Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
File: dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft (raw, json)
Hash identifier: 0aQl3JmvxzpcxS+UJNF8Z0hNyxCRQxS5zpZxiahXGV8=
Subject key identifier: E7:DF:57:59:A6:C3:F9:B2:44:00:F3:A4:0B:40:06:79:17:43:53:73
Authority key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
Certificate issuer: /CN=769a0ed13591d4b84ca79a8eb577226076651a14
Certificate serial: 0198A04DDE7E517FA6669BF2603CB980B734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
Manifest number: 0A3C
Signing time: Tue 12 Aug 2025 22:01:54 +0000
Manifest this update: Tue 12 Aug 2025 22:01:54 +0000
Manifest next update: Wed 13 Aug 2025 22:01:54 +0000
Files and hashes: 1: dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl (hash: IGTUlE46QlN2MP7ZuKMf454pgklMU+U0S1gmJjT2q7w=)
2: r2xenfWR41SW-pcJkK2n6k9oW9c.roa (hash: 9h5yss6Wot3H0ZXysamwxUCIRFlANswYmfwPee5G6HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:de:7e:51:7f:a6:66:9b:f2:60:3c:b9:80:b7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769a0ed13591d4b84ca79a8eb577226076651a14
Validity
Not Before: Aug 12 22:01:54 2025 GMT
Not After : Aug 13 22:01:54 2025 GMT
Subject: CN=e7df5759a6c3f9b24400f3a40b40067917435373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:20:12:f0:f4:fb:7e:2b:67:c1:54:46:0d:
bd:cf:ce:62:76:aa:47:e8:6e:a7:60:b8:8a:16:d7:
f5:14:a7:60:b1:97:b0:39:a1:9a:64:12:69:0b:ff:
65:dd:0b:ab:ef:1a:2b:69:5f:b3:2b:f5:c9:9d:f6:
d4:04:b6:38:b9:6f:f8:94:ed:f3:98:31:ae:80:36:
88:7d:f2:d1:d4:48:04:0f:05:60:03:94:c3:5c:d4:
76:6a:33:09:6b:fd:ae:5d:8f:c0:77:8b:08:c0:3c:
07:1a:dd:83:03:57:c9:a2:47:bc:f3:68:a4:d9:7e:
c1:26:e5:c3:41:f2:66:f7:9d:f6:3b:bc:fc:e3:50:
6e:a7:75:de:c2:a8:75:3c:fe:87:f1:6f:2f:35:ff:
e4:81:ae:d5:af:5d:ed:35:88:a4:84:a9:1b:99:4a:
2d:22:4d:56:c1:8a:ff:14:f0:97:31:77:03:70:b4:
68:79:9e:60:4c:7e:b4:4d:58:25:7e:cb:1d:88:42:
09:22:d7:98:45:5b:6e:ac:13:d8:86:f2:d3:28:b1:
fb:64:53:9b:c4:12:6d:7e:26:06:9f:30:f4:f9:6d:
2d:68:4c:e7:6a:c4:b6:21:8b:6c:6f:b9:b0:89:24:
b9:89:87:31:9b:7b:f7:c6:d3:22:5d:c1:ed:0b:b3:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DF:57:59:A6:C3:F9:B2:44:00:F3:A4:0B:40:06:79:17:43:53:73
X509v3 Authority Key Identifier:
keyid:76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:de:2a:55:ed:11:5c:47:b5:ad:bd:d0:a2:de:05:d7:ad:ab:
b1:be:f0:db:a1:1b:af:fe:9f:ea:ee:14:39:3d:7b:d4:b0:7c:
1d:e3:c7:95:5e:83:c7:ba:86:c1:30:cc:af:86:f6:ec:00:7d:
61:f7:76:3e:f4:d9:8b:ff:c0:71:ec:3e:f4:b8:ec:06:6a:1f:
18:8e:7d:e4:0c:3d:fc:7c:30:86:a5:15:06:c8:c0:fe:7c:a6:
73:96:b6:d1:ed:50:7c:2d:77:c0:93:b9:90:ff:74:9c:07:04:
c2:11:a1:51:7d:00:12:9c:e4:da:f2:9e:4b:04:b1:8e:a0:72:
0a:3f:26:19:73:b7:72:b2:ca:cc:c8:2c:98:33:a7:5b:a8:1c:
d6:dc:f1:b5:57:61:67:a6:b9:02:af:77:a0:c8:61:6e:41:c9:
b5:ce:03:c5:fa:d2:0a:1c:e3:dc:eb:58:e4:b5:31:e8:c8:f7:
d1:b8:5a:75:e7:01:b3:af:42:83:a4:b9:10:b2:52:20:9f:9b:
ca:a2:2e:28:1e:86:ee:e5:5f:57:d8:e5:45:e8:85:0f:da:63:
f8:7c:16:d4:58:dc:88:7f:2a:84:a6:29:77:2a:92:2a:3d:78:
e1:2b:b9:b0:a3:16:b2:e0:3e:1d:fd:1b:a6:44:14:df:dd:1a:
35:12:e8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:13 2025 by rpki-client