:75:44:
38:78:eb:7d:0f:08:ae:95:8c:6f:d1:85:a6:78:87:99:4f:25:
66:df:6c:53:6e:ff:5a:f9:fa:f1:8d:96:1b:50:22:5e:be:7a:
1a:76:8a:f6:5c:34:80:28:38:7e:27:0f:0b:f1:4a:2f:87:81:
90:7a:3c:e6:88:89:18:09:d5:2e:66:b8:d2:00:53:0d:2c:d7:
ea:9f:3c:d2:f0:69:5b:49:23:f9:68:00:85:8d:95:a8:c7:7e:
02:12:9a:86:28:8f:73:97:77:67:e9:e0:bb:65:38:f5:62:68:
44:76:cb:87:a5:13:05:37:ca:c3:a1:f6:19:3c:15:b9:74:c3:
92:97:8c:3f:6e:ff:39:98:d4:ef:fb:24:2e:6a:fb:c1:98:fa:
da:80:f8:1a:62:b1:79:bb:63:b7:7f:dc:3b:5e:e9:f9:a6:8c:
c4:83:b6:12:b1:3e:52:5e:8c:08:64:9b:4d:95:8a:05:c0:de:
54:28:8d:46:93:dc:2b:3e:41:79:cc:dd:dd:a3:c7:c9:4d:84:
70:64:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:55:53 2025 by rpki-client