Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: Qah4OK41JituR1liw25xrcq1QIaWn5TRugdV2KPI9EU=
Subject key identifier: 2E:77:26:F6:F4:8E:BA:0B:EE:8A:D4:1C:F2:6F:49:9F:DD:58:33:D8
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 0198745070BCF2A5C532B7A0A144C910B6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 1238
Signing time: Mon 04 Aug 2025 09:01:25 +0000
Manifest this update: Mon 04 Aug 2025 09:01:25 +0000
Manifest next update: Tue 05 Aug 2025 09:01:25 +0000
Files and hashes: 1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: ExnkUd6C+mgVowK+8OVowfE8TlsYI+LSFpcrux/Kw3Q=)
2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=)
3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:70:bc:f2:a5:c5:32:b7:a0:a1:44:c9:10:b6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Aug 4 09:01:25 2025 GMT
Not After : Aug 5 09:01:25 2025 GMT
Subject: CN=2e7726f6f48eba0bee8ad41cf26f499fdd5833d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:51:a2:59:a4:aa:85:8b:6e:21:d2:4a:79:
74:4c:69:41:00:7a:a0:53:24:93:b6:5b:70:85:e7:
1a:65:d9:8d:b8:04:a8:6c:cd:83:fc:bb:72:33:1f:
62:e5:f1:53:07:0b:21:d1:a3:1c:b0:05:68:18:c2:
df:a0:a3:0e:39:99:74:93:5e:16:80:18:53:1a:79:
61:60:f7:82:25:cd:75:9c:5a:a3:a7:37:e2:6e:86:
ac:db:9c:1a:c2:64:b6:35:d1:04:d6:e8:09:24:f3:
54:0e:ce:b6:8a:6c:b0:76:3c:a5:c2:9f:ed:00:eb:
c1:24:c0:16:d4:6e:2e:1f:cc:d9:72:2f:ec:2f:23:
38:33:a1:aa:f8:cc:ab:50:f9:6b:3c:7b:2c:cc:10:
d0:cf:47:c0:59:e3:6a:40:31:eb:88:16:c9:ec:95:
19:3e:e4:ee:97:3c:59:20:cf:d6:fa:10:4f:9f:e0:
b5:22:39:a3:5a:63:5a:ed:5c:d1:0f:e0:64:4c:db:
5e:66:f1:ef:f1:ab:16:b8:e6:a9:e6:58:02:90:b6:
e1:4b:38:ec:c7:40:2f:05:39:be:c7:31:22:c6:0e:
16:7d:66:60:d1:a2:35:64:78:01:00:dc:85:cf:3d:
06:b9:7f:1b:75:e5:11:20:85:a5:e5:2a:49:c3:64:
51:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:77:26:F6:F4:8E:BA:0B:EE:8A:D4:1C:F2:6F:49:9F:DD:58:33:D8
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b2:aa:ae:b5:f5:e4:97:b9:17:0e:6a:a1:72:dd:78:2a:ad:
dc:76:d2:c4:d4:16:40:ca:03:fb:e6:36:c4:cb:ec:3f:5b:3c:
5f:22:97:67:33:02:25:9e:1e:5c:55:05:e6:48:26:00:0c:b4:
f0:04:73:f3:20:e6:28:2c:e1:2f:fd:56:dc:34:57:41:3c:5a:
56:aa:3a:39:81:86:e1:75:79:8a:eb:15:8e:7b:8b:82:fb:2f:
30:43:46:3a:f2:51:fc:99:0c:b5:8c:46:3e:05:8b:c0:1e:00:
aa:05:90:5f:78:3f:40:79:83:b1:a0:76:77:97:70:76:37:50:
0d:f0:1c:f6:e0:e1:94:f9:c6:71:52:6f:8c:fb:6a:fe:77:46:
e6:3e:b8:d9:57:e8:5b:85:12:b5:89:a5:0c:d2:38:b1:26:53:
46:ad:b1:64:39:b6:b9:67:ad:59:c8:3f:5c:35:b4:d9:a4:aa:
38:4b:3b:8d:fa:7e:0b:33:25:39:eb:99:e3:f6:33:74:12:28:
1e:6a:97:27:ff:31:b4:c2:b9:fa:af:5d:74:9e:da:00:14:94:
fd:64:1b:a8:da:c0:58:9a:ec:08:5c:9f:eb:97:c5:32:ba:ce:
e6:34:5e:35:45:b1:7e:ac:76:d5:63:f7:6b:a9:ba:66:f0:7a:
e9:48:6c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:28 2025 by rpki-client