Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: uOfVKJnY6yE7/8MQ6CvYbovszeQrCqznVMxxS2lx1DA=
Subject key identifier: 1E:DA:D9:36:E1:B7:AC:25:D0:2B:93:FA:73:1D:45:8C:F6:0E:9F:71
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 01989DF066F300813150BA952A074EB14FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 08BB
Signing time: Tue 12 Aug 2025 11:00:34 +0000
Manifest this update: Tue 12 Aug 2025 11:00:34 +0000
Manifest next update: Wed 13 Aug 2025 11:00:34 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: HQ/ylfxf8OOv3uwzFGEDs3a/xXsf2cfPJGU382wqqc8=)
2: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (hash: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:f0:66:f3:00:81:31:50:ba:95:2a:07:4e:b1:4f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Aug 12 11:00:34 2025 GMT
Not After : Aug 13 11:00:34 2025 GMT
Subject: CN=1edad936e1b7ac25d02b93fa731d458cf60e9f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3b:15:c2:c6:ad:2e:4d:47:e5:3b:81:c1:37:
3d:89:8d:50:70:71:30:f5:77:5b:71:0f:61:f9:6b:
53:ef:45:3e:41:c0:89:91:8b:5d:a3:bc:29:4d:ec:
28:e8:18:66:7f:cd:6a:6c:9b:ec:b9:48:db:8f:59:
77:61:2e:9d:87:28:bb:07:24:7c:43:c7:ed:a3:96:
4c:85:4c:7a:69:14:1f:99:0f:24:6a:61:5c:ff:26:
e6:aa:28:ac:d9:d8:cc:1e:4d:d1:f8:a8:e4:4e:ea:
7f:82:59:d4:81:fb:b1:36:89:bb:19:f8:2b:b1:e1:
e5:e8:8f:74:87:ed:1d:6e:94:6c:e5:69:98:54:0b:
e1:8a:cf:7a:4c:a8:2b:3b:a3:35:b6:0f:b8:41:e5:
b7:82:ea:a5:94:43:19:3f:42:46:3c:fc:4b:cb:a8:
ed:9b:49:19:6e:29:ef:d3:11:4f:d3:27:28:7f:0f:
47:89:07:f7:1c:97:bf:9f:cb:5c:72:a8:af:83:9e:
06:59:17:3d:f7:39:09:5c:1d:ba:cc:76:c2:26:8d:
2d:4b:78:1e:3a:c3:46:5d:e3:cf:63:e5:b4:16:9b:
fe:66:05:89:13:2c:66:f8:52:a9:ce:c5:57:c7:41:
85:14:40:f6:4d:03:48:5e:8a:ec:ba:ea:8d:4e:92:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DA:D9:36:E1:B7:AC:25:D0:2B:93:FA:73:1D:45:8C:F6:0E:9F:71
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:de:44:83:7a:98:48:c3:4e:38:5e:17:08:65:6e:e8:a1:9d:
48:f0:8b:d9:36:a2:c7:fa:89:1a:18:f1:f3:5f:fa:7a:85:bc:
b8:b2:09:c3:1f:03:a3:d3:cd:a1:34:b6:1a:4c:de:69:51:c7:
b1:05:8d:b2:62:ef:d1:de:0c:0e:75:d1:a3:98:01:3a:3d:56:
be:53:89:21:56:4d:64:a4:99:60:c5:fa:1a:4f:3b:cf:9a:3b:
27:e6:04:c3:d1:98:2d:15:da:5f:35:df:eb:39:d2:53:3f:bc:
11:cf:18:b1:3b:a6:d2:49:54:bb:46:ef:92:fe:1d:9f:c5:ff:
ef:eb:02:6b:ee:22:35:d5:05:74:33:8e:0b:2e:24:c3:0d:d9:
b9:be:dc:22:7f:81:c2:0e:ec:34:45:4b:37:c1:54:c4:03:28:
6f:9e:a5:97:fa:75:df:e6:c7:76:11:3a:f3:1e:3d:33:31:b2:
cf:d0:e7:74:67:93:3d:23:5f:e3:40:45:8f:a9:0a:83:24:86:
99:4e:15:26:57:59:28:2f:d7:d8:01:fa:e9:4f:70:1a:16:82:
f0:f1:2b:c0:a2:f0:39:d3:85:8d:b3:b5:e3:3b:48:eb:ea:26:
ca:12:89:f3:26:99:6d:18:1b:4f:35:87:43:48:95:f7:8d:e1:
2a:50:fa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:48:46 2025 by rpki-client