Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: Le/miY60bf2WY+R25PSOlFxaD8expMl/3BvvUiE5f0Y=
Subject key identifier: 38:23:26:8D:3A:83:CD:AC:43:2C:49:10:5F:98:CA:8A:9F:8C:EC:F6
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 01987E664C048FEBC820BC270B69CF8057A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 08:01:29 +0000
Manifest this update: Wed 06 Aug 2025 08:01:29 +0000
Manifest next update: Thu 07 Aug 2025 08:01:29 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: pVgB0JF/5n8Mj4mF79N0aHAcL8QZDlMH6QGyELDMDkQ=)
2: Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa (hash: yNGOiWMyz1u0T1szDPmkVxet3IhLc4ljiBf05yJrLuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:4c:04:8f:eb:c8:20:bc:27:0b:69:cf:80:57:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Aug 6 08:01:29 2025 GMT
Not After : Aug 7 08:01:29 2025 GMT
Subject: CN=3823268d3a83cdac432c49105f98ca8a9f8cecf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:c7:80:3d:38:43:98:ef:2a:f7:aa:d9:73:
0c:b1:15:a5:18:59:9c:53:8b:93:e3:22:55:92:b6:
1d:e4:b0:55:d3:08:1a:f9:2d:a0:d1:6e:2a:29:60:
0a:e7:66:b1:58:a5:24:da:ed:1a:2e:29:fd:91:13:
06:a7:03:c3:11:d1:e9:2e:99:33:55:2e:41:01:79:
73:01:1a:0a:70:6b:da:35:d6:75:b5:9c:b6:10:b1:
67:37:d8:21:99:1b:3a:7c:c7:dc:af:2e:62:43:c2:
ee:95:97:85:38:88:31:d4:6b:43:7f:93:1c:a1:63:
7d:d1:8a:d9:ca:1f:98:12:3e:4a:8f:5d:76:69:7a:
a8:7e:ca:b5:14:1b:2f:36:c2:d5:00:d1:13:7b:69:
d6:b1:c2:e5:fa:99:f2:26:ad:71:ef:52:2a:04:05:
19:76:b7:e6:44:2f:6a:03:36:c5:f5:c5:18:30:4e:
11:fe:8c:37:50:54:b9:96:06:ad:fa:6d:70:ad:91:
55:39:af:1f:b7:59:13:d6:a7:76:1a:7a:c8:88:2a:
dc:64:78:0e:26:fa:61:ac:a5:94:ed:bb:4e:61:40:
19:91:f6:dd:cd:b0:98:30:85:e7:c8:e9:ba:85:02:
9d:00:a5:b3:03:f6:ab:3f:77:5c:bb:9f:41:45:55:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:23:26:8D:3A:83:CD:AC:43:2C:49:10:5F:98:CA:8A:9F:8C:EC:F6
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ab:72:9a:97:ee:1f:37:77:06:0c:ef:9f:2c:7e:28:3f:de:
ed:f2:31:bd:40:a3:23:8c:09:49:35:37:06:4a:12:88:67:8a:
ba:0d:ad:1d:51:3a:72:c1:38:6b:b5:d2:2c:b8:d7:5d:aa:41:
2a:93:49:e0:db:34:28:35:4b:71:b3:b0:d7:a7:57:f1:14:0d:
bf:87:3d:d1:76:bd:5c:35:56:d4:88:e3:81:e4:2f:7c:f2:04:
a8:9e:63:a0:ce:a1:12:d6:b7:8f:d6:5d:67:db:32:08:3f:89:
fb:f5:22:36:8d:ee:e1:f7:a2:64:8c:c3:43:fa:6a:97:ac:3c:
d2:25:e5:06:17:d0:5e:7b:8b:af:4c:2b:4b:80:57:e7:8a:85:
b9:cd:d7:10:dc:b4:d8:0c:0f:d9:8b:0e:34:ca:48:4f:25:ec:
50:f7:01:64:d8:eb:17:f4:d1:48:52:f9:7c:ee:53:20:5f:df:
fb:9c:d0:f8:ea:ac:27:63:d0:72:05:9d:c5:3b:b3:41:08:7a:
1d:fb:63:9a:68:5d:30:7f:5e:1f:ad:08:fd:fc:d2:20:c2:ca:
eb:be:f0:19:f9:bb:6f:e3:4a:1f:ce:20:94:49:c6:b7:34:00:
ee:59:bf:b5:89:62:e8:24:73:2b:d1:74:4b:d2:94:3c:85:57:
2a:4a:d3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:21:16 2025 by rpki-client