
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: Km2ArHWA5SEg8yAaIvjiIJrYDnB+raL+uslrkOvsKLQ=
Subject key identifier: 0E:97:F1:D5:7F:62:8F:6C:13:9F:2E:0A:49:45:F7:C7:DF:57:7D:CC
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 01989448A10D2547367EFC1BE2428162463C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 06C7
Signing time: Sun 10 Aug 2025 14:00:44 +0000
Manifest this update: Sun 10 Aug 2025 14:00:44 +0000
Manifest next update: Mon 11 Aug 2025 14:00:44 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: nkliBhZOzNbFts+RvVR9ItsFU2GW9TmyQSf/f17go1c=)
2: oH2IWQRozN1-75odpKh66sr4uwc.roa (hash: wPfO52+kbkGCq6+uVpP9AwZp/WGjoxj4/guIax27VIU=)
3: y77dBZKkwdBWSaHuC-2LOWhhnDE.roa (hash: Mve9fSJEqTyFEiPK9mxYy3Dvl/+0Q/tVpXlrv6a1VIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:a1:0d:25:47:36:7e:fc:1b:e2:42:81:62:46:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Aug 10 14:00:44 2025 GMT
Not After : Aug 11 14:00:44 2025 GMT
Subject: CN=0e97f1d57f628f6c139f2e0a4945f7c7df577dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:e3:c5:4b:70:7c:9b:59:3f:af:29:03:36:
73:77:4c:6c:29:cf:4c:b4:5c:cd:de:7f:86:75:eb:
33:ed:a6:bb:db:37:7f:b4:7a:b0:e8:ad:9a:91:5a:
d3:0b:7c:99:1b:7a:d5:dd:e2:d8:16:cd:30:f9:fe:
3f:ab:89:35:ab:d0:85:09:8c:5d:94:85:d9:f0:15:
ee:56:6d:e0:eb:1e:48:e8:66:86:8d:a6:d3:d3:fa:
e0:22:fa:e2:f3:1f:81:85:96:a7:85:a9:65:82:65:
e8:24:ab:5f:78:1b:e0:31:65:6c:5c:34:e5:88:1e:
d0:ef:7c:21:fe:a6:e8:79:c5:6d:7d:c4:b1:0c:f7:
63:1c:d5:0c:10:ba:54:f2:40:11:01:38:34:df:0a:
ed:ca:68:a8:9a:46:dd:2c:05:cc:c2:2c:d8:a1:0c:
6f:71:13:2f:8e:0a:9e:91:cd:ad:02:be:78:64:f8:
ef:b8:79:49:94:bb:aa:81:77:71:88:ff:78:6f:0c:
51:aa:7f:49:ac:e2:e3:59:ca:02:d8:ee:aa:e2:7c:
73:2f:71:2f:50:45:ca:c7:1e:e4:87:eb:0b:a4:b4:
b5:0e:7f:05:95:d0:ad:e1:8d:37:33:82:a0:72:4f:
e3:85:01:e3:e0:2e:e6:da:71:a3:9f:57:0e:50:db:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:97:F1:D5:7F:62:8F:6C:13:9F:2E:0A:49:45:F7:C7:DF:57:7D:CC
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:34:a1:3c:51:0a:0f:b8:96:1e:f8:7d:ae:39:50:2e:0d:22:
a0:05:a3:47:b7:af:9a:77:70:ca:1b:c4:ec:a0:15:a5:06:9b:
63:c9:2a:33:85:1b:9c:0d:cd:8e:75:6f:e7:55:48:11:44:cc:
26:96:8a:9f:12:f7:57:73:ce:6f:56:cf:3b:9b:55:8a:28:29:
b5:3a:04:4b:8e:40:43:6f:48:92:0d:3a:c2:19:5a:c5:12:36:
b1:cd:90:9a:dc:9c:6d:ea:c1:30:c3:8a:65:23:e7:a9:ec:dc:
74:28:5d:91:78:1d:fc:b8:28:2b:2a:ed:36:71:ad:b4:2e:54:
84:6d:9e:8a:02:b3:15:26:f7:dd:c2:5d:bd:d5:e7:38:07:e7:
4d:98:7d:18:37:28:ed:db:f4:68:66:4b:17:7b:cb:f6:d3:99:
d4:54:a5:6c:ae:1e:ca:e5:4d:65:55:3f:09:6e:0e:1a:15:e6:
db:96:05:6a:63:03:60:2a:06:db:6b:39:0d:75:e3:15:d6:22:
17:f0:27:e9:27:42:f1:65:ec:b2:9a:04:00:69:f8:f6:6b:2d:
b5:75:de:59:aa:82:97:74:32:2d:a5:ca:cf:8f:e3:1a:b4:55:
4e:27:36:3d:4e:0a:d7:98:70:bf:8f:4e:34:42:19:9f:35:e3:
19:00:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:08:11 2025 by rpki-client