Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
File: DspuBsaCS9G4ERg-Dhf6GUltJhw.mft (raw, json)
Hash identifier: mRky7zNQeueNJsiIIxxz0r5oOq+nMwp5l2KsMK2YZw8=
Subject key identifier: B7:50:AA:C8:C6:4E:F7:1D:CC:D8:BF:F5:B3:22:B4:D1:AA:07:1B:AB
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 0198744FC887667630285606FCEAB15E34BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
Manifest number: 0E0A
Signing time: Mon 04 Aug 2025 09:00:42 +0000
Manifest this update: Mon 04 Aug 2025 09:00:42 +0000
Manifest next update: Tue 05 Aug 2025 09:00:42 +0000
Files and hashes: 1: DspuBsaCS9G4ERg-Dhf6GUltJhw.crl (hash: cI6ogqK9YUmhLuYubUbUD0dNDH66y6zMbEjdPT2f2Jw=)
2: NfxOkyabvxkDjJyXjcgpTv_relY.roa (hash: gFCHNUeKHs4QF0iUA6YO68TkrbI25pBG+SYBY+DhWPg=)
3: x5OcpBtDjdmsNegcpqKRcYGfe4I.roa (hash: tztbQVf1Csx2bxGYr7VD6e2RtMD/c7biQ+Jk1Ftm9xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:c8:87:66:76:30:28:56:06:fc:ea:b1:5e:34:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Aug 4 09:00:42 2025 GMT
Not After : Aug 5 09:00:42 2025 GMT
Subject: CN=b750aac8c64ef71dccd8bff5b322b4d1aa071bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:a4:e2:e5:46:d0:e2:a1:82:13:33:ab:71:
10:01:18:68:e6:78:40:04:a0:37:32:a3:19:8c:03:
36:c1:69:48:a9:aa:89:8e:5b:0b:3a:e1:62:ec:b0:
74:92:46:79:bd:95:03:12:cf:f1:d7:3e:b4:20:e5:
5e:21:66:17:b3:15:b0:4a:09:eb:d5:79:5b:f8:31:
9b:73:ae:7e:ca:a5:ac:d1:64:62:48:82:40:bc:b0:
7b:46:00:12:c4:1d:28:97:dd:58:b4:15:49:0b:5d:
a8:ce:f1:40:fe:cf:c5:7e:ce:66:a4:5b:f1:64:4c:
d5:a7:c0:f3:e8:8c:19:28:9a:b4:e5:20:dd:59:c8:
f6:92:2e:b6:94:b7:ac:77:43:c3:bc:3e:fe:a7:29:
30:50:ad:7a:54:f5:8a:f5:a1:c2:dd:3e:a2:4d:59:
f8:92:0f:21:3d:4d:58:06:88:9e:9e:57:dc:ce:42:
8b:41:9c:7b:81:2a:1e:c7:f6:41:95:8b:fe:c7:e1:
6e:05:66:ed:75:4d:04:76:d1:df:3a:b6:42:16:55:
07:de:7d:41:9c:eb:33:2d:cb:27:c0:71:65:8f:9b:
f5:cb:30:eb:cf:9f:64:a4:e6:70:8e:23:2a:38:71:
55:c0:c1:7a:86:d4:39:cd:b7:ac:8f:c7:89:a3:6b:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:AA:C8:C6:4E:F7:1D:CC:D8:BF:F5:B3:22:B4:D1:AA:07:1B:AB
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:29:ab:b4:8a:a5:d9:c9:1f:df:2e:a2:13:28:e3:5d:34:73:
1c:eb:54:6f:e8:22:b6:17:dc:be:21:97:03:2b:2e:11:7e:71:
b4:c6:a4:81:5d:6c:41:24:ee:78:9b:d9:1c:f4:4c:c6:da:57:
04:ef:ea:f4:2f:7a:6e:87:0b:00:81:0f:1d:6d:c2:96:dc:80:
90:35:0a:91:d4:82:91:8d:5a:64:73:fe:4d:c8:e2:57:26:6b:
81:00:75:2d:66:d1:c0:bf:71:7d:5a:81:7b:de:1f:d4:f9:7b:
84:e5:ef:c9:5b:1f:08:3e:24:dc:bb:87:79:ae:8e:4b:a5:af:
79:4a:c4:16:8c:89:5d:e0:20:f8:49:78:06:e2:9f:0d:b3:71:
c9:ec:25:64:e3:72:5d:66:e7:99:5a:45:ab:3c:81:07:d5:b5:
51:4e:d2:d3:c7:c2:99:c6:d8:d2:2f:c9:6f:a5:e6:8e:12:b2:
f6:d2:36:97:5f:88:c1:48:54:8a:88:44:7e:e0:8f:4f:94:3f:
be:2a:ce:9f:2a:50:f0:c0:e5:64:a8:91:b2:82:b7:c4:14:d6:
70:b9:d3:d0:30:84:ea:c6:7f:14:b2:ee:61:18:09:ca:f6:62:
53:51:f5:2c:45:b1:bf:1e:29:e2:56:90:62:96:33:2e:c1:85:
a3:0a:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:53 2025 by rpki-client