Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: 61bdIKmiwn1rU4TZmRqQ0w6iDNCxvzjm7aTIUOUerHw=
Subject key identifier: 2A:0A:B7:0A:80:0E:0F:7F:25:81:2D:71:25:71:52:9E:93:83:6B:4D
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 019A4E8681B719214CC0343F0DD9F765679E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 099B
Signing time: Tue 04 Nov 2025 11:00:29 +0000
Manifest this update: Tue 04 Nov 2025 11:00:29 +0000
Manifest next update: Wed 05 Nov 2025 11:00:29 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: FA6L0ndcxA2CdzbWwDRhVdYeTukUs5jdbzTOCmgN+Js=)
2: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (hash: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:81:b7:19:21:4c:c0:34:3f:0d:d9:f7:65:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Nov 4 11:00:29 2025 GMT
Not After : Nov 5 11:00:29 2025 GMT
Subject: CN=2a0ab70a800e0f7f25812d712571529e93836b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:8f:1b:f0:fc:91:ca:33:74:38:ad:23:95:
64:79:75:a8:39:40:9a:2b:ed:e9:2f:12:a4:20:42:
44:d4:d8:ad:7f:4d:3d:3c:7a:76:82:c2:6f:1b:a8:
3e:da:cd:c1:c3:21:4c:7d:e8:d3:ff:e5:2e:fe:8e:
7a:36:cb:e5:12:12:7f:7a:e5:4c:a0:01:4e:93:33:
62:9f:4e:8f:13:cb:b1:0b:52:1f:11:a9:cf:96:0c:
c3:1f:2c:50:38:b8:ac:12:11:0b:fe:3f:c0:47:66:
75:d9:57:3e:5f:20:b3:6a:0e:c2:49:b9:01:cb:2d:
37:76:45:fe:4d:e1:c7:35:3d:7a:5d:f8:25:25:24:
29:64:a1:02:09:18:c5:b3:a3:5b:3e:82:24:a2:d2:
27:3b:91:a8:a3:01:da:44:75:2b:12:8b:09:bc:b9:
cd:70:fa:a1:c5:25:32:1c:b6:d0:82:f3:f9:03:ef:
56:ed:e8:75:58:90:e7:a6:30:74:22:e5:fa:ef:22:
90:8a:e5:1c:89:71:2e:f5:7a:f4:8b:e3:9c:0b:ed:
2f:d0:15:46:1e:78:25:0b:78:7d:c3:7a:c9:8e:87:
c3:60:db:7d:9e:82:f3:17:da:7c:35:4a:63:93:49:
d1:34:80:7f:d9:f4:01:80:25:63:41:49:6e:f6:d3:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0A:B7:0A:80:0E:0F:7F:25:81:2D:71:25:71:52:9E:93:83:6B:4D
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4d:f3:e3:22:7a:37:69:ff:67:08:7f:f7:7a:32:aa:f3:2f:
ce:f3:9a:1a:07:fa:a7:da:7f:1c:d4:a9:7b:78:ef:3b:5f:d6:
df:99:0b:36:74:de:5d:b0:a9:3d:f4:4a:29:96:72:4e:99:ca:
1d:f3:b7:d7:ef:e6:99:28:08:cb:08:c4:00:e0:8f:62:39:0f:
8e:b1:6c:07:5d:2a:40:a1:b5:6b:3e:88:d3:19:53:ab:cd:62:
03:09:a0:6a:29:eb:9f:66:af:16:fb:d9:58:d1:95:0e:aa:5c:
ca:00:dc:68:6e:3c:9b:1a:79:03:fd:67:1f:5e:08:8c:28:e5:
7e:f2:a0:25:1b:bd:e7:39:37:cb:8c:0e:e5:9f:42:a7:05:fe:
3e:5b:13:5d:3e:0b:ab:5d:70:28:60:54:e1:13:54:7c:50:f5:
06:6f:cb:55:b0:95:6f:e8:29:39:61:8f:05:fc:7e:8a:fb:6e:
81:83:89:fd:95:31:17:7a:70:95:ac:62:c5:d7:f2:5b:57:4c:
2b:f8:a7:6a:f1:9d:9a:dd:c7:ba:cc:4e:c2:af:5c:08:58:48:
39:3b:e5:0c:91:29:cf:29:0c:ab:83:56:f8:3d:95:d2:82:c5:
a2:b6:a9:01:d7:28:0e:61:4f:d6:67:66:1b:c4:8b:90:5a:07:
2b:79:a6:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhoG3GSFMwDQ/Ddn3ZWeeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTJkYzcxZjllYzFhOWIyNzgxMDc3ZjNhZDI5ODFjNGI4
NzJiMDUwHhcNMjUxMTA0MTEwMDI5WhcNMjUxMTA1MTEwMDI5WjAzMTEwLwYDVQQD
EygyYTBhYjcwYTgwMGUwZjdmMjU4MTJkNzEyNTcxNTI5ZTkzODM2YjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dyPG/D8kcozdDitI5VkeXWoOUCa
K+3pLxKkIEJE1Nitf009PHp2gsJvG6g+2s3BwyFMfejT/+Uu/o56NsvlEhJ/euVM
oAFOkzNin06PE8uxC1IfEanPlgzDHyxQOLisEhEL/j/AR2Z12Vc+XyCzag7CSbkB
yy03dkX+TeHHNT16XfglJSQpZKECCRjFs6NbPoIkotInO5GoowHaRHUrEosJvLnN
cPqhxSUyHLbQgvP5A+9W7eh1WJDnpjB0IuX67yKQiuUciXEu9Xr0i+OcC+0v0BVG
HnglC3h9w3rJjofDYNt9noLzF9p8NUpjk0nRNIB/2fQBgCVjQUlu9tNESwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoKtwqADg9/JYEtcSVxUp6Tg2tNMB8GA1UdIwQY
MBaAFAzi3HH57BqbJ4EHfzrSmBxLhysFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2Et
YmE0ZmJkOGQ1ZDhlLzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2EtYmE0ZmJkOGQ1ZDhl
LzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU03z4yJ6
N2n/Zwh/93oyqvMvzvOaGgf6p9p/HNSpe3jvO1/W35kLNnTeXbCpPfRKKZZyTpnK
HfO31+/mmSgIywjEAOCPYjkPjrFsB10qQKG1az6I0xlTq81iAwmgainrn2avFvvZ
WNGVDqpcygDcaG48mxp5A/1nH14IjCjlfvKgJRu95zk3y4wO5Z9CpwX+PlsTXT4L
q11wKGBU4RNUfFD1Bm/LVbCVb+gpOWGPBfx+ivtugYOJ/ZUxF3pwlaxixdfyW1dM
K/inavGdmt3HusxOwq9cCFhIOTvlDJEpzykMq4NW+D2V0oLForapAdcoDmFP1mdm
G8SLkFoHK3mmVg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:58 2025 by rpki-client