Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: X1t1TENy1yCOdxmfjYbVUEMao9ZqFZcwQFzT+4KvHJw=
Subject key identifier: 58:E9:07:7C:D1:9F:44:08:D4:DE:9E:5F:A7:51:46:66:05:C8:D7:D0
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 019855A0A8E0811472386C8D953E503BB010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 1565
Signing time: Tue 29 Jul 2025 10:00:48 +0000
Manifest this update: Tue 29 Jul 2025 10:00:48 +0000
Manifest next update: Wed 30 Jul 2025 10:00:48 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: sRQJ48ZiK/f35/AK6mMsGP/KeWdRnd567wS6bbSd8JE=)
2: UgQOVXjSfDZ0oMmnpF9LnBZc5Iw.roa (hash: EuORew0X+P8iEghXgdkM03dJatTHGRU6W9xGTUJPJEY=)
3: WnLaCz0whNUAj7xt1GXCRyC0ff4.roa (hash: 1NkpD3wTqpaneQCvPoyVPVIPTREHfmPMSbzyzikhuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:a8:e0:81:14:72:38:6c:8d:95:3e:50:3b:b0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Jul 29 10:00:48 2025 GMT
Not After : Jul 30 10:00:48 2025 GMT
Subject: CN=58e9077cd19f4408d4de9e5fa751466605c8d7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:3d:31:a1:11:bf:42:9e:87:d5:b9:b0:98:
30:7a:95:ef:7d:a5:50:47:c1:5e:f5:00:3c:da:24:
f6:1b:8a:23:09:be:6f:4b:49:eb:f8:1a:be:48:87:
02:21:dd:63:45:28:2a:6b:72:f2:61:64:b1:86:bb:
d2:ca:18:e9:d9:3c:ad:66:16:72:9a:73:46:3d:34:
ea:d1:b4:cb:4d:bb:91:db:9b:45:c2:5a:74:0c:ed:
1d:38:1d:a8:cd:e5:ac:16:f1:db:98:8e:b3:f4:9a:
5e:96:fb:ed:63:ba:14:b6:78:7b:0c:36:7c:76:b2:
6d:a8:b9:92:62:ad:de:3a:40:b6:d5:6c:fd:87:4a:
44:ab:24:30:e0:41:f1:5d:ea:18:93:a4:ab:d3:2b:
3e:77:4f:37:93:d3:d4:27:0c:a9:ce:61:87:ad:c3:
5b:22:98:22:8f:12:45:b1:97:98:c0:9f:16:c1:e8:
0b:d8:5f:4d:45:a6:57:3b:55:a1:ff:16:c2:92:a9:
20:2d:a7:ad:a6:d0:bc:ce:00:ad:74:e7:59:2a:65:
0f:64:42:21:0b:19:a4:a8:d8:d2:d4:8e:0e:8c:c3:
33:c4:3e:a6:fe:6b:ca:d3:09:a9:b2:d9:4f:c0:25:
b1:7b:18:24:dc:dc:8c:92:09:0f:0a:f1:9c:a1:84:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E9:07:7C:D1:9F:44:08:D4:DE:9E:5F:A7:51:46:66:05:C8:D7:D0
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5d:9f:33:e9:7a:28:61:3e:02:66:2c:eb:f5:09:c0:7c:66:
5e:2b:7e:5a:92:59:96:31:35:87:ad:ef:c0:d1:ba:aa:62:22:
eb:e6:4b:19:a5:2b:0d:d9:94:28:6d:90:b0:70:d3:29:b7:2d:
98:9e:2a:54:49:1c:06:0a:53:07:98:b1:b8:27:35:87:10:ec:
9c:e3:af:9b:a1:a2:36:be:d3:fc:ff:97:6b:45:cf:32:be:81:
3d:1d:65:94:59:f9:93:46:a3:42:b8:ff:8a:54:b7:68:56:ff:
9c:d5:ee:bf:6c:d3:e5:e3:6f:04:22:2a:f2:1a:d9:d0:26:9b:
fa:ce:b3:da:f0:86:11:20:27:2f:48:75:50:b0:5f:df:f8:54:
3c:67:88:d0:52:2f:fc:6b:ba:2b:3c:d8:f2:c5:16:11:26:dd:
d2:19:88:7a:1b:75:ec:97:66:2f:69:d5:6d:52:31:24:66:67:
e5:36:59:bf:01:b8:99:ca:2b:06:ee:3e:ff:00:2a:3c:10:4b:
6f:ac:98:d9:a5:9c:cd:32:e5:e6:5c:43:66:29:f8:c1:a4:31:
46:89:2b:4e:06:07:60:39:e4:e1:d2:cc:b3:0f:c1:78:ac:86:
c6:f2:1f:e4:98:5b:e7:78:19:4b:10:de:aa:2f:49:df:ce:46:
e6:47:6e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:47:20 2025 by rpki-client