Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: 3RxcNpT5AGJfUXhTwz/m9H00nCzl3NSvMhY16QHUpzM=
Subject key identifier: BA:D8:26:32:A3:56:65:3D:58:A5:B4:57:DE:E6:1D:92:CC:51:6C:1A
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 0199334960D64492BF579B5B84BA8E6F4B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 11:01:10 +0000
Manifest this update: Wed 10 Sep 2025 11:01:10 +0000
Manifest next update: Thu 11 Sep 2025 11:01:10 +0000
Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: k6jzr9NOgzYiwhXBE9Up2AGFZGera708sXmcpCBMRZ4=)
2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=)
3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:60:d6:44:92:bf:57:9b:5b:84:ba:8e:6f:4b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Sep 10 11:01:10 2025 GMT
Not After : Sep 11 11:01:10 2025 GMT
Subject: CN=bad82632a356653d58a5b457dee61d92cc516c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:bf:83:a5:d3:c0:2d:e8:75:e2:cb:c8:c1:
f5:76:4f:81:f4:cd:dd:3f:e3:79:84:4f:b7:6e:8a:
ba:24:c9:5b:ef:9e:d3:4f:7d:b1:1a:dc:91:70:6a:
60:96:2d:78:fa:80:90:43:04:c9:f6:80:1a:8a:19:
c5:9b:9f:18:ce:f1:11:da:49:9f:99:34:ed:fa:2b:
13:38:e5:5c:9d:05:27:00:56:e0:98:10:51:e1:7f:
ff:fd:88:70:af:4f:37:82:de:84:ee:d9:af:60:24:
a5:5d:88:89:2d:09:6d:0c:de:0a:fe:0c:30:1c:a7:
a7:24:ba:7a:4f:ec:ab:e2:33:c8:80:75:72:d1:00:
6f:66:1c:e4:43:15:4e:82:13:40:e2:a0:5a:cc:6d:
26:53:1c:7c:cf:ff:a9:ae:02:f7:c7:95:26:60:fb:
8b:eb:61:71:7b:a0:78:5e:bd:e8:69:46:10:25:ee:
9a:17:b6:3d:3e:fa:4d:38:d9:02:e2:6d:10:99:df:
1d:cc:90:4d:47:3b:c5:72:71:f7:da:e2:cd:fa:de:
36:54:ec:62:cb:b7:f0:10:59:de:9c:ce:a9:3f:ba:
d3:3c:46:e4:40:96:fe:fc:f6:5d:b7:ce:f1:ee:cb:
b0:ff:20:df:3b:60:2c:bd:86:f5:34:2e:d9:6a:fd:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:26:32:A3:56:65:3D:58:A5:B4:57:DE:E6:1D:92:CC:51:6C:1A
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:63:e7:54:68:84:fc:21:95:9f:f5:8a:84:33:30:88:d7:bd:
ec:4d:98:dc:57:43:f1:45:d3:ca:b8:80:90:32:dd:00:da:c7:
0c:4c:a9:71:b3:09:3c:66:26:fa:bc:1a:83:af:9a:30:97:da:
bf:28:fe:b3:6e:08:aa:ed:61:d7:0b:15:9a:8e:93:58:ac:73:
71:f3:b0:08:68:b5:c0:34:a1:1c:93:fc:e9:77:1d:de:b5:77:
58:a7:b4:4d:50:d5:e4:2b:ce:ca:b8:3e:66:f9:44:32:95:30:
00:18:22:90:6f:66:4d:74:ce:37:fe:6b:1f:95:f7:de:9b:77:
06:48:fd:df:a7:52:6d:86:0f:cc:30:14:7f:37:3e:d1:5c:a3:
b1:2d:ae:94:20:34:fa:af:42:92:a1:fb:c4:49:1c:4d:55:6d:
5a:42:51:a4:29:43:6d:b7:91:3f:43:47:3b:17:15:6b:de:1c:
41:d7:a2:82:3c:ef:fe:1d:2d:06:5b:3e:c7:09:b8:14:a7:9d:
64:90:76:7f:8f:94:c5:42:00:58:de:e2:bb:a0:a4:75:87:f9:
2a:d6:4c:61:0e:01:8f:87:63:12:7c:ca:0b:76:86:2f:0b:7b:
07:89:e6:ae:2e:7b:c3:d9:6d:20:ba:55:2c:fd:85:19:89:0d:
0c:57:86:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:33:09 2025 by rpki-client