Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: U7xVRduSimEIQnP87pOzzJv14bSa5Psf285paEKiSC8=
Subject key identifier: D0:39:DB:62:B7:5E:38:20:2E:2B:35:71:DB:61:A9:83:09:68:CE:69
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 01984B8A386EDF81AEEE26D2EA05CE2CFB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 11:00:06 +0000
Manifest this update: Sun 27 Jul 2025 11:00:06 +0000
Manifest next update: Mon 28 Jul 2025 11:00:06 +0000
Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: +9V2lB2l/nNOUZQXcTA1MtwPozRZY3qthhRJ3tQuOUI=)
2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=)
3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:38:6e:df:81:ae:ee:26:d2:ea:05:ce:2c:fb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Jul 27 11:00:06 2025 GMT
Not After : Jul 28 11:00:06 2025 GMT
Subject: CN=d039db62b75e38202e2b3571db61a9830968ce69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3b:96:d8:f6:7b:d6:fe:a7:a7:cf:97:ce:ea:
8a:54:81:60:6c:8a:13:ab:c4:bb:55:cf:c2:ae:3a:
0f:b5:8a:3a:51:04:6b:f3:30:55:ed:0f:54:51:3f:
51:bb:6f:76:bb:5d:10:16:18:9a:4a:d4:6a:e4:0a:
68:22:78:66:3b:5e:9a:20:cc:d5:36:ba:f2:89:a4:
2e:a0:9f:a9:df:61:1d:b8:99:fc:45:40:28:4f:0c:
4b:5c:25:42:15:60:4c:2a:85:4b:33:88:72:db:49:
5f:25:5d:5a:60:04:49:b8:7e:2c:44:a2:26:9b:82:
f7:3c:06:c9:16:62:e8:cf:52:d5:44:34:cb:85:23:
90:a6:09:a1:37:35:d4:39:2e:04:96:99:25:7f:82:
40:e6:de:7c:c1:21:6e:0f:fd:2d:01:bd:1a:da:0e:
35:d7:82:5b:de:b4:8e:4f:d2:f9:a8:8a:c9:d4:6c:
53:24:0b:28:f5:1b:99:59:fc:e4:32:15:a4:f6:cc:
ee:f0:68:8f:38:ce:ab:c8:f4:a7:42:12:f0:1f:c2:
fc:9d:66:60:df:48:f6:67:73:9a:25:ba:57:44:60:
a2:6a:69:c0:72:c0:f4:c1:e3:6c:7c:29:65:1f:4e:
e2:25:cf:41:b7:4f:6a:cb:d7:51:d5:2d:45:0f:26:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:DB:62:B7:5E:38:20:2E:2B:35:71:DB:61:A9:83:09:68:CE:69
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b5:16:ba:d4:f1:98:c7:e1:71:ab:c9:41:53:79:46:46:a5:
66:6b:b8:c3:dc:06:a1:1c:10:24:83:5b:f8:e6:f8:47:49:31:
82:6d:74:91:dd:a7:a2:e1:49:e0:ae:0e:60:ad:91:2e:22:4a:
81:a3:d9:3a:81:63:d1:67:1b:af:1a:3c:22:48:5b:8b:7c:a9:
71:21:e8:2a:73:79:d0:9f:0b:1b:c2:1a:0a:18:12:a4:39:74:
ae:71:57:f1:17:a0:29:7f:ba:3a:57:ac:9c:06:e9:43:61:e4:
9b:19:57:75:bd:16:aa:60:1a:90:18:75:be:5c:2f:46:2c:e4:
c2:44:03:8c:2e:ff:b4:0d:f0:3b:b8:29:03:6f:58:6f:8f:af:
4b:e7:0a:6a:f4:45:37:83:26:da:6e:1f:1b:d5:5c:d4:d0:73:
f2:7a:e3:15:f7:07:37:42:94:40:27:c5:39:b1:7a:01:d0:c7:
7a:4b:a8:f3:9f:e0:74:ad:0f:1c:7d:c0:09:a5:1c:81:67:35:
fa:45:81:b4:32:55:af:85:81:e2:5f:9a:3e:57:60:71:ae:8f:
db:f7:04:bb:c6:04:e3:31:a9:5e:77:a5:49:b9:08:d0:d8:6a:
bc:3f:83:ec:05:79:1b:7f:6c:39:57:9e:10:7b:e7:5e:59:da:
49:78:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:52:25 2025 by rpki-client