Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: ySIs85IaNPl/RjnXHKdnjz+DrEXMTJIynkutklGEGOk=
Subject key identifier: 5B:AA:A2:D8:19:0E:E9:0F:35:E2:1B:89:8E:8C:47:FE:9E:A5:5D:65
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 01989E950D2D6813D8E0DA42DE1310F1BF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 162E
Signing time: Tue 12 Aug 2025 14:00:24 +0000
Manifest this update: Tue 12 Aug 2025 14:00:24 +0000
Manifest next update: Wed 13 Aug 2025 14:00:24 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: A9BOPewPJ2Vls/8DvXOazkZXACNNL3R7qgwQxOj/xSw=)
2: WtAp0tL-l96y_gbMlR5puzdruQc.roa (hash: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:0d:2d:68:13:d8:e0:da:42:de:13:10:f1:bf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Aug 12 14:00:24 2025 GMT
Not After : Aug 13 14:00:24 2025 GMT
Subject: CN=5baaa2d8190ee90f35e21b898e8c47fe9ea55d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:a0:e6:f2:58:e9:98:30:52:62:ea:0e:65:
be:26:76:2c:16:a4:f2:69:1d:28:33:ff:ca:d0:75:
76:e4:05:28:ae:06:ac:ac:a2:4c:06:75:4d:38:ca:
a5:34:90:3c:ea:e0:26:2e:e8:68:36:83:57:d7:ef:
5f:71:56:2f:4c:b9:02:e2:28:1e:06:d0:c0:02:70:
17:57:dd:8b:f1:32:5e:73:9d:00:f4:03:c7:26:88:
62:34:0b:c2:38:e1:a7:0b:10:8e:50:b1:79:f9:50:
fd:af:10:6a:68:75:8e:36:c0:a3:7c:14:fe:32:b3:
82:91:2e:cf:6e:73:70:44:27:d8:44:40:9f:b4:52:
18:59:27:82:b4:d6:6d:ab:a5:33:54:1d:d5:02:a1:
4a:d3:bf:d3:26:52:bc:cc:7d:66:6f:9d:de:a9:3d:
b8:df:05:19:da:c5:4b:94:f6:b7:2d:52:dd:85:19:
81:0e:e9:28:29:c6:96:bd:c6:6c:11:c3:5e:8e:bd:
9f:66:a4:a2:4d:f8:71:0d:ee:1c:9e:68:3b:57:7c:
98:c4:af:30:c7:61:09:87:03:28:a7:d9:0c:27:53:
fc:41:53:40:49:c6:ad:9e:f2:00:bb:50:d9:34:1e:
db:fa:fb:df:24:41:5b:b1:7c:f4:7a:8c:cc:17:92:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AA:A2:D8:19:0E:E9:0F:35:E2:1B:89:8E:8C:47:FE:9E:A5:5D:65
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:dc:79:c2:5e:76:5a:7d:be:21:d0:62:a0:14:a5:da:06:79:
20:d6:ff:9d:c2:f9:9b:81:22:4b:c9:e2:7b:59:34:76:14:0a:
b6:41:a9:ad:05:ca:93:28:34:8b:73:15:9d:70:9f:f5:ae:be:
83:b4:f9:6e:e0:9c:0b:7c:68:c8:61:22:b3:3d:d1:0e:71:6e:
9a:44:38:cd:0c:5f:f2:40:af:ff:af:45:df:8e:aa:52:ac:b8:
3b:98:67:da:92:67:7e:c2:23:de:25:55:7c:54:41:48:a1:9a:
88:48:db:af:80:8e:d8:07:04:9f:30:60:03:ad:fc:fc:53:32:
9f:7b:6b:4f:29:a2:bc:22:b7:a2:2f:cd:32:50:7a:b5:9c:c2:
64:77:dd:2b:45:09:31:43:64:fe:52:69:8b:d4:e4:30:4b:6d:
5f:47:34:dd:9d:7a:59:a5:bc:81:a4:c9:f5:ac:23:f8:b0:a5:
42:e1:b5:08:f0:3e:6e:40:e3:00:9e:0f:56:91:6e:b2:7d:1b:
dd:b8:8a:c6:8c:b7:46:40:99:43:5d:71:ea:55:a2:1a:7e:8a:
e8:08:3f:53:70:b9:3b:ef:2b:70:56:6a:b1:63:7f:3f:39:c8:
a1:07:6b:c0:6b:4a:56:2e:88:be:d4:98:1b:9a:72:0d:bc:dd:
2b:f5:4a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:08 2025 by rpki-client