Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: oi+NBlBok9O2463JhyMeJB/wpAPp5LOkJH28mvOtpSg=
Subject key identifier: F0:9A:01:6A:E2:A5:A6:BA:20:16:5D:56:04:31:96:D4:51:EE:F0:C1
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 0AB62386A236E51185249FF526195C4364A491EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 0A
Signing time: Tue 05 Aug 2025 19:37:21 +0000
Manifest this update: Tue 05 Aug 2025 19:32:21 +0000
Manifest next update: Wed 06 Aug 2025 22:22:21 +0000
Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: 0zHH0/xjP+b7djCJ6fIpFt7wlJXtLSlJHlRPfOGxrrI=)
2: 3231322e362e34382e302f32342d3234203d3e203230343733.roa (hash: bd7pfUAPd2iEntBrKkW4CYU1BhJJKWx1CGTXOchFWn8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b6:23:86:a2:36:e5:11:85:24:9f:f5:26:19:5c:43:64:a4:91:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Aug 5 19:32:21 2025 GMT
Not After : Aug 6 22:22:21 2025 GMT
Subject: CN=F09A016AE2A5A6BA20165D56043196D451EEF0C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:63:08:16:f1:ca:9a:e6:7e:ea:1a:03:11:
16:a3:eb:22:17:a7:14:e3:13:36:62:01:87:e8:79:
80:b8:47:95:f0:66:21:2c:31:7d:ef:e4:1d:c3:3f:
b0:0e:2a:df:2c:52:71:b3:00:60:99:57:ca:65:5a:
be:10:e2:66:ee:1b:1a:c7:1c:91:2e:7d:ec:a7:a8:
a4:01:b8:0a:c3:33:7b:84:61:fa:97:54:93:4e:22:
dc:11:13:bb:48:31:8e:16:e1:ba:be:83:ba:ec:a7:
d5:7d:72:99:5e:3f:c8:03:2b:0f:90:38:32:8a:69:
37:07:0b:49:28:13:c4:9f:a4:54:3f:c0:34:b9:37:
4f:e8:83:bd:36:5e:22:43:f4:a1:60:d0:bd:f0:55:
58:b6:7f:fb:80:76:85:30:0c:59:38:83:48:4f:84:
9b:50:1d:c7:46:84:ee:d2:90:be:be:37:e9:da:92:
8f:f3:2a:c1:a4:e5:39:d0:75:6d:07:7e:bd:8a:0c:
11:61:1c:88:bb:bc:db:28:31:8b:a3:d8:99:d8:78:
6a:27:fc:bc:ff:d0:68:b4:6b:78:1b:f5:4f:ad:3b:
4c:cd:92:f5:99:6a:74:0f:6f:21:a6:ee:38:d1:3d:
9a:31:08:8c:6e:9e:78:8f:73:25:65:f7:95:84:66:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9A:01:6A:E2:A5:A6:BA:20:16:5D:56:04:31:96:D4:51:EE:F0:C1
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f8:85:e1:32:65:76:d4:d7:c0:bc:29:90:58:1d:3d:f7:2f:
a4:73:82:78:4e:e5:cb:53:d7:00:de:48:f9:d7:fb:e5:a7:f1:
21:e8:76:19:db:ba:16:87:7f:7d:42:7e:2b:3b:23:97:f8:68:
0f:c4:9e:23:26:39:db:64:2a:b4:0f:25:90:50:e5:b0:c4:8c:
c5:e3:a9:c8:37:75:a6:51:f4:be:4b:b4:d1:1c:f1:eb:1c:3c:
1a:a5:23:96:b5:32:c5:c9:3f:9b:99:31:45:92:17:48:db:05:
ae:22:41:c7:13:fd:73:57:d3:12:b6:69:df:48:d3:40:e0:05:
6d:6e:2f:ce:c1:d1:fd:f4:cb:d4:9e:ac:5a:62:59:ff:b1:7e:
48:92:3a:ce:44:1a:f4:17:ce:6d:fb:cf:a4:ab:80:f3:a9:0a:
39:38:74:bf:b1:a7:d7:74:2a:ca:25:54:31:5a:29:81:a5:81:
28:89:b6:ca:fe:d2:8f:02:8b:59:35:b1:f9:46:57:db:1a:ef:
59:45:68:5c:fe:3c:70:6f:f7:12:4b:9c:da:07:3f:ad:e9:20:
24:2e:c6:e7:97:ab:00:14:65:ca:30:8d:df:8f:ff:6d:bc:d2:
70:f6:cf:16:53:df:5e:ee:39:57:73:1d:52:b0:c3:ae:57:56:
a4:f3:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:47 2025 by rpki-client