
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: FcbArvUg8ZVkry06WFIayd40fjMkNZQYtD79SA/jIaY=
Subject key identifier: C1:66:43:3E:A3:B6:6E:D7:76:64:D8:80:7D:BB:D7:0A:DA:C2:FA:68
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 01987CAE2509C563A7A26B79BE7E781616EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 00:00:44 +0000
Manifest this update: Wed 06 Aug 2025 00:00:44 +0000
Manifest next update: Thu 07 Aug 2025 00:00:44 +0000
Files and hashes: 1: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: 0RMKK/5vxTGjeB9F35jhCikRfailCchdrFLnfJOjtlM=)
2: ej_BjAFbZm6hQCW3kEzJ6VoPdPc.roa (hash: U8mMSnb2Uo3FLs8ZgRPpDiQ27ni+P67f58AC/CHMeBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:25:09:c5:63:a7:a2:6b:79:be:7e:78:16:16:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Aug 6 00:00:44 2025 GMT
Not After : Aug 7 00:00:44 2025 GMT
Subject: CN=c166433ea3b66ed77664d8807dbbd70adac2fa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:de:f8:62:e7:2b:5a:37:e1:f1:ec:86:ba:61:
37:15:70:42:41:e6:cc:06:e3:23:8c:fe:8d:5e:c5:
ce:c1:7c:57:7a:84:3c:b8:cb:8d:55:cb:c7:c2:50:
39:38:e2:67:45:09:cb:45:26:e2:ff:42:81:8a:8d:
65:d7:04:b2:b2:15:96:7a:fa:bd:d1:d8:1c:f4:84:
68:6c:80:5a:1a:0e:a2:40:d9:a8:e7:05:a3:55:21:
e7:8d:f6:0a:80:d0:b8:fa:ff:17:31:d7:ba:31:18:
e9:e7:12:f2:66:c4:d2:e0:c2:5d:f5:55:e1:af:52:
ab:8e:e2:1a:5a:c2:f5:cc:81:25:ad:5a:bd:5f:e2:
4e:9b:7f:d8:7b:55:ef:aa:e6:0b:41:bc:e3:ea:fb:
25:c4:ce:bc:fb:f2:5c:58:da:d1:5e:31:28:3b:49:
25:72:e9:7f:fe:b7:d0:ee:29:de:2f:a0:e9:97:b9:
0e:af:c5:43:cf:19:90:22:62:45:e2:25:c5:fd:dd:
41:52:2d:38:9a:58:72:e7:22:c5:ce:5f:85:5a:46:
27:9c:01:a7:5c:57:e7:4c:24:cb:85:17:6c:1f:d3:
f8:7b:16:83:bf:f3:96:c8:1f:b3:a6:c7:d6:e3:ce:
9c:50:75:28:58:8e:17:25:5a:ff:8d:51:cf:ec:b5:
b4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:66:43:3E:A3:B6:6E:D7:76:64:D8:80:7D:BB:D7:0A:DA:C2:FA:68
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:92:fe:a5:9e:dc:2b:c8:b3:ab:c0:cc:f9:dc:40:d6:88:26:
c0:7d:57:34:43:70:1a:c8:65:16:31:15:a0:17:03:bb:5c:8d:
44:76:96:d7:6c:b2:da:22:55:83:14:b7:e7:94:fd:b7:f5:9a:
7d:78:63:47:ce:ad:fd:86:3b:d9:1f:93:9e:bd:ad:25:62:98:
e9:80:06:14:f1:9d:9e:08:b9:73:2a:6c:4a:c2:2e:71:1d:aa:
d8:65:fc:22:b7:bb:a9:de:b7:b9:75:d1:de:c6:14:62:d4:36:
9c:4b:fc:44:7e:47:c7:b8:ec:9d:8c:3b:ba:16:ff:3e:6f:95:
2a:72:b5:5f:cd:36:f6:86:c9:57:40:cc:00:c9:63:e0:e0:de:
05:4e:b1:1c:1c:64:4d:4c:91:ce:a4:27:9b:0f:e2:f0:ca:7a:
0b:60:28:70:c7:aa:3f:26:a1:99:ac:81:b5:61:e0:a3:4c:1f:
2d:54:6c:9c:92:84:48:65:81:e2:5a:f4:a7:92:15:40:8b:a3:
de:3f:e7:a6:ed:a9:de:b7:30:b7:b0:40:b0:f4:45:55:43:79:
9c:3a:91:ce:98:62:d9:6d:84:90:76:30:2e:3a:33:28:58:ac:
4b:29:e8:61:05:6c:5a:bf:fd:20:39:e1:57:38:51:f6:0b:d4:
fc:a7:6e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:11:37 2025 by rpki-client