Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: VSR+oimA2dRuC46T4ebxcO+MwqGrnPyo+cDLsn1xd0A=
Subject key identifier: 18:98:BD:FE:95:D1:6E:33:4A:14:D7:48:3C:56:F5:05:8E:5C:B3:26
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 0198C67F6A5EA07999FB32445193748201CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 06E1
Signing time: Wed 20 Aug 2025 08:01:35 +0000
Manifest this update: Wed 20 Aug 2025 08:01:35 +0000
Manifest next update: Thu 21 Aug 2025 08:01:35 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: W2wbMTGF0ntxol6p9DvlzpRV/gp3oZOII+D/U9izWsU=)
2: oH2IWQRozN1-75odpKh66sr4uwc.roa (hash: wPfO52+kbkGCq6+uVpP9AwZp/WGjoxj4/guIax27VIU=)
3: y77dBZKkwdBWSaHuC-2LOWhhnDE.roa (hash: Mve9fSJEqTyFEiPK9mxYy3Dvl/+0Q/tVpXlrv6a1VIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:7f:6a:5e:a0:79:99:fb:32:44:51:93:74:82:01:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Aug 20 08:01:35 2025 GMT
Not After : Aug 21 08:01:35 2025 GMT
Subject: CN=1898bdfe95d16e334a14d7483c56f5058e5cb326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:dc:b4:48:4d:2a:b6:5a:e7:38:ce:09:0c:
6a:49:ad:82:75:03:b4:93:23:c6:b3:dc:6a:95:7f:
37:1e:5d:5a:1e:94:43:80:22:d7:9d:fb:42:dc:32:
6a:5f:d0:71:77:a0:b3:e0:ee:d1:59:a3:81:5b:11:
5b:b7:78:a4:78:2d:b7:aa:74:af:98:50:e0:d3:c5:
bb:36:94:af:33:d2:1f:8b:57:65:d4:28:c5:93:5a:
78:88:89:95:24:5d:3d:b5:43:6f:fd:6e:91:05:bc:
94:cc:9a:6c:cd:d2:13:de:36:be:4b:0c:c7:42:18:
b8:bc:b5:4e:06:8d:c8:1f:74:5e:52:47:1f:e3:f8:
21:b1:ae:e6:c3:dc:e6:f2:56:e7:a4:c9:3b:ea:24:
3c:62:e8:59:ff:9b:fc:f1:61:f0:25:1a:f8:38:6d:
1d:88:cf:f0:b8:d6:40:f8:62:b2:79:19:a9:76:a3:
04:d9:a1:f1:49:c6:8b:6e:9c:36:d9:c4:6a:f3:aa:
7a:36:37:b5:0b:b2:73:a4:4f:a7:4f:69:8c:96:69:
6f:1a:e1:9a:40:46:a6:9c:84:01:80:d2:e3:55:f3:
4f:6e:28:81:16:de:4e:b8:36:71:d4:7b:6f:0e:0d:
12:fa:bf:1f:0a:d1:66:b5:20:b7:a3:54:4e:2f:b7:
a8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:98:BD:FE:95:D1:6E:33:4A:14:D7:48:3C:56:F5:05:8E:5C:B3:26
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:64:25:2f:68:bc:99:6a:df:47:ff:ba:a8:2f:bb:fe:23:02:
7a:cb:4c:9e:ca:4f:b1:54:fd:0d:0e:d8:69:31:26:31:58:99:
49:d0:75:b6:5f:25:53:26:e9:83:be:76:2b:e2:a7:22:e7:52:
b8:95:f1:19:67:cc:e1:fd:cb:83:4a:76:cd:c8:2d:fd:bb:52:
3d:02:1c:de:c8:f4:c5:45:09:65:a3:9e:c4:ad:54:14:48:2f:
ae:14:87:60:c6:81:08:23:85:e0:ab:1f:03:5c:c5:42:b5:d2:
c8:66:5f:09:47:4f:29:e2:f1:c2:a8:7d:e6:0f:0f:83:2b:57:
1c:bc:a8:c6:e8:e5:0c:d5:7a:d4:84:7b:e2:3b:53:f4:c2:e1:
0f:7e:5e:03:18:59:7b:a1:7a:0a:82:84:26:7a:5c:59:ea:d1:
3b:5a:ce:aa:5f:b0:17:ce:b9:dc:8d:32:c2:6f:c1:65:8f:0c:
e7:80:b2:62:ad:ce:7a:dd:32:80:bf:93:b5:a1:ba:a4:2c:bc:
2a:2c:4d:3c:09:70:72:bd:90:c3:28:cb:c0:92:dd:75:b2:bf:
2f:43:d1:f3:67:99:91:e1:4b:9c:2f:73:c0:46:4e:17:d4:d3:
eb:1c:2e:f3:89:13:47:56:59:8a:a9:b3:7c:25:04:09:45:8d:
c9:31:07:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:37:17 2025 by rpki-client