Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: a2bmbLENiQvsWq+LdJXx4bkMURYOErg0JbAxy5v1q5Q=
Subject key identifier: 5E:B8:4A:E1:8B:13:49:A4:CF:82:D7:9E:6C:E4:F0:04:A1:B3:93:8E
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 019893360F81CE231EA76E1C3EE0BC368A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 12DD
Signing time: Sun 10 Aug 2025 09:00:50 +0000
Manifest this update: Sun 10 Aug 2025 09:00:50 +0000
Manifest next update: Mon 11 Aug 2025 09:00:50 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: v3VflrrmpQU3HmECyKbQ9fQ21yTWfeao0+MidSA0B4M=)
2: l2z6jen0BvB90JFFcv4xMvXKDU4.roa (hash: 3LW90buItGbBk8vwyzdEvNmU4J6IAwriJoEjk0Q8hlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:0f:81:ce:23:1e:a7:6e:1c:3e:e0:bc:36:8a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Aug 10 09:00:50 2025 GMT
Not After : Aug 11 09:00:50 2025 GMT
Subject: CN=5eb84ae18b1349a4cf82d79e6ce4f004a1b3938e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:05:28:d1:45:6b:a4:d7:6d:2a:04:70:65:
17:44:82:af:3e:8e:67:fa:d7:c1:f9:18:4d:77:73:
76:de:7c:57:bb:29:1e:67:38:c6:59:13:37:e2:ff:
87:33:8f:33:4c:1b:50:d5:ac:d7:d9:bd:2a:f4:2c:
d1:88:63:48:be:7f:38:cf:f3:da:d4:4d:b8:86:67:
03:67:d6:75:35:12:96:b3:74:2d:2c:19:cf:c8:bf:
ee:54:5e:fa:93:6e:c3:2b:a5:e5:cc:f0:eb:66:1e:
2c:53:f5:51:d7:67:98:d5:13:e0:f3:17:44:b3:bf:
13:7b:d9:f3:61:ac:9c:e9:ba:47:f3:72:3c:52:ed:
ae:88:e0:4b:ec:1b:3c:6b:02:d0:e3:ac:bb:9f:23:
ee:4b:7b:33:cd:80:dd:a0:ef:55:e2:eb:be:2e:45:
a8:84:00:f4:d4:74:36:de:3d:89:f6:8b:6c:f8:65:
cc:1e:1e:70:3c:79:b0:48:ba:c2:b3:29:32:23:6e:
57:04:09:ce:9e:5d:99:2a:ef:e2:98:86:01:ab:44:
de:c7:f0:24:4b:90:46:96:39:20:16:a5:e4:d6:2e:
00:e9:cb:e3:a1:18:9c:59:7a:62:d5:d2:cd:33:64:
26:96:0d:87:80:bc:a3:13:be:33:80:75:41:aa:71:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:4A:E1:8B:13:49:A4:CF:82:D7:9E:6C:E4:F0:04:A1:B3:93:8E
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1c:37:24:0b:d7:71:92:2f:63:96:73:8e:6d:19:b3:77:94:
38:2b:66:ec:cf:2a:bd:60:55:d2:09:61:9e:7f:58:1b:ea:b3:
b9:22:87:74:18:05:6a:8e:ed:94:06:d6:96:68:bd:41:56:2d:
5d:67:42:d5:95:a7:c1:da:94:93:33:ed:18:34:99:a5:74:94:
34:45:a4:4a:95:ad:ea:77:c8:d2:09:7e:58:23:8b:18:2f:4c:
f3:16:28:64:0c:11:7a:90:53:9d:f8:7b:96:fa:c7:6d:69:f7:
ed:c3:e5:5a:75:13:6d:a9:d6:11:7e:01:f5:65:0b:15:df:80:
cf:5a:15:82:f4:09:80:54:46:b9:71:38:3a:57:93:b1:77:c9:
b8:80:94:9e:43:58:f0:94:75:91:8d:99:3a:f8:08:68:ac:14:
bb:ef:d0:87:e5:e7:46:b0:9f:b0:3d:c8:42:24:cc:24:09:7e:
d4:5b:38:94:21:5e:a8:f5:f6:6b:94:06:87:bc:3d:50:f2:c3:
fd:41:60:9d:06:e4:bb:8f:ce:d0:cf:b5:0f:6a:a9:39:7c:6c:
79:fc:ea:7a:3a:9f:48:bd:db:a6:ba:a6:ed:54:cc:29:c1:49:
1e:13:95:cf:60:3f:23:e0:82:d7:8c:e2:8d:06:ec:64:4a:b9:
1e:80:cc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:57 2025 by rpki-client