Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json)
Hash identifier: B3H5KEgYqBSfW6a3G4mCXIhsGdVae5r0S+JsZu5vVV4=
Subject key identifier: EC:DB:FE:EA:1A:F4:0E:CA:30:70:23:67:DC:8C:90:8B:64:B4:62:70
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 0198933674930CC301DF5BC56E923A222069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
Manifest number: 11C8
Signing time: Sun 10 Aug 2025 09:01:16 +0000
Manifest this update: Sun 10 Aug 2025 09:01:16 +0000
Manifest next update: Mon 11 Aug 2025 09:01:16 +0000
Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: rXwaQTQNQKRNjKK7/vFbanmQM4OU7sBAqH1+6suQzK0=)
2: oZtEOJXg9u3YAV29kkGmNWg8F9A.roa (hash: ogCJpbFNRwq+SCRMavwkDAe0bS6yKHWqdkWMeWxeUro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:74:93:0c:c3:01:df:5b:c5:6e:92:3a:22:20:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Aug 10 09:01:16 2025 GMT
Not After : Aug 11 09:01:16 2025 GMT
Subject: CN=ecdbfeea1af40eca30702367dc8c908b64b46270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:f2:4f:db:6f:0f:af:8c:83:9c:e2:ae:d4:
f9:1c:1d:d5:b5:59:f5:dd:7d:4e:8b:9c:3d:64:cc:
62:4e:18:71:c4:86:60:0b:e0:05:85:22:e3:0d:34:
8b:fb:45:dc:c6:46:55:97:0c:88:31:c7:7f:55:21:
c9:1b:91:03:58:a7:84:c4:b5:b7:ed:89:e7:e0:e5:
1b:5b:b3:ee:00:40:1c:0a:03:07:18:3b:1c:4e:f0:
9e:1d:aa:20:48:6a:e8:8a:53:e9:8a:61:f6:3e:52:
d3:cf:6d:a1:1c:fc:e4:8c:53:a9:e7:6f:25:3c:81:
1d:11:57:4e:b4:8b:15:57:21:1d:d9:d3:19:7d:2d:
6d:aa:dc:f0:bb:63:dc:aa:27:85:0e:38:72:39:23:
29:df:16:92:26:b9:cb:0e:5c:b1:89:b8:95:f1:b5:
5b:2f:31:c0:f3:b9:20:53:8a:5f:af:52:08:1a:b7:
03:65:e8:86:74:ec:a8:d9:b5:0f:f3:15:10:e3:f6:
11:31:62:2c:57:4a:2e:3f:3d:b5:0a:07:1d:6a:20:
a0:05:0b:82:1f:74:a8:bf:86:af:f1:eb:77:7e:66:
2b:a3:35:78:1c:f7:5e:9d:2f:bb:8d:b3:38:4b:5b:
6c:e1:94:46:9d:3e:28:c0:ae:79:18:53:2a:ee:a1:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DB:FE:EA:1A:F4:0E:CA:30:70:23:67:DC:8C:90:8B:64:B4:62:70
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c0:6c:e8:41:2b:59:6a:83:93:1a:43:44:f6:4a:09:ef:e1:
7a:32:d1:5d:0e:3d:2f:7f:ae:72:45:98:4f:e8:4b:82:09:9b:
6e:8b:fc:30:88:11:cf:d8:5a:f2:75:66:42:8a:e5:30:99:69:
cb:4e:b0:8f:7d:8f:5b:37:10:01:d7:f2:a5:de:16:68:1b:09:
6b:db:55:ef:a7:e6:2e:4d:34:08:37:3c:9d:68:b8:e3:a1:d0:
81:19:1d:f0:9e:15:40:cf:40:1a:bf:0d:96:41:6d:85:5b:ae:
7b:4d:df:b2:af:39:c9:66:cb:ff:77:42:b8:9a:a0:21:85:a4:
48:2c:25:0a:9f:ec:b6:89:37:e6:35:fb:3f:a5:e8:3e:5b:91:
75:5a:e9:32:5b:9e:c0:a8:41:d3:bf:a5:31:9a:24:6f:fd:ff:
cb:56:0b:49:bb:4b:f9:41:ee:47:da:07:46:53:47:14:d8:e0:
55:89:3d:82:a1:b2:10:cb:16:22:f7:b7:09:c4:ea:8d:50:38:
86:7d:4a:a9:59:1b:c6:b1:21:53:66:b9:41:eb:dd:78:1b:1e:
b1:fe:56:aa:45:a4:d0:8b:27:e8:b6:a3:b5:c4:75:f6:1b:b1:
c0:fd:52:e9:e3:6e:43:43:b5:bf:9c:92:6f:24:d9:4f:14:14:
bc:cf:56:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:40 2025 by rpki-client