Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier: 1z4UPhavY/sTP1KgAubU1UkzxRJHaOdFDQOK28ySR3I=
Subject key identifier: 04:91:2E:9B:86:F9:1C:48:F0:64:D8:DF:C6:A1:E8:07:89:58:BF:7A
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 019873066D34B5A911A32378C4FB72D7A0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number: 15A7
Signing time: Mon 04 Aug 2025 03:00:57 +0000
Manifest this update: Mon 04 Aug 2025 03:00:57 +0000
Manifest next update: Tue 05 Aug 2025 03:00:57 +0000
Files and hashes: 1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: 0px4UT5KNaYdMWAfJzQMkNcLtXs4qq/cHlI2sPvwNJ0=)
2: ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa (hash: fk95k0odtKaBXDPO6LkbFL/8lMCWYiJ12TM7p4C2lgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:6d:34:b5:a9:11:a3:23:78:c4:fb:72:d7:a0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Aug 4 03:00:57 2025 GMT
Not After : Aug 5 03:00:57 2025 GMT
Subject: CN=04912e9b86f91c48f064d8dfc6a1e8078958bf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:f4:68:ba:c9:59:dd:6e:d1:cf:be:01:f8:
c5:d7:b2:ba:dc:ca:3f:6c:c9:b7:a6:38:78:f0:d0:
21:d7:d0:29:79:06:83:91:14:3b:1a:7c:52:d7:6d:
d1:b3:57:24:78:ad:f6:6a:9e:de:6e:d9:1b:be:e5:
50:da:87:c6:cc:6c:73:ed:0b:dc:9f:e5:87:cb:ef:
80:80:73:2d:d2:67:db:d0:33:7f:3e:eb:f8:e6:39:
fd:7b:4c:d2:08:00:65:9f:33:9f:2a:22:f1:d0:5b:
f6:6d:8c:9e:58:9f:5e:71:50:29:df:a2:53:67:c2:
4e:9d:fe:80:cd:c4:b7:ca:13:7d:c7:84:e3:54:48:
0b:f2:fd:a6:4b:de:fe:11:3f:d7:1b:c5:2b:e9:7f:
01:14:99:f4:b0:c6:cd:b3:93:6f:72:5e:26:a5:30:
83:bf:e1:91:17:fd:8f:35:77:1c:0b:33:7d:58:17:
df:c2:2c:d0:7a:28:c7:c4:8a:dc:1a:b3:9e:2a:0d:
d6:6d:4c:e6:72:02:ff:61:06:c3:76:10:6e:7f:3f:
97:44:d5:b5:39:0c:a7:97:38:51:cc:3e:0a:de:af:
09:33:45:b0:aa:eb:0f:f2:b3:2d:a5:40:9c:72:d5:
80:d2:d4:9c:08:63:bd:08:4a:4e:87:51:86:a4:bc:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:91:2E:9B:86:F9:1C:48:F0:64:D8:DF:C6:A1:E8:07:89:58:BF:7A
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:56:25:44:51:6d:98:4b:f7:66:13:89:54:a6:aa:d5:9e:05:
8e:1e:d4:0c:d3:33:bd:6c:78:ca:a2:49:cd:76:b5:8b:af:ef:
8c:ba:7a:bb:a1:9e:3e:c1:d5:be:71:32:93:ba:77:26:ee:f1:
4f:44:8c:56:c3:6d:75:a8:06:bb:1d:41:e3:7f:ed:12:34:f0:
4d:c6:58:e7:e0:7a:d3:c6:fc:a2:a5:a8:96:f6:89:1d:5e:4d:
50:a4:9e:8d:0f:ad:be:d3:39:cd:6f:48:da:d6:80:85:9f:9d:
00:a6:ea:b4:71:b1:cf:69:ed:d5:30:2c:2a:31:7c:44:07:9a:
2f:36:86:48:41:77:ec:22:bd:4f:85:57:61:be:04:3e:9a:93:
0e:31:52:d1:bf:5e:a9:4a:f2:75:dc:ec:56:33:90:7b:f0:b0:
0a:35:12:44:33:78:40:f1:3d:49:5e:6f:44:d3:ad:83:9e:f6:
83:83:8d:ef:bd:68:7c:3d:07:5a:25:2c:1a:f7:26:76:3b:6f:
bd:5b:15:b3:16:e5:b9:64:a1:e1:40:e1:48:02:6e:70:b3:1d:
18:37:3b:1b:9c:01:8b:5a:25:d8:ec:0f:f7:ea:f4:9f:da:69:
07:e5:f7:a7:07:54:42:eb:61:6e:f6:79:8e:7e:6a:b0:45:3b:
ec:a3:4f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:00 2025 by rpki-client