Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: wlNJAGyFrQZGU56AWo1sFLGyttWesEmWdLQoF1Zgvvo=
Subject key identifier: A0:4A:AA:6B:3E:B3:4C:79:4C:82:FD:6F:5C:27:5E:A6:D5:E9:D7:B9
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 0199657EB9BEBE9BD7023BF43D6F2309857A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 1695
Signing time: Sat 20 Sep 2025 05:00:27 +0000
Manifest this update: Sat 20 Sep 2025 05:00:27 +0000
Manifest next update: Sun 21 Sep 2025 05:00:27 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: 8lSVM2BaZAG7SrCejWPM1xlzl2d83QPY8wdsHlSfnyA=)
2: WtAp0tL-l96y_gbMlR5puzdruQc.roa (hash: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:7e:b9:be:be:9b:d7:02:3b:f4:3d:6f:23:09:85:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Sep 20 05:00:27 2025 GMT
Not After : Sep 21 05:00:27 2025 GMT
Subject: CN=a04aaa6b3eb34c794c82fd6f5c275ea6d5e9d7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:4f:4b:27:93:1a:68:d0:3d:2a:28:42:7a:
7b:a4:94:18:e7:75:22:bf:6b:8c:a4:05:92:ec:46:
11:d9:82:c5:20:cb:7b:1c:ae:ff:8d:b1:83:84:9c:
52:9b:5e:92:aa:ff:8e:0d:a0:a4:ef:23:1f:63:e0:
d4:0d:f1:db:e5:78:ee:98:a7:95:85:43:7b:41:55:
84:cc:d1:92:db:48:3b:43:e6:3f:78:56:2a:45:a3:
ae:9d:d4:55:90:bb:86:20:ae:36:6f:40:2b:3b:d2:
f6:36:43:52:17:e2:3a:18:f4:f8:e8:5a:09:70:52:
64:4c:fa:31:1f:c8:f0:42:41:76:f9:c3:ec:eb:31:
75:e4:09:ae:7a:50:96:c7:38:1f:22:87:6f:a1:5c:
9c:d8:05:6a:f8:ce:6f:49:55:34:f7:44:37:a5:39:
21:65:1a:7a:ef:95:6b:f3:65:b2:f8:d8:17:8a:79:
bd:7d:83:0c:9f:68:e1:ea:93:91:22:23:dc:53:14:
8a:29:ef:f1:51:f2:af:22:4d:dd:3a:47:83:25:51:
1b:0d:29:bb:be:79:82:81:f1:26:57:a2:05:e5:fa:
96:c1:ef:7b:21:1b:d2:5d:ed:2f:46:6b:fb:d4:79:
41:6e:62:62:40:cf:26:c3:83:cd:42:8a:ad:72:c5:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4A:AA:6B:3E:B3:4C:79:4C:82:FD:6F:5C:27:5E:A6:D5:E9:D7:B9
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0c:57:97:21:85:56:e8:61:19:7b:0b:13:9c:9c:3a:fc:fb:
2e:0d:ec:11:da:f3:9d:34:d5:96:25:00:2e:7b:58:37:c2:d2:
f7:d7:61:d2:30:6f:d7:56:69:ae:e5:ac:70:fc:36:b1:66:ac:
37:dc:65:94:ff:e9:59:d1:29:af:99:7c:18:a7:c0:b5:0c:0c:
05:30:93:6d:49:89:db:9f:cc:e8:ed:83:86:ee:e2:43:08:66:
d8:18:1f:f9:ea:dc:ba:1a:38:28:bd:20:bf:46:50:4b:41:c0:
50:d2:e1:6b:83:c4:16:85:07:11:e7:4c:9f:68:ad:95:b4:b9:
3f:2b:2e:22:1c:94:3c:41:bc:c7:3a:a3:48:ff:46:35:66:10:
ec:02:36:ae:7f:eb:0c:89:6f:54:a3:1c:65:60:38:d6:dd:63:
9a:15:f6:16:af:84:5a:8e:6d:eb:47:47:2a:09:ee:af:5f:dc:
e4:ff:cd:6d:bc:be:a8:d6:c9:d3:a9:7b:9c:08:b8:3a:f1:f0:
f7:63:d9:84:d7:7f:0a:56:41:ce:cb:b9:40:ee:95:f5:84:18:
b5:9b:cc:66:df:c1:a0:96:56:7b:a1:18:f7:53:a3:49:dc:f9:
7a:19:cb:2f:41:25:b6:7f:45:99:2e:a3:26:37:7a:ef:40:5b:
7c:26:1f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 10:55:05 2025 by rpki-client