Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: YCwkYy4Den/xVkq5JsInN/9hIh40QzWRGzGsppz1m2A=
Subject key identifier: 5E:DC:38:14:9E:32:0E:5D:F0:DE:30:F9:DA:35:2A:6B:6F:8B:E6:39
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 019922C3207BC6778D044200E6B13B8CE399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 06:00:37 +0000
Manifest this update: Sun 07 Sep 2025 06:00:37 +0000
Manifest next update: Mon 08 Sep 2025 06:00:37 +0000
Files and hashes: 1: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: Rgku1eJ5tynv/yBsBM2ao7B9pcqivLrSWMlWq1NE6zU=)
2: ej_BjAFbZm6hQCW3kEzJ6VoPdPc.roa (hash: U8mMSnb2Uo3FLs8ZgRPpDiQ27ni+P67f58AC/CHMeBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:20:7b:c6:77:8d:04:42:00:e6:b1:3b:8c:e3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Sep 7 06:00:37 2025 GMT
Not After : Sep 8 06:00:37 2025 GMT
Subject: CN=5edc38149e320e5df0de30f9da352a6b6f8be639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:8d:23:e1:31:91:5d:5e:c6:8e:f4:96:f2:
69:63:d1:3f:2e:a0:e8:29:78:2e:44:1b:fa:c8:f7:
f1:d2:4a:a7:ce:2b:17:20:bd:ad:d4:ef:62:55:27:
42:6c:23:b9:9c:35:6a:dd:a4:82:69:39:f3:12:15:
5f:b5:5a:96:ce:31:ce:18:98:b5:70:4d:fb:47:4e:
40:b6:f4:af:c9:fe:54:af:40:6f:d5:74:c5:87:b5:
a2:6c:cc:c9:51:fc:bc:90:89:25:4c:09:eb:ec:a6:
dd:cd:68:9b:56:e4:b0:08:bf:e6:b6:5c:59:f1:58:
f0:ee:cc:5a:c2:e3:7c:9f:71:d8:62:1a:6e:9d:89:
10:07:13:db:83:83:07:a7:d0:00:1f:df:b5:04:a5:
44:a9:f6:eb:a4:fe:4d:a3:6a:f9:40:f3:02:40:b7:
03:7b:ea:72:f8:9c:49:ee:59:56:f2:88:e5:41:2c:
3f:3c:68:43:c8:fb:61:bf:53:78:99:b8:ce:39:c5:
78:4a:78:a4:0a:1e:70:65:bb:f3:76:b2:e3:bb:2d:
e3:46:49:8f:d1:b6:af:f9:1e:9f:2e:08:c7:fb:42:
87:d0:e0:36:4b:f6:fd:0a:47:c2:7d:45:2e:cc:e2:
53:bf:9b:e1:fd:9c:59:38:c5:08:b3:24:e3:73:94:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DC:38:14:9E:32:0E:5D:F0:DE:30:F9:DA:35:2A:6B:6F:8B:E6:39
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:70:59:4e:bc:c4:e8:01:17:05:35:4d:30:93:5a:4c:77:6b:
5c:6a:9d:a2:80:c0:83:cc:a3:88:38:b9:0b:ef:d3:a1:8b:6a:
9f:4e:18:44:11:be:f5:f2:da:83:87:52:57:1e:65:dc:9e:6e:
f2:96:c6:f5:77:b7:2f:db:eb:48:18:e1:2c:40:da:b8:b9:08:
63:b4:13:c7:73:5e:d0:31:fe:4e:a0:61:5d:1b:b0:60:43:35:
b1:76:70:18:eb:eb:0a:f9:2a:0b:43:7f:6d:d1:71:54:c2:b1:
27:01:c2:09:38:74:c7:f3:04:fd:15:43:f8:f3:65:76:7e:b0:
92:06:75:55:f0:02:42:7d:98:cb:90:7d:51:06:a6:e7:b3:e6:
d0:b7:b0:b6:fe:0f:e5:0f:fc:87:ca:69:be:03:a4:8b:d7:ec:
74:15:e2:19:8f:8f:3c:80:8f:94:0f:73:e2:30:41:05:be:57:
5e:58:21:44:8f:07:61:6f:2c:a4:b9:21:2d:c5:0d:39:38:5f:
4a:57:33:88:0f:d1:58:a6:be:77:c5:42:1b:7f:01:bf:6a:70:
1f:4d:64:b6:a9:9c:9c:df:d4:05:46:99:84:b0:55:12:d7:59:
9e:a0:5c:e7:0c:b5:56:4e:b9:c3:90:3b:a6:3f:1c:79:75:29:
b7:e2:34:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:09 2025 by rpki-client