Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
File: DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json)
Hash identifier: GhZeKqpvhKOxAPKaxjxwUa5kidxi4OEHmRgrgW9q/aQ=
Subject key identifier: D5:29:48:29:65:27:00:D4:FF:C4:06:11:2C:63:1C:08:00:11:CB:AC
Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
Certificate issuer: /CN=0e44f133f387593aafa2beab38884904fac9bd19
Certificate serial: 01984A4146B5AC166C1D4696C03C62F319B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
Manifest number: 028D
Signing time: Sun 27 Jul 2025 05:00:48 +0000
Manifest this update: Sun 27 Jul 2025 05:00:48 +0000
Manifest next update: Mon 28 Jul 2025 05:00:48 +0000
Files and hashes: 1: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: +cj4nOCsHeI5mzcRm8WR63QlNlHOl9HyKj/Koh9SnVg=)
2: Wiv0DHdRF2zh8D5DY6J3_PLSV6Q.roa (hash: /xs5AGgsSlLOCnLD+1aaT+DfL+K36ivL9muQHygs7c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:46:b5:ac:16:6c:1d:46:96:c0:3c:62:f3:19:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19
Validity
Not Before: Jul 27 05:00:48 2025 GMT
Not After : Jul 28 05:00:48 2025 GMT
Subject: CN=d5294829652700d4ffc406112c631c080011cbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:df:51:0f:88:3f:90:70:9d:9e:a4:98:cb:
65:f1:69:c9:f4:57:a5:eb:0d:40:0c:73:f6:8d:53:
83:dd:71:01:5d:b8:26:0a:08:01:08:31:ba:67:d5:
61:57:c0:d7:3a:4f:f2:71:50:03:ee:e1:67:2b:e5:
fe:df:f7:c4:ee:3f:e7:28:7d:ce:ac:6f:60:89:24:
d6:e5:21:7d:41:cc:30:b9:84:c4:53:89:1e:68:70:
dd:ee:24:cc:72:2e:10:cf:95:7e:78:66:99:2d:fd:
83:1e:da:46:cd:0d:fd:b0:a0:c9:54:ed:5e:00:b1:
c2:d0:15:7b:dd:43:39:07:1c:78:fc:63:12:2a:d1:
85:28:d1:2c:6b:bc:d6:66:12:eb:6a:b1:8e:db:d9:
29:56:1c:bc:f6:36:23:8a:a0:de:e2:92:37:82:d6:
ea:e0:a6:f3:e8:0d:ca:61:4a:3f:92:e5:5b:ad:de:
b5:21:df:84:56:43:38:92:4c:eb:c9:c4:1b:0c:f9:
70:b0:45:6f:ff:ed:9e:92:b2:15:ea:84:1b:58:25:
92:26:d8:02:26:ff:c4:ce:c8:0c:8f:1d:d6:ba:90:
66:d7:ca:db:9b:92:3a:60:38:2b:84:3a:df:aa:9d:
88:84:51:bb:2c:f0:3a:52:09:d3:26:ec:d8:d4:3f:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:48:29:65:27:00:D4:FF:C4:06:11:2C:63:1C:08:00:11:CB:AC
X509v3 Authority Key Identifier:
keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4a:80:4b:d0:c5:b9:ee:2e:cd:5c:f4:5c:11:58:2c:3b:41:
76:78:fa:6a:35:16:73:ba:b8:bf:e0:1a:ed:08:4b:94:73:69:
40:b2:93:e2:fb:c1:ce:df:55:75:62:64:dd:ae:ae:39:6b:09:
96:a9:40:17:59:36:a2:15:02:20:ad:86:7b:16:1c:83:ef:78:
2f:4f:a4:f6:e2:05:60:82:46:57:26:bb:ed:fe:98:b6:88:81:
a3:2a:86:f8:d3:68:89:2f:39:e6:4f:64:70:93:bd:08:5c:c4:
a2:4c:32:e7:3c:48:a5:92:14:c7:a1:0b:bc:e6:50:77:24:73:
f0:06:c2:f8:8c:c4:50:6c:44:5d:07:04:ca:41:e0:53:bf:b0:
6f:55:ee:90:b3:ba:3a:22:37:55:56:38:f8:80:31:81:cf:c6:
14:27:24:15:cc:4b:ce:9a:4c:22:f8:80:f5:10:14:b4:44:3c:
43:14:ff:56:33:02:aa:87:e7:06:ac:1a:ad:cf:80:2d:d6:7d:
c9:d8:d3:58:4c:f3:b4:59:60:6a:23:8d:fd:1a:be:ca:89:cc:
20:93:a1:36:f4:f6:66:60:ac:84:dc:87:88:a1:36:dc:3e:eb:
c6:86:95:d2:b8:f0:9f:b5:c3:60:5b:b5:76:12:b4:ad:7e:8b:
aa:4d:30:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:30 2025 by rpki-client