Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: czyHEpTIjLevhUIChHgIBOOHv3arUvYzNrZ4PozySkQ=
Subject key identifier: 11:58:0E:C5:69:A5:48:3A:6A:0A:D8:43:C0:BD:16:AD:65:36:B8:FE
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 019874869B0E178D83B417CD8EDD4CDFB113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 10:00:35 +0000
Manifest this update: Mon 04 Aug 2025 10:00:35 +0000
Manifest next update: Tue 05 Aug 2025 10:00:35 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: auHuse+8s/xpnh2UIeGrjGf3RBWuf1olGfQlHect+P8=)
2: G0J3ZwqY7nqQ1F-r-kfCdSWuyO4.roa (hash: +njzM6YBvg7QKHzm9fDQxiSdZRBXgF7BQneYn5PkN18=)
3: zYDOCeKC7kKgpKbk0isuZ6zgxdU.roa (hash: w347S4U24N5+dIdmg0/S6hyDG1PqUwaZbQe5AD4eTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:9b:0e:17:8d:83:b4:17:cd:8e:dd:4c:df:b1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Aug 4 10:00:35 2025 GMT
Not After : Aug 5 10:00:35 2025 GMT
Subject: CN=11580ec569a5483a6a0ad843c0bd16ad6536b8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:3c:d9:1a:75:b8:40:13:44:33:be:75:74:
eb:07:9e:b4:27:ac:3c:30:7e:9e:17:5a:a6:c6:94:
49:12:9c:e1:a5:d7:29:28:3d:f3:64:bc:0f:ce:4f:
a3:d9:30:6b:5f:6b:0d:a4:67:98:16:91:52:db:55:
87:87:fc:a2:77:bf:6b:4a:31:f8:59:10:96:80:89:
1f:47:26:9c:c3:80:30:52:b8:a3:31:18:6e:2b:e5:
aa:a8:48:a3:76:10:02:9e:da:6e:b8:ed:4c:09:d0:
0a:9e:fa:6c:b6:98:44:90:85:d6:fd:a7:f8:82:cf:
71:d8:72:37:ff:bc:ec:d3:aa:01:22:da:8d:97:ca:
4a:ff:a5:bd:5c:fe:85:e1:af:e9:83:96:04:90:f5:
c1:14:17:46:a8:4c:ab:16:73:77:f0:5b:a1:18:ed:
0e:29:f2:01:95:03:76:18:ec:15:54:13:dd:b1:dc:
fe:8e:f4:fb:80:f1:0a:a5:04:08:9c:1b:03:27:a1:
dd:28:e8:65:9b:ec:b9:72:bc:a8:3b:43:c0:15:95:
8b:0b:ec:9d:b1:d4:ca:2e:7d:ac:a0:50:ab:21:a1:
ef:15:fc:04:48:e2:02:a9:86:3e:cb:3e:70:d5:a2:
6e:ad:f8:0a:34:8b:c2:eb:08:b4:8c:13:b9:af:5d:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:58:0E:C5:69:A5:48:3A:6A:0A:D8:43:C0:BD:16:AD:65:36:B8:FE
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5f:1d:a3:9e:bc:29:59:93:38:06:3f:f7:93:2a:29:3f:98:
06:90:4e:3f:1c:fc:ed:df:74:8d:e2:e5:f5:8b:f8:f4:30:ea:
17:03:67:4d:c8:36:64:4d:0c:ce:be:96:e2:ab:bc:ee:96:b4:
79:fb:77:61:12:7f:34:b1:ef:21:d3:db:70:93:09:70:f7:db:
97:07:06:c2:be:29:ee:eb:70:27:0a:b6:16:4f:21:d7:6c:71:
06:2d:59:df:ed:98:db:1c:b3:8e:76:9e:6e:3f:22:89:b5:e3:
c7:4d:1c:49:a0:88:95:20:ca:22:71:ac:96:a6:ae:6f:c4:e4:
02:d4:a1:49:e0:db:1a:45:0e:1e:1a:43:72:e6:10:75:bc:cc:
9b:11:22:58:08:51:53:59:b0:5a:c1:e8:fb:9c:83:a3:7d:f7:
71:80:b9:e7:b5:1b:4d:e7:5a:89:a5:49:42:86:1a:5d:db:5e:
c1:a3:f3:9c:76:dd:5b:e5:01:7e:d5:6b:bb:82:3b:b6:05:fd:
c5:4d:97:59:e0:12:5a:c1:0e:65:60:a1:43:1b:96:ce:68:97:
7d:5c:04:2b:00:b2:b8:b6:51:e4:3d:e1:ba:94:1c:ea:15:1e:
55:1f:c4:3d:a1:11:17:ee:50:64:d9:77:35:48:88:49:98:bc:
d8:2e:2a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:45 2025 by rpki-client