Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
File: DoMf1wxr03oqddeg6sAxyS2o4YU.mft (raw, json)
Hash identifier: GAcvPlmurhWZ01rEb7i+rT1GaKOZrFUzd27L2ft0mRI=
Subject key identifier: 2E:FC:85:F4:7C:38:5D:F5:70:EC:6A:28:9B:B9:14:6A:2F:1D:73:3F
Authority key identifier: 0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
Certificate issuer: /CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Certificate serial: 019894B7381EAB849ACFBF104D39815BA3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
Manifest number: 12AA
Signing time: Sun 10 Aug 2025 16:01:32 +0000
Manifest this update: Sun 10 Aug 2025 16:01:32 +0000
Manifest next update: Mon 11 Aug 2025 16:01:32 +0000
Files and hashes: 1: AbAz97rI6RXbeaGg0ju1UGvv4xM.roa (hash: 6SJubAUNhK59Bg5EEa587Nx4giyrDXi2DFXXzhtFznQ=)
2: DoMf1wxr03oqddeg6sAxyS2o4YU.crl (hash: uMWGgUjjN0kzNIFQN/YLbdry5oJCMOoT/8r2vJiHeeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:38:1e:ab:84:9a:cf:bf:10:4d:39:81:5b:a3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Validity
Not Before: Aug 10 16:01:32 2025 GMT
Not After : Aug 11 16:01:32 2025 GMT
Subject: CN=2efc85f47c385df570ec6a289bb9146a2f1d733f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:41:e0:73:08:a8:af:7f:a4:4c:6b:1a:71:
d9:ab:80:8c:0d:29:79:b4:20:bb:02:db:74:59:ec:
57:e2:7f:1b:54:15:a4:86:cf:34:70:b7:75:e9:18:
2a:9d:aa:29:6f:ca:ce:2e:99:d9:a3:89:75:e4:66:
4d:1e:4d:a1:55:42:aa:77:f2:f4:9c:df:7f:c7:c0:
79:d1:1b:75:94:7a:70:29:9f:10:51:04:e0:71:fa:
74:53:16:96:b3:69:c1:d7:6f:13:76:96:29:90:93:
e2:11:a9:bb:d8:b2:92:65:0c:57:f0:bd:c9:8f:b1:
a0:1a:c7:7a:c8:81:57:e0:fc:12:8c:10:8a:fc:7f:
93:bc:0a:c1:b4:23:7c:16:09:d2:69:9c:6e:b8:c8:
52:18:3f:f3:41:96:36:f3:5f:c9:d7:d5:ec:6d:9d:
bb:32:53:58:53:bd:de:9d:9e:52:80:fe:c8:64:46:
c1:39:df:e0:8b:8d:f8:52:09:1c:19:bd:03:f0:1e:
e7:27:de:e2:87:e5:43:b4:38:13:97:68:fc:79:33:
a1:b3:60:0a:b4:f5:93:09:4b:ac:1e:0c:62:49:61:
d0:d5:05:e6:53:55:21:92:b9:5c:a6:e7:52:89:98:
45:43:fa:cd:ee:9b:d3:52:17:45:1f:24:28:92:5b:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FC:85:F4:7C:38:5D:F5:70:EC:6A:28:9B:B9:14:6A:2F:1D:73:3F
X509v3 Authority Key Identifier:
keyid:0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ac:9d:37:56:af:a3:90:80:06:db:5a:d5:2f:74:b7:a7:d6:
77:f1:53:e7:c6:99:9e:17:14:b8:0b:00:02:34:7a:03:a8:8c:
2d:27:e2:6a:f4:d7:00:f0:51:6a:fd:ea:4d:de:8b:c3:06:ca:
0d:3d:1e:8f:14:cf:77:b5:0f:82:a1:0e:2b:40:5e:f0:f1:94:
24:07:6c:22:34:d0:74:ed:64:e5:e5:33:6d:e2:b4:10:f0:50:
fc:40:56:d7:a2:5d:a3:9c:73:2e:d5:a5:a2:44:c7:e8:da:1e:
99:93:ab:b3:72:d4:8c:d2:05:ed:e2:a1:72:11:90:ff:8c:9f:
fd:ec:3f:35:4c:15:6a:13:23:e3:c4:7e:73:6f:06:12:ef:e6:
ec:03:6d:82:80:56:aa:a8:33:b6:94:cb:14:32:c5:da:c9:65:
31:ec:c5:90:c1:27:f7:74:9e:f5:4f:e7:6d:70:b6:cf:7d:dd:
09:fc:15:8a:5d:ca:95:a4:14:19:01:ae:62:53:dd:91:32:bb:
67:cf:76:6c:e9:97:6b:03:9f:88:74:d9:ab:54:06:73:18:9f:
4c:c6:1c:c0:25:e7:14:ca:72:ab:ee:c2:db:17:e4:5b:bf:23:
58:e4:44:f3:4c:1b:6d:b3:c5:c9:92:93:33:ab:1c:df:16:1f:
a1:ed:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:19:14 2025 by rpki-client