Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
File: DbPDFk09jCZEzymzI2dhpXHuWLo.mft (raw, json)
Hash identifier: DO65naocWJwg0n0X1uT8N7ukeIvVIKZy8k0AAUyeI7Y=
Subject key identifier: AD:75:A1:C0:96:CF:3D:68:41:D1:33:A6:FA:55:BC:2C:77:DC:D7:2C
Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Certificate serial: 0198744F9B7276F1AE8EC6D51ADC82566F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
Manifest number: 0C1E
Signing time: Mon 04 Aug 2025 09:00:30 +0000
Manifest this update: Mon 04 Aug 2025 09:00:30 +0000
Manifest next update: Tue 05 Aug 2025 09:00:30 +0000
Files and hashes: 1: DbPDFk09jCZEzymzI2dhpXHuWLo.crl (hash: RmiMt3NmCFVRSVm+1fQtFxFvxc0qpvm23FnnzJwYMAk=)
2: VCOPnV4kZuweFLb_llPPHRAXNUA.roa (hash: cRLhBmbu/yT6hrLfR7qsKhKnC8knJg7oOO9Ome0I9Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:9b:72:76:f1:ae:8e:c6:d5:1a:dc:82:56:6f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Validity
Not Before: Aug 4 09:00:30 2025 GMT
Not After : Aug 5 09:00:30 2025 GMT
Subject: CN=ad75a1c096cf3d6841d133a6fa55bc2c77dcd72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:e5:94:6f:20:15:12:a4:ff:5b:cc:71:f2:
03:0c:21:3c:88:a9:d7:8d:97:25:bb:a6:9f:62:24:
01:6c:8d:91:d1:e0:0e:3e:53:1a:f5:2e:7f:1a:fb:
c4:a3:ba:8d:74:26:48:b5:7b:45:61:73:05:90:20:
c1:de:3e:23:14:d4:b6:1b:e3:f6:23:06:51:ba:d1:
24:e6:bb:49:73:9c:c9:85:31:e6:fd:0a:79:31:23:
c7:a7:4e:7b:c7:10:89:ad:63:2f:b7:2e:1c:52:55:
ef:17:a9:7d:e5:44:d8:eb:8f:d3:85:f6:57:95:a7:
23:52:34:47:08:c3:65:4f:48:64:27:90:7d:4a:f0:
19:0d:fa:78:5f:9b:9d:49:ca:25:52:81:da:45:0c:
6a:d1:c7:a6:54:4d:96:0e:7a:bd:78:dd:26:2e:c3:
91:f1:40:db:39:73:1e:c2:61:46:dc:4b:f5:b2:c2:
4a:38:b7:0d:01:fd:91:d0:3f:ed:3d:15:10:99:96:
57:52:c4:d9:6e:20:45:44:c7:4e:8d:16:06:d6:d3:
0a:cb:97:96:82:97:76:f8:1e:63:32:8a:ce:0a:aa:
40:68:65:6e:52:35:4b:b7:dd:bf:f7:c3:d5:52:f3:
2d:aa:2d:1a:8e:04:fe:a0:33:c7:62:d6:1f:f6:59:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:75:A1:C0:96:CF:3D:68:41:D1:33:A6:FA:55:BC:2C:77:DC:D7:2C
X509v3 Authority Key Identifier:
keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:93:66:c1:58:7c:0f:f5:0a:4d:11:3b:fe:f9:19:c3:46:a5:
cb:03:08:9b:f6:ce:d6:53:96:8a:b6:f8:d8:b2:03:ec:a9:a4:
27:87:b6:ab:27:bd:39:22:4d:39:4d:5e:aa:ca:44:c3:15:68:
a4:de:8f:87:b2:7e:9b:db:2c:1f:43:54:c2:8b:e7:bb:68:d8:
52:39:d4:b3:ce:9f:c7:27:1c:a5:21:b1:87:28:7f:82:6a:43:
5a:45:90:82:a7:3d:f4:fe:99:b6:4b:b6:72:fa:ff:3d:81:77:
4a:17:29:2d:a2:f8:2a:f3:23:fd:9d:71:71:bc:f6:39:07:41:
54:36:f5:cb:ad:c4:8c:af:e7:7c:35:b7:e9:a3:c9:7c:49:29:
61:47:da:2e:23:bf:f4:89:35:97:e4:a8:6e:79:6d:68:ad:0e:
14:0b:d8:88:e5:56:6e:6b:e0:5e:08:ea:73:c0:03:a2:ee:ad:
f0:a3:c2:d8:7c:5f:03:19:38:a7:70:cf:ca:2d:7c:93:af:99:
bb:3b:87:9e:4d:c3:7e:57:1b:87:f8:48:55:87:41:90:0b:41:
3e:c5:46:57:b7:4a:46:51:65:30:a6:4d:04:75:78:13:a1:94:
c2:3a:b5:16:4b:50:9a:91:82:c6:ef:9d:b9:97:f5:78:69:7f:
f9:d8:84:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:57 2025 by rpki-client