Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
File: DTIXImHJUJ5XNSE3ugGSqEhrb90.mft (raw, json)
Hash identifier: AwpHT3wgFVvCgeJZpU/mc+/keL+9YUdYQR7aW1Yiz/Y=
Subject key identifier: 5A:7D:BF:D2:9F:72:82:9D:45:27:A5:99:D2:CF:23:31:4D:D1:6E:31
Authority key identifier: 0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
Certificate issuer: /CN=0d32172261c9509e57352137ba0192a8486b6fdd
Certificate serial: 0198745072E74971CE434188C2A428542227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
Manifest number: 0700
Signing time: Mon 04 Aug 2025 09:01:25 +0000
Manifest this update: Mon 04 Aug 2025 09:01:25 +0000
Manifest next update: Tue 05 Aug 2025 09:01:25 +0000
Files and hashes: 1: DTIXImHJUJ5XNSE3ugGSqEhrb90.crl (hash: 8fuBmyr2Su37YHWseLH4a0CU5K7ldOooUaqIR4AQQLk=)
2: fjriIHG0K5ESLdXlGMzPccy1eWc.roa (hash: 8Yi5eFrLfWuilXieuc7JFFDe1Ore62ncPRyz11+p5yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:72:e7:49:71:ce:43:41:88:c2:a4:28:54:22:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d32172261c9509e57352137ba0192a8486b6fdd
Validity
Not Before: Aug 4 09:01:25 2025 GMT
Not After : Aug 5 09:01:25 2025 GMT
Subject: CN=5a7dbfd29f72829d4527a599d2cf23314dd16e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:15:04:40:80:f1:d7:14:ac:42:0d:6b:8b:
c9:02:b1:29:bf:28:24:40:1f:96:3a:47:91:fb:5f:
88:91:25:17:1b:cd:80:7b:1d:5b:84:b7:a6:5a:28:
bd:86:4b:4f:d3:28:1a:81:ad:a8:09:27:37:8e:8a:
8f:73:0e:b5:50:4b:ba:69:04:84:3c:e4:5b:e1:d9:
f4:2f:5f:f9:c6:b1:c5:b3:81:a5:3b:73:b2:df:c8:
b2:e8:b4:87:7c:6e:58:d1:b2:ac:89:57:2a:87:ec:
63:cc:70:1f:2f:9f:cf:ea:83:d2:b5:ba:8d:2b:08:
1c:4f:68:f3:b9:05:16:bc:a4:a3:ff:92:ac:b6:79:
18:05:c9:5b:d5:97:78:68:5b:48:5b:48:63:11:06:
20:df:07:11:b9:a2:6c:93:f3:0c:44:cf:79:21:29:
9c:97:f3:41:b6:55:92:09:71:a6:53:f9:b1:a4:cb:
c7:59:b1:10:14:75:04:36:60:50:46:5f:8a:ef:d3:
44:20:67:07:28:f5:a6:06:18:63:e2:33:49:11:89:
71:92:e8:83:38:f0:b3:7e:ff:e5:0b:f5:f4:b8:e7:
c2:7d:99:c8:f1:9f:94:2a:84:48:49:ec:89:5b:18:
f0:b0:9a:70:19:79:09:a4:fd:e9:4c:c9:bc:7a:72:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7D:BF:D2:9F:72:82:9D:45:27:A5:99:D2:CF:23:31:4D:D1:6E:31
X509v3 Authority Key Identifier:
keyid:0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:44:e6:3a:28:71:fe:6d:90:e0:39:82:aa:44:b2:c1:1f:f2:
db:c9:89:c2:22:f3:b3:87:e8:d2:c2:2d:41:42:ef:d5:00:17:
0b:b9:b7:2e:0c:87:41:54:e0:c0:42:87:4d:24:91:b1:60:4b:
24:19:42:59:b5:32:41:9e:51:63:7b:18:c3:5c:0b:49:4b:22:
1d:57:29:f0:78:7a:51:7d:7a:7a:45:f9:76:12:0c:b1:ee:3b:
d8:14:ff:df:66:45:68:63:8a:74:b3:2b:d9:f8:e0:aa:9a:d7:
63:4d:c5:9c:8d:f1:e4:0b:87:ec:83:a6:0b:34:79:3c:48:90:
3f:2b:15:4e:d9:b2:ea:b1:72:d7:eb:c8:1e:ea:e9:14:23:4d:
bb:d8:19:46:ae:f3:99:f6:a9:fd:2d:4e:b6:4b:f5:1b:92:fc:
73:e1:c5:7f:4e:e9:03:a1:16:24:29:68:74:44:79:ad:d1:43:
56:7c:25:0d:8f:1b:17:ea:dd:ea:d9:a2:c4:99:92:0b:30:4a:
95:7b:55:b7:28:76:a8:60:7e:a3:be:b1:53:fe:72:48:c0:d3:
91:c0:21:b5:15:91:aa:3d:14:7c:3d:9d:b6:6d:6a:08:2a:d0:
5b:c2:b7:ef:65:6b:07:b3:73:2c:05:58:9d:44:4a:de:ae:82:
35:61:02:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:04 2025 by rpki-client