Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier: WDXDIzEFbzVXF8BwH+VHMu88x4JW7fDECV4gGXMtPY0=
Subject key identifier: F7:1C:0B:53:99:C8:2A:D9:D4:65:2C:59:74:C9:69:D2:64:EE:96:9A
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial: 019874509EFF3508AD66D9312A1742F58BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number: 046D
Signing time: Mon 04 Aug 2025 09:01:37 +0000
Manifest this update: Mon 04 Aug 2025 09:01:37 +0000
Manifest next update: Tue 05 Aug 2025 09:01:37 +0000
Files and hashes: 1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: Tg//ZO6AOMBE9wZgf+xsOh4hbfGBLj9naDYbgrtZt/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:9e:ff:35:08:ad:66:d9:31:2a:17:42:f5:8b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Validity
Not Before: Aug 4 09:01:37 2025 GMT
Not After : Aug 5 09:01:37 2025 GMT
Subject: CN=f71c0b5399c82ad9d4652c5974c969d264ee969a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:d7:7a:4f:44:69:93:cc:2d:b8:68:56:02:
9b:d7:0f:c4:73:d9:f2:ea:5e:fb:a2:22:e5:46:20:
bd:e7:6b:d0:11:ee:36:75:c6:ee:90:52:f7:ee:be:
3a:3d:b9:5f:83:72:26:62:30:98:dd:73:0d:18:55:
70:32:2a:ed:81:4a:0e:9d:92:52:45:8c:70:d5:a6:
5c:ba:c5:35:aa:b5:b8:e4:4d:9e:00:b7:d5:3f:6c:
ce:bf:f5:75:73:8c:7f:9d:84:e9:e0:70:48:cc:9d:
ac:3d:66:30:eb:dd:46:c8:91:b9:7c:48:02:5f:bf:
d7:d9:4b:74:fa:9a:e2:59:9d:9b:35:6d:af:da:5e:
99:3e:74:2f:d0:18:a2:1d:e8:35:cb:94:4f:19:ed:
d9:ac:76:7d:99:be:ff:48:9b:c1:f9:13:30:9b:4f:
c5:06:70:cd:10:13:b2:eb:1e:41:50:96:3c:e0:e8:
44:d5:72:55:6e:bc:da:85:51:8d:39:2b:32:ab:47:
0e:47:85:a3:67:3d:f9:04:b4:28:7b:b0:bf:f4:ce:
d8:11:3a:db:4c:96:6a:f6:93:ec:de:87:f7:7c:e8:
0a:39:6b:5e:a1:77:d2:b6:04:90:13:c8:5a:29:d5:
68:98:c9:c4:e4:f9:71:f3:98:e7:1b:2f:49:49:ec:
9e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:0B:53:99:C8:2A:D9:D4:65:2C:59:74:C9:69:D2:64:EE:96:9A
X509v3 Authority Key Identifier:
keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1a:c9:d5:47:e8:4b:e4:ed:87:c2:32:c5:34:e8:36:95:74:
2a:4c:f0:89:df:60:71:81:4a:42:a7:ec:b9:9b:5c:dc:f7:fc:
32:5c:37:d4:a3:a6:38:04:0d:ec:5b:83:cb:34:8e:29:18:8e:
02:14:72:93:5e:18:a6:39:5f:e3:94:e3:ef:82:d1:95:f8:4d:
fe:72:fb:c6:aa:dc:99:43:33:aa:a4:59:8c:07:fd:e5:7c:e7:
e6:ce:a6:b6:90:fe:af:6a:e6:f7:97:18:90:98:f6:ba:fa:43:
3a:a0:a5:53:e8:c0:d0:d4:82:96:5f:21:ff:61:b8:f1:83:29:
12:b4:2d:51:af:50:9c:21:99:48:a1:d9:c2:f0:c3:11:2f:3b:
80:53:f5:ea:3c:d4:4b:99:07:03:f9:d8:65:34:d8:a1:8f:5e:
05:d4:bb:54:f3:67:99:72:93:71:e7:6b:1a:d9:79:5d:55:4d:
e0:5d:5f:b1:e2:08:1d:ae:3c:7a:14:b0:ee:18:c6:eb:2c:e3:
45:64:44:cc:d9:3d:a6:bb:2f:1a:09:23:1a:9f:30:01:88:f5:
42:52:37:3c:81:38:17:22:1b:6e:5a:64:43:67:2f:6f:11:43:
b2:04:bf:90:f8:15:7a:60:2b:64:3c:7e:18:4f:11:26:8c:fc:
2c:9f:40:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:02 2025 by rpki-client