Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
File: DigOW_CXDHM8w0vBvnkmdZrDHe0.mft (raw, json)
Hash identifier: orIaG5BZfB3emfoJVS8D/4jEINaY24HmtgPNwMslsi0=
Subject key identifier: 5D:DB:DB:90:1F:A1:F7:E1:81:06:39:C4:BE:AB:E4:E7:54:96:11:61
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 01988CFCCA850A5D7B2F52E240ED3104CD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
Manifest number: 133B
Signing time: Sat 09 Aug 2025 04:00:33 +0000
Manifest this update: Sat 09 Aug 2025 04:00:33 +0000
Manifest next update: Sun 10 Aug 2025 04:00:33 +0000
Files and hashes: 1: DigOW_CXDHM8w0vBvnkmdZrDHe0.crl (hash: ZRusHapsEtZOnCJMKjqSgBZf5/OdT5pbxgNQxkIzJq4=)
2: nitfhwT5zdpxb50hXlk4jgWzdQE.roa (hash: Cnmglk4tBEqztiio9IkWbUek+XEbAwr0Bjp+MAHYUSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fc:ca:85:0a:5d:7b:2f:52:e2:40:ed:31:04:cd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: Aug 9 04:00:33 2025 GMT
Not After : Aug 10 04:00:33 2025 GMT
Subject: CN=5ddbdb901fa1f7e1810639c4beabe4e754961161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:2b:8e:47:05:cf:26:34:8a:06:ea:88:3d:
42:7b:53:89:1c:bb:63:07:2b:6c:d3:f1:d1:9a:a2:
7c:d7:b9:a7:74:54:62:06:92:0b:16:5f:ac:75:5d:
b5:50:5b:ac:ef:2c:1c:9f:7c:86:04:3e:41:d2:bc:
90:e5:c6:3b:19:d2:59:7e:64:c6:5d:47:b5:da:76:
92:d6:11:d6:e3:1b:0b:53:94:d6:06:83:e9:19:b3:
87:34:76:b7:9e:9c:5e:00:0d:02:f9:40:8a:cd:8c:
29:89:2a:c9:92:c7:a7:be:3b:3b:d2:4e:2f:60:72:
18:c4:a6:03:1c:4d:7b:69:c9:56:29:49:c9:ef:e0:
58:6b:de:11:15:3c:74:fa:e7:c8:dc:e9:9e:3b:b1:
65:79:bd:1e:b4:aa:bd:d9:3b:2e:8c:e2:fc:6f:45:
72:95:81:7f:3c:4e:fa:c6:2b:df:fa:3c:b8:b8:a4:
c9:79:ff:2c:b2:99:d7:c3:87:f7:ff:67:80:ee:88:
bd:d7:47:98:1a:a6:46:f4:94:a1:bb:3c:8d:79:0c:
dc:6f:ff:1d:cc:4c:9c:3c:19:91:e3:2f:6d:b2:9c:
61:63:80:07:da:f4:2d:23:55:67:4b:b0:e1:70:f7:
a4:c4:14:2b:90:5e:d5:de:13:6d:f5:fe:b9:ba:ad:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DB:DB:90:1F:A1:F7:E1:81:06:39:C4:BE:AB:E4:E7:54:96:11:61
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:16:5d:ec:04:5a:30:0e:55:66:05:26:4b:b0:92:42:66:9d:
a9:99:e1:6c:29:59:7c:2a:1a:20:70:d2:69:fe:ec:ec:ef:af:
1b:b5:6d:c9:ea:43:f5:28:d3:a6:1b:05:80:0a:cd:42:f2:d8:
33:4c:98:5f:50:9f:62:2b:d9:c0:94:65:23:4d:04:b3:eb:e7:
1f:b7:33:38:06:74:20:6c:2f:57:da:48:26:b5:5a:08:08:95:
53:8c:3d:68:72:f8:11:02:75:f3:9b:d6:dd:2c:23:5e:8f:4e:
e1:77:2f:33:d0:a9:34:9d:e4:0b:b0:97:e2:21:2d:78:e7:b2:
6d:10:f8:01:96:89:bd:01:33:6e:e7:2f:63:6f:24:b4:42:34:
1a:80:4b:08:60:46:d0:78:a8:fc:b5:62:d0:dd:73:72:5a:a6:
1d:e7:e0:d7:f4:e4:98:02:63:3a:62:bb:5f:11:8a:54:88:7b:
50:91:de:50:40:b6:c8:7a:a8:ce:45:07:27:63:9d:70:f7:06:
e6:ef:6d:f2:42:cc:47:51:33:2b:aa:d0:04:35:18:9f:a1:a7:
a5:5a:61:96:a3:d7:c2:e9:35:72:47:cf:18:bf:1b:ed:6d:eb:
c6:c4:5d:07:3f:9f:3a:09:95:fd:88:06:20:e2:04:ac:5e:a3:
c1:e8:60:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:09 2025 by rpki-client