Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
File: DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json)
Hash identifier: q+wqJ/NEC+iRmGIrxVAjp21wl8nATiwFHo8mLj2AJyc=
Subject key identifier: FD:4E:CD:DF:8D:B0:D8:E8:05:36:CE:69:07:C8:E8:8E:12:07:A5:74
Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
Certificate issuer: /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Certificate serial: 019776E5A31FDAC398573CBB0E47CBB0CBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
Manifest number: 14E5
Signing time: Mon 16 Jun 2025 04:00:50 +0000
Manifest this update: Mon 16 Jun 2025 04:00:50 +0000
Manifest next update: Tue 17 Jun 2025 04:00:50 +0000
Files and hashes: 1: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: clvewb1kepA5S0ZmvYGjmD463Onc7TcgbAHqUdYMqJI=)
2: zD8lanFfCKcjzXb5ZLkO_uI8Eww.roa (hash: FP/b4ehPHpPPt6ISCHNjh4J5r42QMToe0aZbLviIqX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:a3:1f:da:c3:98:57:3c:bb:0e:47:cb:b0:cb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Validity
Not Before: Jun 16 04:00:50 2025 GMT
Not After : Jun 17 04:00:50 2025 GMT
Subject: CN=fd4ecddf8db0d8e80536ce6907c8e88e1207a574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:43:b5:70:29:a4:db:af:b3:98:a0:76:b2:
48:2c:a6:96:6f:2b:8a:e4:7e:2a:49:5d:4b:96:0c:
36:1d:ec:f5:49:71:7d:64:34:a8:5f:ef:7f:18:41:
40:b7:ad:dc:6e:e3:03:21:ed:2d:f8:86:ef:ee:11:
05:91:4a:2a:33:fe:2e:a3:7e:06:b7:cf:a3:5e:3b:
11:60:6b:f8:96:d4:eb:e1:fc:66:3e:77:b7:5a:a4:
42:42:22:8f:f9:77:d2:e6:0d:6d:a0:39:2a:1b:f9:
db:15:f1:70:09:02:0f:d2:73:7d:3b:fe:8f:32:56:
34:c0:5d:ed:bb:64:12:74:de:69:2c:65:05:8a:a4:
66:6c:5a:e7:ac:97:52:01:74:88:12:bd:d1:75:38:
1a:5d:98:ad:48:26:37:48:9e:91:b4:91:81:d0:5e:
1d:3d:e1:cf:bf:29:34:62:ed:d7:db:48:ea:43:0f:
4d:92:85:5c:74:e2:34:36:8c:e7:56:43:8b:9d:b9:
85:a0:47:49:d6:0d:dc:17:12:a7:5b:10:ba:4e:ea:
df:b7:5f:8c:48:a0:31:f8:22:48:55:2e:7a:16:6d:
11:97:2f:f5:c6:ff:e0:62:30:90:02:29:1f:b7:f6:
cb:1b:84:d2:38:fd:8b:ec:63:20:2f:d8:f9:ad:c8:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4E:CD:DF:8D:B0:D8:E8:05:36:CE:69:07:C8:E8:8E:12:07:A5:74
X509v3 Authority Key Identifier:
keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e4:f2:9e:fa:7b:4a:da:90:49:31:e0:61:ff:c8:1f:7d:58:
6b:fe:bd:4d:e4:32:e1:e9:f0:e4:27:b4:78:55:71:ca:42:09:
c2:a6:09:88:4d:f4:2e:f5:5a:16:28:49:c1:08:2a:ad:82:d9:
8b:04:2c:e4:09:db:3e:f2:ba:83:2d:26:b4:23:9a:d3:8d:68:
46:36:92:fb:ea:04:2b:c2:d0:00:4e:36:c8:37:c3:b7:a4:93:
0d:6e:b7:a6:62:cf:5f:fc:af:e4:dc:69:60:f8:87:16:60:28:
24:2d:1a:20:82:0d:c2:b4:9c:4e:3d:8d:3f:cc:29:6d:57:c4:
fe:73:3b:89:1b:4b:7c:5f:2a:15:0d:d0:2c:2d:99:e4:0f:3a:
c4:4b:13:df:aa:b3:01:4a:de:c0:76:20:db:25:c6:f5:55:67:
63:01:2f:3e:6f:b7:f3:60:da:d2:e8:2e:86:91:38:ec:90:b0:
3f:32:7a:14:dc:1f:36:e1:d5:dc:ea:1b:77:05:7e:85:34:58:
6c:11:94:5c:f4:d0:97:6a:27:5b:85:ff:f7:e1:21:30:db:2d:
ef:0d:aa:39:c9:b6:9a:63:52:c1:a1:bb:29:7a:c3:3a:cc:68:
08:42:64:26:c5:49:5d:3b:ec:4e:17:1e:c6:79:78:ff:2a:7b:
92:9e:b5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:49:50 2025 by rpki-client