Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
File: DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json)
Hash identifier: S/Yvlv4TDRdopX0TdwWpJT3Wy/cWMbwYhdiZ8xssY/A=
Subject key identifier: 23:CF:EB:97:20:92:9F:6C:21:20:A5:91:F8:BC:F5:53:72:23:5F:E6
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 0198481B5612E74C92037EE62D900C1A4B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 19:00:07 +0000
Manifest this update: Sat 26 Jul 2025 19:00:07 +0000
Manifest next update: Sun 27 Jul 2025 19:00:07 +0000
Files and hashes: 1: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: rL85Ohe6X4vwXFBUfPZXb2SLgdUiOFqYuGIMHNMOvfo=)
2: NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa (hash: RU6vCeDfFthQ1YTFt3fi6pe99JectXQZEPhaEuKEkus=)
3: gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa (hash: AYt4mi1gsvIajU9NsR145mbQ/0eGQGt615cxYTa3ACY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:56:12:e7:4c:92:03:7e:e6:2d:90:0c:1a:4b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: Jul 26 19:00:07 2025 GMT
Not After : Jul 27 19:00:07 2025 GMT
Subject: CN=23cfeb9720929f6c2120a591f8bcf55372235fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:e7:8e:c4:94:46:5f:2f:17:d0:ab:e3:0c:
69:4e:26:e3:13:8d:c0:17:ca:24:13:59:f0:48:d7:
68:b9:b8:f9:8b:47:6a:77:b8:69:85:57:ae:c7:79:
1b:9f:26:ef:72:22:93:ac:ce:28:1a:38:67:a1:ff:
05:68:c8:bb:e5:d0:46:19:39:2e:b6:6b:b9:e3:34:
d9:0e:69:18:4a:f6:1a:ea:09:20:f5:fe:3d:4e:86:
d0:55:6f:4b:4f:3d:bf:cb:eb:9f:1b:19:c0:95:31:
c1:bc:60:59:36:cd:04:a3:c6:cf:29:d8:67:ab:e0:
19:64:7b:07:0d:f6:48:e6:86:f9:fe:d5:e3:d2:d8:
42:b8:a2:f1:31:67:20:e4:9d:2e:14:d9:b2:a9:e6:
c6:33:db:59:e8:90:f1:11:1c:d0:7a:94:72:1f:e9:
c2:40:53:f8:0f:2d:4f:c5:9d:f2:32:a5:da:fc:56:
12:1d:1b:6c:a3:8b:38:fa:d0:5a:6a:f1:f6:87:d1:
a2:b7:ed:11:a6:0b:7d:e8:c3:36:cf:b5:14:ea:db:
82:8d:86:a4:4e:1c:40:56:eb:5e:30:42:8c:e3:b1:
98:fe:f8:1d:15:87:70:fa:1e:dd:aa:30:12:f8:08:
df:0c:d9:f9:84:0d:33:b8:ef:b0:e2:bc:b5:b4:2a:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CF:EB:97:20:92:9F:6C:21:20:A5:91:F8:BC:F5:53:72:23:5F:E6
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:36:95:ca:80:2b:75:f6:27:b7:e9:e4:6a:2a:ce:e1:c6:cc:
7a:3b:67:ae:fa:39:d6:7e:ab:4d:81:b0:fd:4f:48:f9:08:33:
a0:78:d4:12:e4:71:87:6a:45:12:96:db:db:8c:4c:ce:29:90:
b0:a8:e0:85:ad:55:c7:67:d2:40:ae:5a:81:33:ae:2a:24:ef:
9b:4e:43:20:7c:78:ed:ed:d1:cd:6a:dd:1b:aa:d3:c4:c8:33:
cf:54:c1:e7:2b:d1:16:10:e1:38:99:a8:5f:33:e3:37:eb:b7:
95:09:ea:5b:ef:4d:14:94:f5:e9:b9:64:39:0c:98:a9:ed:94:
a5:18:25:d8:d2:7f:2e:bc:25:f6:bc:8e:61:a9:cd:44:33:7d:
22:43:52:80:1a:04:f2:e8:55:49:e7:2f:5c:40:11:d6:4e:64:
a9:64:c3:dd:d9:24:d1:87:cb:0e:ff:be:e7:e3:44:9d:5c:6b:
07:f8:27:e1:88:99:99:24:f7:ea:0c:a0:fb:4a:90:30:87:ab:
d4:0c:3d:4d:6f:8c:0b:79:60:e2:e8:f7:21:19:0c:67:86:58:
c1:1c:b6:4d:44:39:32:95:5b:39:d6:f4:60:46:23:ac:78:1b:
49:51:89:d4:ea:70:3d:10:3e:a7:0b:ee:56:13:e9:53:57:92:
c1:55:82:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:56:57 2025 by rpki-client