Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File: DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier: VYpBkMmf67r29xz6km9njOyQ8JkblwhpI+nrShlIoCY=
Subject key identifier: D5:CB:7F:11:7D:F3:49:F0:9F:60:2A:83:88:63:22:CF:BE:4F:73:0C
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 0198854346A6676EF83978731942C08E5A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 16:00:35 +0000
Manifest this update: Thu 07 Aug 2025 16:00:35 +0000
Manifest next update: Fri 08 Aug 2025 16:00:35 +0000
Files and hashes: 1: 4PWYJzFLE2aK2EnppYvU-q2XFOY.roa (hash: f33gLiliUjw9+UyIBB1FbTny80dDA5WlmPfCkJepk4k=)
2: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: Fmkbiq+erBGtVHF3w5b9PYeskkUf8Gch0IsM729FTSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:46:a6:67:6e:f8:39:78:73:19:42:c0:8e:5a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: Aug 7 16:00:35 2025 GMT
Not After : Aug 8 16:00:35 2025 GMT
Subject: CN=d5cb7f117df349f09f602a83886322cfbe4f730c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:1c:b8:42:cf:e8:bd:e8:ef:dd:d7:46:90:
6c:7b:89:a2:98:ad:6d:28:90:40:79:8c:cf:30:d5:
05:b9:23:fd:77:2e:16:67:1c:38:fa:e5:62:d9:89:
7c:0e:f4:cc:f9:cc:d6:7d:9a:22:a6:d4:87:82:6c:
aa:9d:5c:9a:b0:94:b8:af:73:87:fe:c2:fe:1a:65:
11:8d:9e:db:dc:b4:1b:eb:19:f2:9b:11:02:42:ed:
c8:2e:e6:14:63:11:de:fa:48:ab:ca:37:6a:11:08:
ea:ca:33:75:4c:d8:38:26:88:4e:be:6a:96:e6:fa:
1d:9e:29:40:56:0f:2c:42:da:e3:dd:79:cb:3d:12:
3a:2f:94:b5:88:ca:30:11:31:c8:86:d7:57:a1:83:
ef:07:c6:d4:6d:1c:1a:f0:3a:ea:40:f3:97:cf:c4:
65:60:94:4e:e6:bf:24:1c:b4:d3:6f:7e:1e:d3:2a:
01:0a:a8:85:e9:a9:d1:fb:d1:45:33:b6:24:ec:8b:
23:e6:5e:0f:68:7a:5d:73:d5:b2:ff:65:6c:f1:21:
30:e0:50:5d:ee:aa:c6:af:6f:59:ca:16:3d:29:da:
28:9f:af:16:49:b5:1a:3a:1c:48:58:29:53:8c:89:
a1:5c:22:40:40:e7:38:be:84:b2:7d:8a:f3:a4:3d:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CB:7F:11:7D:F3:49:F0:9F:60:2A:83:88:63:22:CF:BE:4F:73:0C
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c8:35:06:ba:37:54:78:18:c9:f7:01:38:41:14:31:05:bb:
c6:cd:75:94:87:f6:e6:e1:40:5d:c7:3a:99:90:b3:dd:9c:8f:
b7:56:bb:11:b8:4c:14:a7:5a:2a:11:b2:fb:81:ef:f1:b6:21:
ad:ef:c6:24:2a:1a:64:25:b3:41:9f:f7:f4:53:17:0a:ef:52:
44:4c:70:58:05:9c:05:97:fe:d2:0c:9e:ef:8f:9b:61:da:99:
9b:93:2b:d9:12:f8:cb:67:15:87:48:76:b0:37:3b:bf:f7:6d:
c1:49:72:aa:e8:28:72:41:cb:7c:6c:08:dd:f5:7c:74:28:09:
8e:1b:c9:6b:fa:24:e6:ab:e4:37:a0:5c:11:04:d6:11:4f:68:
c8:2a:0c:13:46:0b:ff:6c:f1:9a:7d:37:77:c2:cb:6e:df:aa:
80:1a:88:f5:53:8c:31:c7:8a:dc:ed:97:48:e7:63:b6:91:3e:
4e:f0:ea:1c:4e:47:23:f0:70:5c:0c:32:28:c3:64:60:26:12:
f1:89:6a:6a:9d:4d:23:ca:49:2a:d2:65:18:c4:bc:46:9b:b3:
6e:d2:3e:2b:76:61:ff:b6:2a:91:1b:89:0c:36:76:cd:bc:5e:
a6:8e:af:fc:01:4d:4a:a8:e3:ee:b9:05:8d:64:08:c3:eb:74:
6f:d0:44:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:12:07 2025 by rpki-client