Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
File: DloI_DRpD1LbDCt-R-jlOIMUWpg.mft (raw, json)
Hash identifier: ffvQbm1aJEGQudpOyuHCb4jvNk8m7gffdhyvcbK1joE=
Subject key identifier: 01:9B:AA:0D:52:6A:F3:EF:EE:F4:6A:50:D1:31:A6:98:BE:C2:9A:4B
Authority key identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
Certificate issuer: /CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Certificate serial: 019873740A1EB6892F9019049D7356BF23FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
Manifest number: 0127
Signing time: Mon 04 Aug 2025 05:00:41 +0000
Manifest this update: Mon 04 Aug 2025 05:00:41 +0000
Manifest next update: Tue 05 Aug 2025 05:00:41 +0000
Files and hashes: 1: DloI_DRpD1LbDCt-R-jlOIMUWpg.crl (hash: fGXdbcf6HIJjcAoKAgNaDdcFWx1wg9fCHl1b3xiZZwI=)
2: xjqb8HoLRLAR-p4-R3Sb4dWDULU.roa (hash: 1mq/X/AhDxzJxbocaN5soLh/qNxvhHjRbgctopoVrKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:0a:1e:b6:89:2f:90:19:04:9d:73:56:bf:23:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Validity
Not Before: Aug 4 05:00:41 2025 GMT
Not After : Aug 5 05:00:41 2025 GMT
Subject: CN=019baa0d526af3efeef46a50d131a698bec29a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:cc:46:6f:46:05:eb:ae:be:8d:ef:2b:24:
42:cb:c0:a4:79:93:c8:74:00:34:b0:3f:7c:48:ab:
34:46:ad:26:02:b0:6b:8e:e9:29:a8:eb:d7:76:72:
97:c4:20:b5:dd:6a:d4:ca:3b:a3:d6:26:74:11:dd:
8b:a0:07:d3:42:af:92:97:d4:88:9a:21:17:c2:9c:
17:1e:c3:70:22:35:37:ec:aa:e2:62:d2:5d:5b:65:
08:78:d0:1c:ff:57:d6:44:c5:1f:51:00:61:1b:48:
63:e8:ad:f3:7c:a8:e5:b4:e5:8a:07:ef:ee:11:13:
6c:11:2e:1c:fc:25:08:40:f9:94:78:76:e3:9b:6f:
41:fc:ee:92:23:d8:29:d0:70:88:e0:93:33:a2:7c:
20:aa:05:ff:dc:69:b1:10:a5:f9:8d:f0:a8:27:a1:
5c:bd:f0:2e:06:38:75:b7:6b:20:62:67:de:92:87:
6b:45:1f:4a:48:02:40:b0:1e:5a:b5:08:a0:8a:71:
9c:64:fa:c7:f9:97:c4:ed:82:c7:67:7b:d5:b4:4f:
4d:5d:ca:6f:5e:a2:6a:d7:72:7a:d0:ff:9d:4a:7e:
10:91:1b:0d:21:b7:e3:6f:d5:1c:56:8d:89:65:c7:
a8:af:e5:a7:23:65:1c:3f:e1:d1:70:dc:10:13:5c:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9B:AA:0D:52:6A:F3:EF:EE:F4:6A:50:D1:31:A6:98:BE:C2:9A:4B
X509v3 Authority Key Identifier:
keyid:0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:57:e8:3e:cf:ee:c2:bf:8a:ae:71:bc:38:68:60:8e:3d:00:
46:db:7c:c4:22:19:d5:13:cd:88:89:db:07:f7:2e:68:01:1e:
9f:99:29:bc:66:69:77:08:3d:f3:45:d2:5f:19:60:43:6d:f1:
8a:f9:20:f0:f7:3b:d3:81:9e:7c:55:7e:93:27:0a:48:d4:3c:
a5:09:bb:33:c7:47:c0:88:7c:4c:a2:88:bd:ec:67:6e:a0:03:
35:3a:04:db:f6:5f:60:a0:77:14:10:f7:04:9e:5e:01:67:b2:
8e:0b:ab:11:85:fa:c6:aa:11:80:34:2f:02:91:79:84:0f:2a:
62:9d:e4:1f:d4:03:80:2e:fd:03:1b:23:12:2b:7a:9e:d9:13:
f5:1d:ec:6c:3c:26:a9:fa:f0:12:26:eb:17:6f:00:c0:a7:f5:
53:17:d8:f4:70:52:c4:d8:1e:fc:50:72:d4:54:73:01:71:87:
e0:bf:80:a7:75:42:86:b5:17:f0:2b:42:f1:51:b4:c9:51:e2:
16:37:ed:b6:8a:62:12:9d:42:a0:38:d6:c3:61:37:90:f3:ee:
2c:6c:1b:d2:02:41:8c:f1:c8:c7:f1:89:27:7d:d2:b4:e1:ed:
0c:fe:e1:ca:9a:23:45:a3:56:42:5e:24:52:28:f0:3f:45:9c:
10:b1:66:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:47 2025 by rpki-client