Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: JR8lXPPkEhhujJTEm7fkFENpO7/V+OgKuQouOrrWKuE=
Subject key identifier: ED:90:A0:6C:FB:D3:07:1E:4C:24:52:AC:F9:0A:86:33:CC:A3:4F:A6
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 01984BC1BC333AA17BB422E67E4A9DDE79F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0C0C
Signing time: Sun 27 Jul 2025 12:00:44 +0000
Manifest this update: Sun 27 Jul 2025 12:00:44 +0000
Manifest next update: Mon 28 Jul 2025 12:00:44 +0000
Files and hashes: 1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: rlJfZTtXD0mNUe1Kb/9UBkeLhzQQSmbbGFlTxF4Chsk=)
3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:bc:33:3a:a1:7b:b4:22:e6:7e:4a:9d:de:79:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Jul 27 12:00:44 2025 GMT
Not After : Jul 28 12:00:44 2025 GMT
Subject: CN=ed90a06cfbd3071e4c2452acf90a8633cca34fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:ae:a8:b5:46:ab:97:69:18:2f:c6:71:b3:
a0:ef:2b:78:b2:cf:12:58:d2:29:b0:f3:d8:b8:25:
0e:ad:7f:f4:71:e1:ef:9e:0d:b5:ac:9d:21:c3:7f:
34:b3:84:cf:8d:11:de:25:ef:92:3d:d5:dc:1d:92:
13:45:b0:72:e1:42:94:49:45:e0:15:09:22:29:ca:
3e:99:f4:5b:97:d9:8c:bf:22:f8:b7:ad:f4:1a:82:
78:06:46:45:0f:44:18:e4:c5:ac:66:8c:af:14:12:
59:55:17:89:b3:c3:4b:a9:66:e7:75:61:23:52:47:
05:2d:d5:bc:07:95:14:32:81:cd:06:39:5b:ca:9d:
91:84:ba:f4:0f:f1:8a:86:1a:69:27:13:1e:97:56:
19:65:86:78:64:da:46:15:47:4a:24:d5:57:fc:36:
df:7a:cb:db:e1:e9:c0:32:42:7c:ce:5e:c5:5f:40:
92:1e:71:53:71:47:b5:bd:f1:7c:9b:57:64:ea:e4:
ed:35:a9:0b:0c:9d:b3:e3:f6:b3:54:12:c2:ee:83:
9b:45:0a:1f:cf:76:16:17:84:99:16:8c:00:92:cb:
33:6a:3a:f7:a0:b4:54:85:d7:d4:61:c9:d3:db:3d:
df:ca:9e:be:97:48:94:0d:fa:df:9c:f1:a7:27:02:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:90:A0:6C:FB:D3:07:1E:4C:24:52:AC:F9:0A:86:33:CC:A3:4F:A6
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f4:b1:1e:4d:9a:c3:8a:3b:7a:18:53:82:de:c2:7d:6d:9d:
a9:8c:f8:fd:f2:65:bc:e0:a8:c3:80:ae:5a:50:68:30:29:4b:
8d:f8:31:38:74:fc:7d:d7:d4:16:09:f6:da:35:f4:36:92:d9:
0e:06:bd:76:f3:4e:65:f2:ab:05:7f:af:b6:d9:87:78:76:d0:
5a:38:0e:e6:d7:ea:f3:df:8d:7e:55:c8:12:ae:bd:0e:b4:a4:
98:1a:49:bd:f9:99:19:46:f2:e7:30:4f:c6:57:72:75:b1:c9:
98:47:d8:97:b5:51:62:31:86:cd:cc:7c:d9:4b:ce:04:9a:40:
62:2b:a4:81:23:f6:46:f9:d0:de:0e:51:30:b4:2d:3c:b0:4f:
fa:cb:60:46:2c:a1:0e:47:b9:5c:ac:e3:b4:1e:e1:51:09:29:
aa:4e:2f:eb:35:db:23:1a:cb:3b:2b:21:c4:4d:74:ca:a2:9c:
97:83:47:c6:ef:5e:ce:94:04:ef:d2:4f:be:d4:1f:c6:fe:8b:
f4:b8:89:34:7f:8d:01:4c:fc:db:6f:e1:ad:f1:ae:ff:dd:1d:
a1:21:9f:98:54:f0:bd:6f:be:33:d2:64:af:f6:d0:b9:bb:2b:
d1:bb:50:56:ec:2d:9f:eb:ff:15:13:bb:c9:5c:28:43:84:20:
06:5a:f2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 20:45:53 2025 by rpki-client