Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: zs5Qx+r8lfVlBqbglRK7e9QZXX/K7KgW4SXcbEMhxYs=
Subject key identifier: 96:7F:6A:8A:49:99:F1:4B:39:63:E0:5F:5C:1F:12:B3:AC:C2:1D:D1
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 01988356F7D28093DB0F01B9FA4743B66933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 0A80
Signing time: Thu 07 Aug 2025 07:02:51 +0000
Manifest this update: Thu 07 Aug 2025 07:02:51 +0000
Manifest next update: Fri 08 Aug 2025 07:02:51 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: EggoLO0b9s5z/0L6zKhYc350TZxzE/e5n6NXeSLJA8o=)
2: oeUHXPRVWNrr1QJirrKSZQy6zrU.roa (hash: SxbvFYL3nEPIvag7xzWrtYfbRcEggJtZoR9CvV7aWPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:f7:d2:80:93:db:0f:01:b9:fa:47:43:b6:69:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: Aug 7 07:02:51 2025 GMT
Not After : Aug 8 07:02:51 2025 GMT
Subject: CN=967f6a8a4999f14b3963e05f5c1f12b3acc21dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:a4:50:a6:7b:bf:77:99:0c:ac:fb:0f:16:
df:30:65:f9:62:d6:63:64:3b:9d:f2:bb:7e:04:99:
9a:b1:c4:13:bb:81:97:23:a8:3d:ef:29:ba:26:ea:
bf:7b:bd:06:9b:f8:db:5b:e9:d9:af:06:3f:8b:c6:
8c:28:39:eb:1b:19:78:2f:32:0a:00:58:cf:1a:e4:
50:96:54:c4:70:27:6c:7c:51:cf:e8:09:46:8c:5b:
b0:66:8c:17:56:50:dd:92:e3:6d:f2:b4:c8:9c:b3:
8d:41:06:0f:0e:23:4e:ea:79:72:a9:17:e8:0f:93:
48:b9:2d:a8:7e:a7:f8:ca:10:ea:f4:37:a0:47:b8:
dd:10:3a:43:2b:a5:4f:7b:40:77:9b:c5:a3:8a:fa:
ee:9d:ef:91:95:09:c0:1e:75:ad:ef:4b:e5:a5:eb:
31:35:38:4d:e6:bf:0f:56:d6:d9:e3:05:1f:d9:8e:
42:65:b0:58:63:99:13:7c:85:73:54:1c:07:79:ef:
9a:c9:5e:db:ea:d0:16:3f:a1:71:e6:19:0c:1c:b3:
ae:47:8b:f1:19:1f:78:d4:bc:e2:a6:fa:83:0e:0f:
39:9c:39:7d:41:4e:a6:13:9d:e8:3f:bd:0d:9c:fb:
d6:fa:dd:00:d5:89:f8:4e:ca:17:f5:7d:01:02:98:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7F:6A:8A:49:99:F1:4B:39:63:E0:5F:5C:1F:12:B3:AC:C2:1D:D1
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:1f:24:db:96:60:d2:97:24:19:a8:48:ab:08:f6:e2:95:70:
1f:2a:52:c7:1f:20:c4:60:97:6c:8a:49:7c:19:f1:4e:29:ff:
c6:de:fc:8d:82:ad:5f:f8:1e:3e:3a:cc:04:5d:2b:65:84:6c:
21:e9:1c:de:09:da:a3:c4:aa:cd:0b:5f:aa:ea:30:63:eb:06:
3c:00:57:51:5b:22:34:9a:89:ff:08:3e:ed:46:28:8a:59:b6:
4e:42:ee:f6:23:7a:dd:a3:86:e7:2c:53:aa:83:c7:65:72:07:
4e:88:4e:1a:be:48:4c:4a:1f:28:b2:0e:61:71:5b:4a:bb:ec:
66:76:a0:4a:ff:38:60:39:74:21:56:0e:c2:0e:1f:72:e4:c4:
92:b0:a2:0b:4d:0c:68:f5:76:3b:cd:34:df:58:e7:0c:44:4a:
8b:9f:a6:b3:fc:8e:2a:47:07:90:93:1e:78:8c:b4:02:ff:4e:
80:65:89:fb:eb:2a:78:72:07:f9:84:57:c1:05:44:5b:d0:38:
92:a9:7d:6a:ef:57:7e:15:3b:cb:e7:b6:21:2a:57:39:26:6d:
d1:6e:82:37:ef:9e:fa:f1:9a:6f:82:b0:cb:14:4b:8b:fc:40:
bc:0b:6f:97:ea:2a:cc:da:a2:fc:2f:c6:46:96:d1:e9:9b:de:
12:7d:fa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:34:27 2025 by rpki-client