Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: xVV8VrA22jOytpe+dL0MWS+CFTSlX3ogfms0h6BJ7UY=
Subject key identifier: 5C:0F:16:29:E5:BB:3E:42:DF:CA:2F:E1:22:35:64:76:F3:6C:22:54
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 01987B9C2D3EADC0D54757416657902C8904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 0D4C
Signing time: Tue 05 Aug 2025 19:01:29 +0000
Manifest this update: Tue 05 Aug 2025 19:01:29 +0000
Manifest next update: Wed 06 Aug 2025 19:01:29 +0000
Files and hashes: 1: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: ZmfC1RrsdlI/Sbd1S3wOfIOfRQbuyDPl4pPHDZ7/f18=)
2: MNtx-M1QVv5z_3qcN6vxhaOotfc.roa (hash: px53xNqq/MugnV+199J7ZDHhE5FdBcLFsMKgKSEziic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:2d:3e:ad:c0:d5:47:57:41:66:57:90:2c:89:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Aug 5 19:01:29 2025 GMT
Not After : Aug 6 19:01:29 2025 GMT
Subject: CN=5c0f1629e5bb3e42dfca2fe122356476f36c2254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:67:53:73:6e:8c:c6:bc:e9:75:67:0e:be:
06:d2:94:40:2b:d6:d3:56:b0:9f:6e:45:cc:ad:35:
a5:aa:dc:a8:3e:2f:a4:38:6b:ae:86:d1:ed:18:4d:
c9:c1:d6:b2:e8:07:6c:4c:5d:af:62:df:53:95:78:
1d:e3:de:51:bb:6e:dc:bf:7c:2c:d2:c4:d5:15:8f:
df:82:28:f8:ed:a9:e6:bf:4a:71:aa:41:cc:ee:72:
76:49:b0:fc:7a:46:69:7d:b3:08:7c:2c:fb:3b:6d:
a2:01:de:2f:87:7f:43:94:ab:33:43:cb:1f:3e:d3:
36:1d:25:8c:7e:b5:a0:4c:a9:53:a9:d9:ed:55:c2:
63:bc:39:47:0e:77:fb:6f:7a:92:a4:10:de:d5:a2:
85:95:af:75:b9:7c:93:68:6c:f2:bb:e0:84:f6:9f:
8a:a4:c3:f6:2e:e2:b4:24:9f:65:90:48:74:90:16:
57:4c:ba:e5:69:a0:3d:7f:23:80:a1:ea:d5:22:5e:
0a:80:dc:92:17:96:f1:b2:6a:30:67:3e:3a:5a:82:
89:81:ed:f1:da:52:89:f1:82:ec:cd:15:49:fc:58:
ef:4a:20:73:a5:c6:db:9d:a0:00:e1:d1:0e:5c:35:
35:55:c7:90:a2:18:6f:95:92:b7:ba:30:78:0b:24:
0b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0F:16:29:E5:BB:3E:42:DF:CA:2F:E1:22:35:64:76:F3:6C:22:54
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:87:52:b8:e4:25:aa:2e:45:57:11:c9:04:d2:f8:56:13:d4:
07:de:05:93:0a:2a:ec:03:27:a0:26:36:7f:15:db:ca:8b:70:
db:5a:b5:a5:ba:21:a0:5a:76:dc:d1:d6:ec:4c:fd:68:a6:29:
11:b1:15:98:2c:7c:81:d1:85:f2:a2:e0:18:04:cd:ff:7c:2f:
a9:86:f6:ca:f1:a3:0a:70:7a:05:f1:22:f4:ee:15:34:b2:1d:
31:66:f0:c6:6f:60:17:f3:84:e2:33:40:a9:9d:9f:42:a5:89:
98:60:41:26:06:48:c3:9e:d4:33:51:87:9f:03:98:6e:7b:df:
c0:8f:6a:ad:9c:0c:a9:d1:17:7a:99:8a:77:20:8c:59:10:15:
b6:b7:51:62:f6:60:ca:2e:d6:c8:d5:ed:0a:32:80:51:66:41:
8e:94:7a:e4:c9:77:85:31:28:33:85:de:bf:d3:9b:ac:74:f2:
4c:6e:f2:9e:cb:ea:ad:79:f5:09:6e:6a:a7:2f:4a:09:5b:c1:
32:26:cd:5a:9a:5f:a8:bc:10:15:3a:b0:73:58:f1:83:8e:b7:
76:0a:19:5c:78:6e:43:02:e7:f0:e4:e3:fc:bf:e8:31:dc:ad:
10:bd:f5:ad:bd:a7:58:0d:8b:4d:72:17:a1:a9:fb:8d:f1:81:
a4:4c:a7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:42:26 2025 by rpki-client