Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
File: DASLX4FSNcOT_qdh4H64uLv4f9M.mft (raw, json)
Hash identifier: gmDsdMnibE3Ur0CV9xReicmf8+9VvWUloWeHleEsBHs=
Subject key identifier: BB:63:A8:B6:DB:96:6A:1A:5C:93:04:A3:01:89:C1:1E:52:A4:0B:7E
Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
Certificate issuer: /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Certificate serial: 0199228C48AC2EC72D18BF7FA8EACDA6FD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
Manifest number: 1677
Signing time: Sun 07 Sep 2025 05:00:42 +0000
Manifest this update: Sun 07 Sep 2025 05:00:42 +0000
Manifest next update: Mon 08 Sep 2025 05:00:42 +0000
Files and hashes: 1: 1XNJWBeFIM2IRAvxd79b-HcAo9o.roa (hash: FW3/MZh4Uk7LDpQNsxMFINYM6j9D7wIMnyrZzis42ZE=)
2: DASLX4FSNcOT_qdh4H64uLv4f9M.crl (hash: 0k2E3KCtwGt3LpIdyz9LxcABuxuYNZ48U5skZqHzhYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:48:ac:2e:c7:2d:18:bf:7f:a8:ea:cd:a6:fd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Validity
Not Before: Sep 7 05:00:42 2025 GMT
Not After : Sep 8 05:00:42 2025 GMT
Subject: CN=bb63a8b6db966a1a5c9304a30189c11e52a40b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:7c:d3:39:47:42:67:8c:20:42:91:49:21:
f4:49:a7:7d:fa:ae:2d:12:61:af:7f:c0:b1:95:e4:
51:a8:5e:d3:86:ba:08:d6:dc:90:a1:42:3d:58:5b:
10:a0:52:99:a9:34:e4:a3:15:25:cb:3d:89:83:b9:
cc:30:b7:bd:75:16:1e:41:d4:46:d9:3c:32:89:5c:
27:6a:c5:e2:0b:3a:bb:e8:3c:15:5e:d5:f7:2c:e6:
33:90:1f:3b:13:ad:d7:e0:ba:c6:d1:ec:eb:03:91:
f4:38:34:c8:04:c7:2b:ee:e7:ea:36:c6:24:3d:c6:
32:ab:eb:6f:03:f4:fd:eb:56:ae:e1:dc:ae:2e:ff:
d2:d2:2c:6e:2b:44:b9:7e:4c:6b:d3:55:34:f7:58:
04:1f:3f:4c:e3:d8:af:6d:3c:c8:70:c8:7c:cc:2d:
83:c8:66:02:f2:b3:0e:84:0f:8a:bd:c0:43:7a:64:
66:c6:df:4e:91:39:6f:78:92:a0:71:e7:f1:47:f5:
21:00:a7:b5:83:dd:e5:dc:7a:e3:fe:e3:c8:90:8b:
32:ec:fd:0e:4c:1a:61:2a:0c:a1:ea:6c:b4:67:d2:
7a:f0:39:2a:9d:51:c4:b8:c9:56:22:e4:1e:3a:c3:
69:f1:09:70:1c:be:69:39:92:93:95:40:b9:99:4a:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:A8:B6:DB:96:6A:1A:5C:93:04:A3:01:89:C1:1E:52:A4:0B:7E
X509v3 Authority Key Identifier:
keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f5:1d:22:c3:55:62:78:f5:14:8e:13:8a:15:ba:00:79:2d:
eb:6f:60:ef:4b:74:a6:e0:ee:6d:74:5c:96:46:81:26:aa:f8:
61:21:76:fa:5d:88:6b:48:49:42:1b:24:7a:06:d2:b7:2d:c2:
b9:d5:dd:d3:ab:e0:ca:6e:70:7b:be:26:10:34:92:8d:8a:3d:
3f:a7:36:b4:2d:99:6d:1c:3b:39:c4:e5:f9:ff:db:e4:ff:97:
6b:78:04:3d:98:ee:a1:81:cf:8a:15:49:f3:e3:49:0c:c7:c5:
6b:8c:88:af:99:fc:79:89:80:b7:34:6b:eb:db:b1:5a:44:7f:
d2:ef:6d:8f:dd:33:f1:32:bb:5f:95:55:1c:c4:fb:a4:4e:de:
6d:b7:15:0e:31:6d:5e:8f:c9:2f:ad:38:66:70:2b:6b:6d:5b:
23:cd:48:62:42:8f:80:4a:48:7c:c8:b5:a9:db:7c:d3:62:24:
a3:7f:21:6a:41:9f:2a:33:43:16:b8:9d:bc:73:88:12:f5:89:
73:af:30:94:24:e1:2d:79:22:27:b5:e0:ae:8d:64:62:13:89:
e3:22:5b:f2:3c:c7:aa:ff:7d:7f:ec:14:3a:2f:5f:47:ae:97:
06:c3:b9:c7:08:f8:84:b7:92:3d:43:e7:ec:8a:64:63:a7:04:
6e:19:79:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:44 2025 by rpki-client