Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: AmDrLxFG9Bq6bhr4oJi/EN+HForyKApN4i4yPxEAeuM=
Subject key identifier: 80:DC:F5:38:59:A9:97:72:7A:38:86:E7:E3:48:7C:0B:04:BF:75:D0
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 019894B7159AF0B3D3114E17C9E1287DE98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 1519
Signing time: Sun 10 Aug 2025 16:01:23 +0000
Manifest this update: Sun 10 Aug 2025 16:01:23 +0000
Manifest next update: Mon 11 Aug 2025 16:01:23 +0000
Files and hashes: 1: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: HueqZrMJ0gCr51FZO+GvrYMwh8T+4l8WzDbCitwlj30=)
2: TSvZLiAEM2CqBOpzEquX-L_n02A.roa (hash: I0g5fDPCn3RgZfwIeTKeigQ5B1u0G9JlwOBJf1pZ4jg=)
3: ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa (hash: YWkayHgIhYTNLiz4XAeekrNCTOGkXpvO+aHI+JpNUpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:15:9a:f0:b3:d3:11:4e:17:c9:e1:28:7d:e9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Aug 10 16:01:23 2025 GMT
Not After : Aug 11 16:01:23 2025 GMT
Subject: CN=80dcf53859a997727a3886e7e3487c0b04bf75d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:80:95:1b:ed:f6:ae:97:d6:f6:31:96:ac:be:
85:2a:8f:a2:ff:a9:46:8b:1c:49:ec:6f:89:e0:c7:
18:40:e6:1b:ac:be:7d:96:8b:7e:64:72:7a:80:59:
50:d1:df:79:28:96:78:e8:f1:95:12:ac:79:e6:75:
ef:f6:f1:12:b0:7b:fd:8b:36:6b:fb:02:7d:01:cd:
c5:9d:0a:2e:c7:25:8c:46:86:f1:2d:1a:c6:42:5a:
fb:91:41:09:94:c0:d3:5f:69:ff:d4:f7:0d:2a:0f:
66:cf:8f:c0:0e:41:0c:26:5e:21:08:ba:e4:f0:8f:
6c:28:bc:ab:9a:10:94:be:70:f8:22:d7:e7:7b:1c:
3c:47:80:6b:0f:13:80:5f:20:0a:82:1a:f5:4e:f1:
0f:d6:70:bf:81:7c:1a:4e:03:8b:65:e9:41:f6:e6:
e4:8a:a0:ea:cb:aa:6f:5d:6a:d3:98:b9:e8:ee:76:
eb:5e:38:19:a9:76:8f:74:ac:f2:7b:a1:33:e2:0c:
22:b9:56:42:ca:d0:90:71:61:96:32:37:0d:66:10:
a0:40:72:71:45:64:39:ec:22:0c:d6:f8:84:e7:3d:
78:df:f7:bd:e9:29:59:57:65:ea:76:cc:fb:8b:54:
cb:b4:15:cf:31:27:5d:29:b7:f9:74:60:86:e1:7d:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DC:F5:38:59:A9:97:72:7A:38:86:E7:E3:48:7C:0B:04:BF:75:D0
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0c:1e:66:a5:40:b4:4f:62:7f:57:c0:f1:f9:48:88:90:65:
80:a0:76:97:93:65:0a:6f:04:ed:58:5b:95:aa:57:38:1a:01:
58:a5:ed:04:d5:af:b6:fb:e4:ee:38:75:33:e4:e0:b1:82:b9:
17:e9:20:f5:61:77:54:d7:4e:73:ea:8a:c2:75:5a:d5:f0:73:
ff:2a:0a:91:98:ac:1a:e0:02:bd:8f:2b:d3:e3:1a:ce:fe:2c:
02:8b:c0:38:19:db:21:e0:cf:e9:04:d9:ab:cd:44:b9:75:22:
d7:00:c4:fb:0e:b5:f5:a0:19:a0:df:73:c3:e8:0a:e1:45:ea:
e2:31:d2:36:31:48:a0:33:1b:74:91:2d:32:17:32:59:d2:06:
11:e6:1a:99:4e:13:e4:85:14:79:78:74:f7:1d:b7:61:6f:3f:
18:cb:d7:2a:03:dd:3f:0f:ab:02:f9:2e:81:87:88:aa:66:fa:
74:59:43:8b:ed:09:86:b2:91:ae:68:e5:a0:c0:ad:0f:b3:a6:
6c:e0:b5:9c:7c:63:88:2f:43:a8:38:ec:91:f5:4e:81:24:30:
75:f9:08:0b:15:c4:50:2d:57:da:03:24:f0:a1:ee:5d:2f:c6:
13:6f:9b:1c:dd:1b:dc:1c:e5:5d:13:27:9c:17:ad:9f:44:dd:
21:21:67:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:14 2025 by rpki-client