Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: B5AGFsiAjLFyeHYoLUXNX9iyUMROby2VYcZUq8gN9pA=
Subject key identifier: 78:2E:C5:02:79:F9:B0:60:07:99:CB:6F:A7:2A:57:95:CD:44:7F:31
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 01987450C778E3B007749DF834742C51C8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 09:01:47 +0000
Manifest this update: Mon 04 Aug 2025 09:01:47 +0000
Manifest next update: Tue 05 Aug 2025 09:01:47 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: TWEEO4lsWDubo9/oVOuZDj2glL9JOackOI0qbArYhDo=)
2: dl4ybKFr-mjNJ3kV-IfkyZfwx44.roa (hash: /jV0BskL+oSsTISEbyqI8M7CEUXp7IlGvyGOrlDZbmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:c7:78:e3:b0:07:74:9d:f8:34:74:2c:51:c8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Aug 4 09:01:47 2025 GMT
Not After : Aug 5 09:01:47 2025 GMT
Subject: CN=782ec50279f9b0600799cb6fa72a5795cd447f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:02:20:0c:31:d0:d5:b2:c2:51:85:61:f1:
47:b7:29:65:c6:6b:3b:0c:b8:78:68:0e:f9:05:4e:
f1:22:4f:be:60:ad:79:2f:ed:27:ab:c9:68:eb:4f:
c3:6c:ee:91:0b:fb:12:10:43:b9:98:b6:8c:dd:0a:
ef:57:42:84:90:31:8d:fc:37:48:a4:e9:0e:eb:1e:
a9:e3:ff:d1:91:e0:5d:8d:9e:88:40:0c:29:16:6d:
a1:74:d0:c4:b6:7e:28:65:1c:8e:e7:25:be:28:95:
43:21:e9:8d:4e:f4:73:61:b3:a5:3c:eb:c0:00:8a:
36:78:58:a7:1b:06:66:81:f8:86:3b:0a:65:24:cb:
11:d0:59:0e:6e:84:78:c4:dc:6a:16:01:97:7b:38:
a8:52:20:b1:bd:bb:b1:64:35:fd:42:6c:7e:da:58:
01:ee:8f:b5:81:a6:fd:61:b8:72:18:de:94:d8:03:
d0:65:01:97:67:6f:a6:65:7d:ce:bc:02:62:fa:e6:
ed:07:b2:6f:d5:39:36:61:06:92:69:63:f1:9f:59:
59:48:43:bd:7f:72:8e:64:0d:d4:d0:ff:58:aa:df:
9c:b1:d1:fa:4d:02:ab:69:f9:df:19:49:60:7c:17:
38:a0:13:2a:f9:ae:43:4e:ef:e9:48:6c:e6:c0:06:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2E:C5:02:79:F9:B0:60:07:99:CB:6F:A7:2A:57:95:CD:44:7F:31
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bc:e2:e0:04:c5:70:2c:51:3a:dd:f4:ec:a1:d5:8d:3d:fa:
89:7c:a8:16:33:96:bd:b4:8c:aa:5a:04:b1:f5:0a:10:a4:89:
1f:c2:7c:9a:ee:f8:01:38:3e:5f:ad:6a:db:f1:c3:01:a0:29:
ef:c7:e4:1f:52:e3:b2:5a:1d:21:c9:a9:d4:45:dd:a9:1a:86:
81:a0:3e:48:20:29:a1:57:79:64:ce:3c:8b:de:39:ec:f4:45:
1c:a3:cb:cc:21:fe:87:fa:9c:78:e6:48:52:52:f5:a6:76:91:
3b:43:84:c5:27:2f:21:ea:2e:2b:57:66:b0:08:23:db:09:f5:
77:3f:ab:70:2e:c9:1d:ea:c9:a2:a5:33:21:9f:60:e3:bb:d3:
f4:fd:a1:05:2b:a5:c4:cc:cc:9f:7e:84:a8:a8:f2:3c:2e:07:
82:57:82:90:5f:2f:d8:29:cc:db:12:41:50:5a:b7:1a:eb:6c:
ea:52:b2:a4:0b:62:f0:b8:34:0e:87:db:81:b3:b6:6d:c5:5a:
7b:62:99:cd:fb:78:f2:be:81:4a:c2:a9:4f:dc:ab:c8:42:9b:
5d:ea:64:81:98:d4:b1:2d:95:4d:f4:b7:a5:f0:4a:7b:e3:46:
92:9f:bf:5c:9c:02:b8:00:1c:a2:d1:2b:1b:aa:e1:28:d3:23:
fa:ad:5b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:12:30 2025 by rpki-client