Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
File: DigqFcGl0VS72ocrNXYHqR-VCqU.mft (raw, json)
Hash identifier: NEFxKThq2FxqAvtSe9FebbejXPPu4DAF52B6nrycStM=
Subject key identifier: 7C:6C:36:05:60:FF:C6:0A:4F:BC:8E:89:A6:64:71:B8:D2:43:84:AD
Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Certificate serial: 01987A5214A2C3EDA44BCA2311A77E35054D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
Manifest number: 1241
Signing time: Tue 05 Aug 2025 13:00:56 +0000
Manifest this update: Tue 05 Aug 2025 13:00:56 +0000
Manifest next update: Wed 06 Aug 2025 13:00:56 +0000
Files and hashes: 1: DigqFcGl0VS72ocrNXYHqR-VCqU.crl (hash: xIpleoGAjax4K0Fs4lrqJI1zI7/rFSVN4eLZC1tZpSY=)
2: u3O0A5kbS_BKPuygQ5bEuCuWEmM.roa (hash: EFUICxjgOr4/W3Yre79DXYxTO7h614siVS4H6ARHwaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:14:a2:c3:ed:a4:4b:ca:23:11:a7:7e:35:05:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Validity
Not Before: Aug 5 13:00:56 2025 GMT
Not After : Aug 6 13:00:56 2025 GMT
Subject: CN=7c6c360560ffc60a4fbc8e89a66471b8d24384ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:d2:9c:33:ca:63:9d:b6:b5:c6:24:46:8f:
0d:26:35:7d:e0:12:8e:7d:5f:ed:6b:d9:91:4f:08:
b1:7a:1c:eb:5b:a1:d2:69:c9:55:9b:63:23:99:ee:
21:c0:4e:e5:2c:99:ff:2e:cd:92:b3:e2:68:c2:a6:
fa:f7:8e:43:23:34:2a:10:c4:91:8b:5c:59:81:cd:
01:d7:2b:61:9b:22:f6:8e:72:e0:51:54:32:a5:ed:
f3:db:39:5d:83:8a:51:e8:d6:f5:be:54:18:8e:a7:
07:61:32:94:db:71:c6:5c:59:4f:6a:cc:11:fe:ed:
9c:3b:79:f0:96:2b:e8:cb:69:60:a7:b2:8a:65:c1:
9d:69:0b:2c:19:18:6d:ad:a2:8e:60:cd:28:8c:85:
79:0d:ea:81:57:24:7d:3f:08:ed:9b:2b:da:e7:c5:
e0:f8:ad:67:0a:a8:87:02:ba:6e:75:72:0a:c0:cc:
c5:6e:26:ae:a7:30:f0:2d:23:15:88:88:eb:28:0d:
1a:a9:c7:9b:06:74:bd:58:17:73:cc:7f:9d:25:7b:
f0:f9:87:08:7a:87:13:41:b3:26:38:33:78:2e:ea:
39:80:30:74:c5:52:4c:55:88:d0:ab:62:2e:7b:57:
2e:7c:4d:77:62:e0:5a:4f:a1:f2:18:73:cd:87:0e:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6C:36:05:60:FF:C6:0A:4F:BC:8E:89:A6:64:71:B8:D2:43:84:AD
X509v3 Authority Key Identifier:
keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:94:ed:cc:3b:d5:ba:e9:5b:69:be:1c:1d:eb:95:ac:b6:ca:
07:fe:19:84:43:40:c9:c4:06:2b:2f:3e:90:5f:c1:f1:f8:11:
30:6f:ee:a5:9e:08:51:1a:df:e8:d2:3e:da:84:1e:27:55:23:
73:3b:95:64:d7:22:aa:2d:57:53:8c:0b:c5:ad:75:a5:86:28:
4c:2a:31:68:15:0e:a6:cb:d0:49:ae:6a:41:0a:42:a8:14:d9:
e7:17:70:70:e6:b0:51:94:c5:5d:ba:f6:51:6f:1f:1e:2c:f1:
be:8e:62:73:5f:0a:ae:c7:a9:8f:04:07:1c:20:e7:dd:29:68:
9e:28:6d:43:73:92:e9:8f:5f:8e:32:70:ae:98:e3:8f:9b:99:
d6:f8:5e:3e:5d:df:bb:4e:4c:2c:c9:dd:97:a1:9c:b0:9f:ca:
ae:4f:d5:d4:c8:16:af:9f:7e:55:1d:78:38:73:38:6f:42:82:
c5:b7:ad:b7:a0:5d:5a:9f:66:ba:b7:a7:09:8d:8f:4a:41:4a:
95:33:ef:44:25:54:9c:de:b8:92:b0:e1:45:9d:cc:19:63:43:
8a:d4:ba:ae:fc:11:fa:84:65:66:1f:8e:9f:25:28:cf:88:a0:
b2:a7:d7:60:78:aa:bf:80:21:4c:60:eb:d6:d9:7e:d6:cd:77:
c7:c8:17:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:09:17 2025 by rpki-client