Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File: DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier: kHyka2g9M6rCgdY9WCYA7/vm+++9ZQKE0c9bcKl3RIg=
Subject key identifier: 63:5B:47:1F:44:DC:B1:55:4A:7F:61:4F:E5:AF:9B:7E:45:7C:A7:53
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer: /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial: 01984A40C8A8E2BEBB7E3CB7F6D3D47C1D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number: 0B0C
Signing time: Sun 27 Jul 2025 05:00:16 +0000
Manifest this update: Sun 27 Jul 2025 05:00:16 +0000
Manifest next update: Mon 28 Jul 2025 05:00:16 +0000
Files and hashes: 1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: R0QQd2aNAKIVTC4Hk0bEPDp37XyLrNBUJmO3Ne+egHQ=)
2: xx1FjY8JYYnnymM_Usd0dhEPXMc.roa (hash: jThxXylFfBYyWhSUb/DWJLhZb//oHbnd3oYRtsD1klg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:c8:a8:e2:be:bb:7e:3c:b7:f6:d3:d4:7c:1d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
Validity
Not Before: Jul 27 05:00:16 2025 GMT
Not After : Jul 28 05:00:16 2025 GMT
Subject: CN=635b471f44dcb1554a7f614fe5af9b7e457ca753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ba:e3:59:21:8f:12:ec:77:1e:c2:2f:87:b3:
ae:03:d2:7a:49:3d:c6:66:03:03:a5:f3:02:bf:a4:
91:5d:ef:2a:7f:71:85:f2:4f:7f:d3:c6:af:5a:61:
e1:a8:ba:b4:1e:6b:b0:6f:49:84:e2:03:e6:26:45:
6d:b0:23:4c:98:2b:02:d8:34:ae:65:fc:e9:76:ae:
07:cc:4c:bd:07:81:7b:b6:4c:7d:53:86:ff:44:58:
32:2a:3b:79:c2:f2:d4:91:dc:08:a7:8e:83:01:7b:
a2:71:f4:c3:19:aa:7b:25:ff:53:a5:58:2c:c5:0e:
9c:37:46:05:9e:00:87:0d:8e:0b:95:d5:c5:95:dd:
6d:4b:82:46:fd:6d:77:b1:d8:87:fd:34:2b:c7:a1:
59:24:ea:81:dd:72:9a:d7:1b:20:6d:60:31:92:01:
5a:2e:03:3b:2e:3a:ac:ec:84:09:da:79:ea:fe:48:
d7:fc:91:98:76:30:a0:7d:d6:13:f9:10:58:fd:b8:
dc:11:36:a4:a7:0c:06:19:26:e8:3d:57:27:3f:5f:
ec:fb:95:13:67:1a:33:40:15:8e:9f:e6:55:7f:14:
5e:d4:39:e9:db:55:92:ec:3d:b5:80:bf:7f:1a:1b:
24:f3:f8:f1:dc:25:00:67:7b:8c:01:8f:fc:bf:c3:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5B:47:1F:44:DC:B1:55:4A:7F:61:4F:E5:AF:9B:7E:45:7C:A7:53
X509v3 Authority Key Identifier:
keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4f:f5:5e:37:42:3d:f0:8a:93:41:17:48:bb:ab:93:77:6e:
c5:04:ea:72:96:ff:1e:85:49:b8:b8:9e:79:bd:b9:6a:69:a1:
b3:30:c8:dd:31:af:62:c6:ce:19:61:df:1f:bd:69:e3:7b:a4:
77:70:ef:97:b6:63:55:cb:12:19:b0:c1:55:96:50:83:60:64:
3f:42:93:59:f8:45:49:92:24:0d:fa:3b:13:ac:aa:26:42:c4:
bf:cd:28:e0:9f:bb:cc:1d:23:0a:f0:66:66:b1:f4:bf:f7:45:
11:a4:96:72:e9:0d:e4:04:6c:94:90:d4:9b:53:ad:b9:25:34:
e2:62:78:ef:2e:58:c1:22:ad:de:9c:85:1e:b8:37:ff:80:38:
cc:66:17:16:90:c8:f1:09:3b:ad:1d:6a:cb:cd:55:e4:3a:d6:
af:65:86:00:9b:c8:0a:4c:86:0c:0b:6c:6b:7e:8b:ab:1f:c4:
b3:a0:0d:51:97:68:b6:8f:17:1a:dc:d7:c5:e4:28:aa:1c:08:
1c:e2:bb:06:e4:17:90:7d:2c:f4:12:6f:94:08:2d:3a:dc:31:
cf:0e:ae:00:58:5e:2d:9d:0e:c4:23:b5:1b:38:a7:a6:1c:21:
e9:b4:07:01:5f:1e:a4:8c:7e:22:90:23:7c:da:a9:a6:30:23:
ef:eb:45:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:44:00 2025 by rpki-client