Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: LpcbW0PvZNtA2R6B6pFXWFTTC9cVnNXBNY41fKE6TF8=
Subject key identifier: C2:F5:6D:D2:68:95:5F:5F:59:BC:15:CF:8B:89:B6:3C:99:BF:19:CF
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 0198481C15326F20238C532223DF98973F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 19:00:56 +0000
Manifest this update: Sat 26 Jul 2025 19:00:56 +0000
Manifest next update: Sun 27 Jul 2025 19:00:56 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: aTdTU37LPZMuUU0Dfk5BxlqsvUmxRcGGDrLpUZrP/+U=)
2: G0J3ZwqY7nqQ1F-r-kfCdSWuyO4.roa (hash: +njzM6YBvg7QKHzm9fDQxiSdZRBXgF7BQneYn5PkN18=)
3: zYDOCeKC7kKgpKbk0isuZ6zgxdU.roa (hash: w347S4U24N5+dIdmg0/S6hyDG1PqUwaZbQe5AD4eTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1c:15:32:6f:20:23:8c:53:22:23:df:98:97:3f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Jul 26 19:00:56 2025 GMT
Not After : Jul 27 19:00:56 2025 GMT
Subject: CN=c2f56dd268955f5f59bc15cf8b89b63c99bf19cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b7:1e:05:a0:ee:16:81:de:6e:7d:28:00:0d:
8d:cf:c6:c5:ff:f4:0d:a1:86:5f:f6:a3:24:28:eb:
a2:88:33:eb:1d:7f:86:eb:82:0f:94:c6:34:ed:ef:
a4:83:86:80:ad:9f:bb:af:df:f9:93:ca:32:90:50:
ca:6d:ef:60:c8:1e:03:7e:64:f6:a3:c2:b9:b6:cb:
38:b1:76:19:a4:bf:4e:4f:be:a1:48:65:50:14:c4:
ae:62:af:cc:01:d3:cc:ff:b3:ff:4e:19:4e:72:35:
41:5a:8c:fa:bc:77:23:c8:d2:b2:64:e3:26:3a:e4:
3c:a1:5b:f6:a3:68:08:e5:b6:b8:68:b6:83:f9:f9:
d5:a5:a7:99:03:35:9b:dd:f2:d5:2d:f6:9b:94:be:
0d:09:64:c7:33:ed:c4:c2:cf:d8:83:9d:42:d8:c7:
6f:75:4f:21:60:42:f6:08:14:94:d0:2d:45:ef:c6:
54:d0:b7:69:7e:37:1b:42:e2:46:3c:53:3f:87:49:
c7:65:cb:dd:09:ad:92:e2:fc:37:94:76:16:8d:4f:
e5:74:89:3f:f8:99:57:60:50:53:e1:fd:43:61:f2:
da:80:a3:32:c3:53:50:40:b9:4a:a4:ff:6d:a2:3d:
fb:d3:de:dc:0d:a4:ca:57:11:dd:ac:b8:5b:b3:69:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F5:6D:D2:68:95:5F:5F:59:BC:15:CF:8B:89:B6:3C:99:BF:19:CF
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:54:06:b8:89:01:f1:6f:0e:39:a7:e2:d2:bb:5f:cd:6c:19:
3a:ab:70:bb:2b:b0:20:bd:9d:3d:50:13:53:73:33:7b:70:8d:
f6:e7:b8:39:04:b2:b3:93:64:3a:04:a6:02:38:54:aa:d9:c2:
49:df:b4:62:cb:52:3d:51:78:7c:c7:6d:66:9f:73:6b:85:a3:
ae:fc:8c:7f:24:17:67:fa:1b:d8:81:b6:73:23:97:b6:12:40:
1a:a5:82:b5:c5:5a:98:f1:1a:a1:73:7b:ca:e7:56:53:5a:55:
c3:a1:83:7f:c7:4c:a0:a7:38:5b:a8:9a:f1:4b:27:75:2b:b7:
fb:55:32:50:a6:a7:96:39:ec:e6:42:39:9f:d8:34:a3:c3:56:
d3:33:dc:32:3a:79:b4:55:51:17:aa:85:f2:d3:d8:2f:cb:0e:
0d:d9:46:00:78:79:fa:fb:b6:66:a7:be:54:44:f5:84:ae:22:
af:a7:8a:bd:de:72:09:b3:7a:f9:c0:12:22:fb:c4:79:3b:8b:
89:ba:4b:36:cd:4d:9c:e0:ef:08:04:b4:4a:0e:b0:43:d3:b6:
ec:fe:12:2c:e3:99:2c:7c:eb:1d:cb:9f:8b:93:8c:d0:98:72:
8f:ed:47:b1:3d:43:89:0b:52:04:15:6e:df:76:ed:53:bf:13:
68:33:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:52:15 2025 by rpki-client