Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
File: DigOW_CXDHM8w0vBvnkmdZrDHe0.mft (raw, json)
Hash identifier: CDk+AELC4pHnG2OhHM0oVhZEhj4dNMTvz2EJxlc96oA=
Subject key identifier: F4:22:06:FF:3E:5C:9E:FE:F6:2E:76:6D:13:9F:28:B7:35:8A:78:CF
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 0199161BCC371B9F656D2BDFB7F59F3C59AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
Manifest number: 1382
Signing time: Thu 04 Sep 2025 19:02:24 +0000
Manifest this update: Thu 04 Sep 2025 19:02:24 +0000
Manifest next update: Fri 05 Sep 2025 19:02:24 +0000
Files and hashes: 1: DigOW_CXDHM8w0vBvnkmdZrDHe0.crl (hash: /XY2D3wKka/9tqbEsM4sjwctJ90ZAK65z9qJcapiT0Q=)
2: nitfhwT5zdpxb50hXlk4jgWzdQE.roa (hash: Cnmglk4tBEqztiio9IkWbUek+XEbAwr0Bjp+MAHYUSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1b:cc:37:1b:9f:65:6d:2b:df:b7:f5:9f:3c:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: Sep 4 19:02:24 2025 GMT
Not After : Sep 5 19:02:24 2025 GMT
Subject: CN=f42206ff3e5c9efef62e766d139f28b7358a78cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:e7:ae:e6:18:d8:65:90:50:ad:89:5c:25:
b4:81:c8:0b:71:37:1f:15:2f:59:6c:c9:c2:ba:ff:
e3:8e:a0:e1:69:8e:85:77:86:35:25:eb:a2:74:79:
ee:f9:b2:df:88:b5:d8:a5:85:de:d9:e3:d9:15:76:
26:93:e8:95:b7:65:71:34:71:d0:99:77:9e:26:9f:
de:15:14:e3:e6:77:9d:4a:bd:aa:35:10:69:ab:c9:
62:8f:be:64:53:5b:b5:0a:36:0c:58:1a:e8:d7:e1:
a3:71:ac:53:24:37:81:5d:25:c1:af:5a:ad:e3:b5:
1c:db:8d:7e:7e:55:98:72:35:a2:78:64:a5:e9:20:
5c:b8:22:f7:b4:78:ab:df:84:2a:f5:4e:47:64:cb:
44:27:0a:11:73:e2:09:f0:25:20:d0:8f:8a:24:cd:
7a:2c:f5:b6:9c:07:b1:b2:3d:da:b2:b7:cc:33:12:
c6:b0:ce:d6:6a:04:63:95:ee:da:ae:50:1a:5d:1b:
9c:bb:59:72:1b:c9:0a:ae:ef:5e:fd:4a:75:e5:57:
6c:f7:3d:b5:c8:da:df:e4:23:33:c1:6d:48:82:57:
28:6d:43:16:26:29:5d:9a:9a:c2:94:3e:73:15:12:
3c:7f:98:62:5f:bc:31:88:c3:85:73:d1:91:39:0c:
87:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:22:06:FF:3E:5C:9E:FE:F6:2E:76:6D:13:9F:28:B7:35:8A:78:CF
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bf:6d:d0:6b:46:70:7b:a0:82:c4:a9:96:43:bd:f4:c4:dd:
94:fe:52:c5:10:00:c5:a4:88:a2:a9:c8:bc:00:be:17:ca:e9:
79:0c:ed:bf:01:a0:67:e7:45:30:1e:ef:3a:21:f4:72:31:29:
6e:8b:05:ea:55:5e:d5:06:26:af:25:27:00:b4:f5:a1:13:b2:
d8:c1:be:b7:9f:18:70:c9:6b:ea:76:75:d3:2d:aa:ac:38:08:
de:4e:49:27:e2:ab:d8:93:2e:6d:b6:85:00:aa:fc:e9:34:b9:
d9:7d:40:9e:66:0c:6b:f4:f9:74:9b:84:f3:7c:2c:3d:fd:7c:
24:74:e6:d9:1a:cb:ba:47:b0:99:e4:d7:4d:2d:35:18:71:40:
fe:7e:21:1c:8c:fa:17:4c:d7:64:0b:2e:f3:34:92:bd:bd:e6:
57:81:17:9f:cd:8e:02:93:3a:12:68:54:df:3e:99:30:78:b6:
20:d7:8d:34:9b:1a:db:6a:bf:2a:01:37:3f:ad:3c:1a:8e:60:
68:1d:14:e9:07:e0:04:6f:aa:8d:67:a3:e6:03:40:f3:8a:89:
30:d4:f8:d9:7d:48:1c:63:3e:e3:73:0a:10:c6:eb:78:31:49:
34:d7:e7:08:ff:08:df:e9:27:ea:74:34:7a:30:6f:a3:67:6d:
66:b5:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:16 2025 by rpki-client