Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: tk4mhMUxQ0haT3CySViiNTj/Ho7VtXdfGtQEey/LXj4=
Subject key identifier: 80:2E:CE:07:6D:28:0B:BC:D2:0F:0E:C4:95:80:5A:20:07:91:96:76
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 0198820B705AC4FCCAD516F131848F8999F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 157C
Signing time: Thu 07 Aug 2025 01:00:44 +0000
Manifest this update: Thu 07 Aug 2025 01:00:44 +0000
Manifest next update: Fri 08 Aug 2025 01:00:44 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: TKhmIFAsfUyR071BTmWqpW8Qsveql7dH9kzDI6Zo8ds=)
2: UgQOVXjSfDZ0oMmnpF9LnBZc5Iw.roa (hash: EuORew0X+P8iEghXgdkM03dJatTHGRU6W9xGTUJPJEY=)
3: WnLaCz0whNUAj7xt1GXCRyC0ff4.roa (hash: 1NkpD3wTqpaneQCvPoyVPVIPTREHfmPMSbzyzikhuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:70:5a:c4:fc:ca:d5:16:f1:31:84:8f:89:99:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Aug 7 01:00:44 2025 GMT
Not After : Aug 8 01:00:44 2025 GMT
Subject: CN=802ece076d280bbcd20f0ec495805a2007919676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:d2:55:22:96:53:33:c2:66:e1:c0:d7:87:
87:71:0d:2e:fd:d8:9b:e0:15:8d:84:2f:70:db:6f:
d0:e5:d4:08:28:ce:a8:6a:24:be:a3:14:83:90:dd:
3e:89:57:e6:72:6f:71:7a:84:af:f7:30:b5:7d:3e:
f3:03:d5:cc:18:3c:97:65:7a:7b:03:36:29:b2:4b:
f3:b6:82:39:6e:d3:43:ac:2c:f0:41:97:e6:f3:2b:
21:f6:2c:09:40:3e:03:af:04:17:91:6a:58:9c:71:
81:e0:98:d6:56:92:d9:da:2e:39:c0:94:d2:07:5a:
1c:bc:0c:c4:0f:7b:3b:19:ec:3d:7f:62:57:a8:c9:
2e:37:79:84:89:88:ca:55:c5:59:5e:65:82:5c:14:
6d:85:39:fd:c0:96:8e:ec:eb:41:d6:04:b8:59:29:
0a:5d:7a:39:a8:05:cb:81:9d:92:85:eb:d1:4c:cb:
79:e5:30:42:14:db:80:34:dc:84:44:01:07:73:03:
3e:b2:2d:e2:1e:7f:92:39:3f:81:05:72:75:30:cd:
d6:35:eb:14:07:40:c8:41:82:30:be:cc:57:2b:6b:
c3:49:73:87:46:13:3c:34:9a:78:f8:2f:fb:1f:a9:
93:4d:88:be:70:94:84:bc:69:ed:3c:32:f6:48:d0:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2E:CE:07:6D:28:0B:BC:D2:0F:0E:C4:95:80:5A:20:07:91:96:76
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4d:0c:78:3d:1a:b5:90:52:5a:d8:68:52:99:f9:24:cf:36:
fa:63:23:71:0c:d4:7a:60:04:a5:e2:8b:38:70:d6:a4:a7:3c:
fd:20:26:29:52:70:5e:c0:76:d5:96:6a:38:b6:d9:e1:30:59:
cc:04:0a:cb:43:f9:78:63:53:c2:7e:e8:dd:58:36:e5:e6:85:
7b:ec:ce:1e:2c:99:d8:66:bb:fc:7b:45:31:d1:a7:c5:ec:4a:
63:1f:d8:3d:4f:38:c3:e1:98:c9:11:c7:0d:cc:18:55:d3:f1:
1c:b3:7c:ca:27:45:d2:e0:7d:2c:92:41:6f:80:07:9f:9a:84:
7d:35:90:29:39:b0:be:2f:b2:c8:5b:e5:6c:32:27:73:65:92:
a3:90:1b:9b:e5:2d:0f:08:38:5c:fc:73:32:d3:07:1f:6f:a6:
70:ba:72:74:f0:a2:44:7b:83:6c:4b:47:c3:9f:6a:be:78:44:
89:75:c2:2e:0f:20:9e:6f:81:12:c3:b7:b2:08:44:af:6c:4d:
a4:29:1c:bc:fe:eb:cd:5d:3a:50:eb:ee:18:0f:09:06:43:52:
68:2c:32:ee:22:c8:9c:40:c6:97:2a:b3:99:45:9c:58:6c:5f:
7e:0a:df:3b:e7:ad:ba:bc:12:01:45:6b:08:30:d7:e5:16:d7:
2a:72:02:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:11:57 2025 by rpki-client