Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
File: DLvQEU2XGWdQ1IxeElbtBVpeniw.mft (raw, json)
Hash identifier: /IkbJYoSQye2jYPQUn0QLbe9Xm6OHArB4guxdEHXklQ=
Subject key identifier: 11:1A:44:35:4A:AB:DB:73:48:AF:21:8C:66:D8:F3:FA:5B:A3:5B:D7
Authority key identifier: 0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
Certificate issuer: /CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Certificate serial: 0198819DB8C1521D431B9CF36A06B82DD413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
Manifest number: 0A76
Signing time: Wed 06 Aug 2025 23:00:53 +0000
Manifest this update: Wed 06 Aug 2025 23:00:53 +0000
Manifest next update: Thu 07 Aug 2025 23:00:53 +0000
Files and hashes: 1: C1pdtFvgr0xoHUm63plkKuj-C_Y.roa (hash: b/y/wC9aBMLG4uCve6DdHlmgdXRsPrspZQT4HGYlIp0=)
2: DLvQEU2XGWdQ1IxeElbtBVpeniw.crl (hash: rOCvPriS/6EsOoSCi/LN7C93r++p7x3xM/a91op9HQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:b8:c1:52:1d:43:1b:9c:f3:6a:06:b8:2d:d4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Validity
Not Before: Aug 6 23:00:53 2025 GMT
Not After : Aug 7 23:00:53 2025 GMT
Subject: CN=111a44354aabdb7348af218c66d8f3fa5ba35bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:ce:6d:0c:ee:ce:13:66:78:88:58:74:ab:
18:5c:c3:13:7c:03:0d:e1:ef:1c:0c:d0:fa:72:ec:
44:60:a6:57:0f:8f:75:f0:ad:f4:fd:db:2e:3f:81:
0c:15:ec:68:27:34:83:86:de:9a:16:c7:11:ac:d3:
5e:f6:bc:be:54:58:1d:63:32:38:f1:00:f9:07:80:
18:2f:41:6b:4b:81:3c:86:0b:96:91:c8:7c:5a:a7:
23:0e:b2:dc:a6:97:94:c6:3b:28:2b:4d:ae:af:88:
b9:76:e0:d0:d1:34:1d:a2:05:4f:26:d9:8e:ac:0f:
d5:13:2b:10:6b:5b:5b:c5:e0:c9:20:b3:b6:8c:12:
eb:ec:3c:df:ed:f7:13:46:45:c9:1e:8b:fe:c9:50:
0d:04:a8:8b:32:fe:c0:15:f1:b8:b6:16:49:07:8a:
d5:17:48:11:00:d2:5a:77:08:c8:0c:d9:1a:19:c1:
d3:1c:93:72:e0:9c:9d:d6:ea:42:22:27:9f:3f:e3:
d6:fc:92:3f:22:22:52:0b:10:31:64:48:09:f0:6b:
e0:01:27:1d:f1:7a:82:6e:b3:ed:3e:7a:82:ba:17:
91:3f:73:82:af:78:a0:96:59:79:54:03:88:d2:c4:
cc:af:48:86:9e:79:2b:2c:62:c6:4a:80:92:c1:74:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:44:35:4A:AB:DB:73:48:AF:21:8C:66:D8:F3:FA:5B:A3:5B:D7
X509v3 Authority Key Identifier:
keyid:0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:41:e5:c0:0e:11:5f:9f:c7:29:81:fd:e7:f3:0c:09:03:a8:
c2:31:6d:7c:66:03:22:da:5f:b9:1b:53:fc:5b:34:db:8f:24:
a6:c3:0a:16:08:43:1d:4e:5a:6d:77:26:95:92:72:8c:2a:3d:
1c:d2:ca:e1:86:9d:67:aa:aa:7a:35:bd:58:11:0f:a7:72:69:
6b:ec:a9:a2:5b:b8:31:3b:9e:be:6f:78:64:29:50:bb:08:b5:
56:95:42:36:83:a5:7d:93:31:3b:42:aa:1c:3c:fc:ad:37:b3:
88:46:17:e6:7f:88:e4:d8:37:24:38:58:60:20:65:45:f0:2e:
9c:57:da:12:c9:4b:f6:be:4e:59:06:74:b2:6d:e4:ec:2c:97:
67:ac:60:71:74:5e:82:47:88:75:e2:57:24:f1:1e:4c:ec:86:
d1:a2:3d:e8:9e:f5:28:50:85:23:d8:c4:23:a9:87:a8:95:cf:
b0:76:ad:b6:bb:29:94:ca:21:91:0b:08:1e:c9:01:eb:1a:20:
cb:f3:c3:a8:51:4f:6a:c2:92:67:df:83:da:e5:08:f8:7c:64:
f1:e1:df:ba:f8:20:a9:42:71:3b:a3:ba:86:3c:fd:fb:17:a8:
8e:84:77:c5:e1:8c:e4:b4:85:3e:df:f3:49:3d:45:f9:00:4f:
bc:15:da:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:03:55 2025 by rpki-client