Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier: xb+i5d3vDIlmf6q+A0H9QQXE/iIKNBuPc/vu7RPRuEo=
Subject key identifier: 53:E8:FE:75:3A:BE:87:41:6F:87:22:EF:60:7B:91:23:69:E6:4B:20
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 01988B455E96C24512F4D23CF67BE97FBA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 20:00:35 +0000
Manifest this update: Fri 08 Aug 2025 20:00:35 +0000
Manifest next update: Sat 09 Aug 2025 20:00:35 +0000
Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: QqjCuuuy2FU9/HKSNP2WrY1dJo6Q+kZtvCIGlnZyauc=)
2: x2MfmeFdkAhvqtMnijQj44RaTsU.roa (hash: vo8DVrtFsZbAKsU4/jySKYry7q+PSUACGGuHHoeRqBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:5e:96:c2:45:12:f4:d2:3c:f6:7b:e9:7f:ba:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Aug 8 20:00:35 2025 GMT
Not After : Aug 9 20:00:35 2025 GMT
Subject: CN=53e8fe753abe87416f8722ef607b912369e64b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d0:49:d5:b0:a0:9e:26:c9:7a:01:b1:5b:1c:
65:1a:e8:1e:22:dd:bc:e6:90:bb:59:b7:b5:6e:db:
72:80:bf:d5:d4:d7:3c:0f:7b:5d:b9:f2:f8:7e:74:
2c:78:73:ce:29:12:e1:d8:24:d8:02:84:54:d7:12:
71:14:77:1e:44:dc:b1:c6:0a:7f:ef:a5:11:bf:7f:
5a:4c:78:43:a0:89:24:45:19:55:3f:f0:3e:7e:bf:
f1:27:c8:84:f5:e0:5c:e9:cb:b8:1b:c5:bb:64:37:
8c:35:db:a5:bb:35:8c:06:29:95:9b:d4:f4:ce:e9:
c0:a4:f5:00:be:cf:8e:37:0a:a3:a3:3b:e1:88:02:
20:3e:b3:f0:86:1c:5a:45:e9:42:2c:ee:ef:12:e2:
cf:4b:cf:71:6c:bb:ca:33:08:04:03:16:bb:10:ab:
a2:31:ce:e3:c3:2e:29:27:8b:69:7c:d6:0a:9d:b4:
88:d8:4f:6a:17:4d:7e:eb:ab:2d:10:22:7a:07:1c:
ab:6e:ea:0e:62:b7:c8:8e:5a:1d:93:91:e3:9a:95:
8e:66:de:54:3e:df:76:cb:4e:43:49:d4:55:81:71:
8d:db:2f:e4:6a:4e:f7:58:c6:51:d8:91:c1:64:cc:
83:bf:de:af:e0:8c:ad:8d:54:fc:99:8e:92:b3:18:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E8:FE:75:3A:BE:87:41:6F:87:22:EF:60:7B:91:23:69:E6:4B:20
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e8:ca:be:02:84:50:16:e3:a8:9d:5d:db:68:81:10:ce:cd:
cc:5f:be:93:ea:df:e4:1d:14:0d:8e:1c:5b:06:99:09:3f:84:
b1:7a:b9:bf:13:d9:bf:54:1f:46:95:7d:f3:5e:49:c2:4f:15:
15:c9:1c:d2:6b:05:20:57:c0:09:f4:45:2c:10:65:aa:ed:8e:
c0:23:c4:13:b9:f9:aa:de:38:0f:ec:86:15:84:d6:be:9f:fe:
47:38:4d:20:53:58:85:91:1c:25:88:ab:a0:49:2f:c6:1d:a6:
7e:a7:d1:ca:6b:f3:75:b9:00:d8:35:74:f7:31:cc:01:ca:5c:
89:2c:72:a6:51:88:36:f7:34:d2:a3:59:30:07:75:db:68:0b:
75:7a:7e:56:4c:20:63:cf:cf:94:93:da:31:40:25:59:aa:6d:
e3:2a:de:76:d5:8f:f5:66:a5:3b:7e:d6:88:26:11:df:dd:4b:
84:ef:eb:48:f3:d0:c3:96:ff:86:6c:1f:6a:84:65:e5:79:7b:
5d:f4:d8:7d:a8:85:a3:28:47:e8:2f:e9:12:ff:eb:e5:1d:de:
d8:9a:8f:c2:8d:94:4d:55:e1:43:ef:d8:52:89:c1:5a:28:c1:
96:91:52:5e:28:1b:73:a2:f4:a1:f2:be:d2:32:5a:33:8f:b9:
94:5a:f5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:01 2025 by rpki-client