Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: mUQV5j3ld3VDvGzMzTBPeOsfOw+40GqP9FcaVJJHfhQ=
Subject key identifier: BA:5D:D2:42:AD:61:83:C1:5E:3B:9C:25:5A:02:1A:2F:B3:35:F1:AF
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 0198819DA6100F77DE8375EC214B43B320CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 23:00:49 +0000
Manifest this update: Wed 06 Aug 2025 23:00:49 +0000
Manifest next update: Thu 07 Aug 2025 23:00:49 +0000
Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: 896tt/0icl7MSy8B+Dds41K4f0hf2JjsuZnirsVkVHE=)
2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=)
3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:a6:10:0f:77:de:83:75:ec:21:4b:43:b3:20:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Aug 6 23:00:49 2025 GMT
Not After : Aug 7 23:00:49 2025 GMT
Subject: CN=ba5dd242ad6183c15e3b9c255a021a2fb335f1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:91:f8:59:d8:3b:85:0d:9f:60:dc:76:ee:
34:f1:1a:3f:b2:cb:9c:41:b8:98:d5:43:20:01:3f:
0c:b2:c4:f0:8d:88:f0:0c:dc:bc:7a:50:b8:7b:f3:
65:62:55:15:39:8b:ef:c4:e6:72:c0:b4:f8:25:98:
c0:47:65:b7:a4:bb:2e:06:ed:8d:a9:63:a8:1e:6d:
ea:20:48:32:e9:e2:96:14:81:f7:3c:b0:cf:b9:37:
46:1f:e4:e7:25:da:53:0d:03:d3:ca:73:0a:d1:08:
50:c8:9c:5c:27:15:07:26:3a:fd:57:40:6c:15:a5:
f7:d6:ca:ab:4b:33:3b:ff:27:66:3a:4a:c2:8c:fd:
81:14:cd:14:cc:a8:03:99:ea:a6:e9:45:af:a5:17:
d4:64:2a:35:aa:47:a6:9a:8c:61:81:a2:b0:72:bf:
b0:16:3b:26:a1:f7:1c:ee:8f:71:fe:11:cc:cc:97:
ac:c9:0f:40:b6:01:3b:76:c3:4a:e9:91:ed:6a:cc:
21:cc:70:77:92:80:60:e6:ac:54:2f:50:8b:ec:54:
da:ee:03:96:48:1f:7f:eb:ec:0c:be:80:dd:8a:ea:
53:84:5f:f2:84:c7:97:ef:7b:ca:59:52:01:70:d9:
53:a9:f9:ef:ae:a9:ed:69:0b:79:09:d7:22:64:67:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5D:D2:42:AD:61:83:C1:5E:3B:9C:25:5A:02:1A:2F:B3:35:F1:AF
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e1:ac:0b:ee:06:d6:f9:24:ec:a1:e3:82:0f:06:e3:62:73:
52:d6:21:29:dc:54:77:fb:ff:b3:63:2e:12:b4:03:c2:01:f2:
63:8e:4a:22:42:8a:c6:a3:7a:ed:92:32:9b:2f:88:83:73:e5:
49:95:cb:9a:8d:59:7c:d8:76:ca:56:42:71:14:3c:01:41:57:
a5:0c:69:e7:17:fb:76:64:e2:d0:b4:b9:28:9d:08:0c:47:70:
f9:06:62:7f:c8:25:dc:21:ef:d1:f3:b3:a0:4f:83:aa:5e:7e:
22:4a:aa:e2:b0:dc:72:d7:44:79:8f:df:14:4f:5b:45:b7:64:
38:d0:f3:e5:33:a2:b0:70:46:89:58:10:19:51:e6:54:92:c2:
91:d0:c4:e9:c7:dd:d8:fa:d4:85:ff:c4:19:27:6d:3e:fb:db:
ea:5a:79:fe:e1:65:00:3f:5e:5c:57:f1:d6:84:3f:df:bd:da:
22:67:72:5c:d5:81:29:35:f9:0c:fd:58:9d:f1:1b:3b:01:2d:
1b:73:0f:67:37:56:ac:6b:6b:a6:55:84:f3:6f:b1:07:af:49:
19:83:32:5f:fa:fd:32:dd:33:01:5f:c9:e1:18:08:f2:ee:70:
87:57:ce:98:9e:74:92:c7:af:b8:a3:69:b3:0e:90:ba:b3:3e:
ae:4e:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:11:32 2025 by rpki-client