Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: lsSlB9J23u1JXcT8JFGc5Ap0a1hd0vtPLNUdLXxdBa0=
Subject key identifier: 1D:F5:A3:56:B2:7D:6E:79:83:FA:7C:B9:56:07:6F:F5:4B:E6:5D:B1
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 0198526862BF8463DE7F3F7337F7E035C825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 12A2
Signing time: Mon 28 Jul 2025 19:00:29 +0000
Manifest this update: Mon 28 Jul 2025 19:00:29 +0000
Manifest next update: Tue 29 Jul 2025 19:00:29 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: 2SrcwSOa2irKA6WyUdHidPElj7QHwdcd0GbIi+9DDXY=)
2: 7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa (hash: 8HGos2aeHkG0saEvUQyEseTwmsTJnTnE4JuY9jxzUVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:62:bf:84:63:de:7f:3f:73:37:f7:e0:35:c8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Jul 28 19:00:29 2025 GMT
Not After : Jul 29 19:00:29 2025 GMT
Subject: CN=1df5a356b27d6e7983fa7cb956076ff54be65db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:b4:2c:c0:34:55:97:7c:bf:ac:75:17:72:
53:c9:4d:92:d5:b7:8c:18:4f:cd:b1:d9:70:ce:2a:
e6:75:de:0a:cb:4f:ee:9b:1c:8a:c0:aa:be:62:13:
73:ef:1d:7e:7e:ba:fc:1c:b4:e7:50:ea:d3:a0:84:
f9:99:6d:a1:ab:2a:2b:c9:ac:8e:81:7d:2e:80:7d:
9b:60:1b:7e:5e:ef:91:69:9b:5b:62:56:10:8f:61:
9a:16:3b:28:89:d6:c3:75:5d:45:b9:e7:0c:a9:71:
3d:d9:0f:2f:25:ad:86:34:d0:0f:d4:9f:8e:82:ec:
ac:a3:d2:52:fa:75:d1:2f:0d:17:e4:0f:63:2a:3a:
a1:c8:8c:6d:81:6f:8d:24:53:14:bb:36:1c:dd:92:
3b:15:f8:07:1c:d5:4f:73:c4:5b:23:cb:18:0d:13:
ed:ed:cc:5f:dc:e5:68:2b:b0:f0:da:83:a2:ef:fc:
71:47:d5:ca:f7:f7:e6:97:e6:32:5a:33:dc:73:d2:
e8:c2:51:14:10:23:94:39:67:f9:7b:cc:4c:18:bf:
ca:cd:22:40:33:e2:ab:9c:7c:4c:9e:57:59:bf:d0:
7e:ad:c3:08:57:d4:6a:1f:e1:d3:0e:da:67:a4:6a:
e5:03:f4:d1:01:9c:d6:06:7c:51:7f:76:c1:43:d5:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F5:A3:56:B2:7D:6E:79:83:FA:7C:B9:56:07:6F:F5:4B:E6:5D:B1
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:58:03:90:c2:24:da:f8:c0:c9:0e:72:19:9b:ae:c8:ac:34:
4d:cb:bf:01:45:36:2d:a0:fa:b6:8a:26:37:39:3b:56:de:f5:
09:c4:60:29:26:0d:eb:58:d0:91:6a:02:62:1f:f0:95:fb:e7:
1c:ac:80:c9:a0:be:04:3c:f7:2d:ef:dc:cd:c1:8b:66:f5:5f:
bc:0e:aa:49:04:23:8e:ca:63:8c:eb:58:57:d4:88:11:55:c1:
7b:43:e0:34:e2:d4:ca:b0:ae:58:fb:cf:19:28:6c:61:03:3b:
5b:2c:2e:33:9f:f0:97:5c:fd:2d:1e:92:93:8e:cf:fd:36:3e:
f0:51:ac:16:0e:47:6d:36:17:cf:fc:cb:35:e0:3a:fb:f1:2c:
ed:4f:c8:7a:67:77:ad:27:3d:0a:38:42:1a:d5:0a:88:52:29:
f1:73:63:e9:23:6b:52:9f:07:eb:8e:60:28:73:f9:d2:23:eb:
5c:af:aa:c2:d9:8f:65:43:b1:db:9c:66:e6:1e:3b:62:19:fa:
4a:99:f0:18:13:7f:47:c3:4e:03:c0:5a:00:79:ce:e1:31:50:
2f:33:e6:cb:c0:55:f6:30:f9:5e:2c:db:17:39:7e:fe:74:31:
19:65:3d:45:ba:0e:7c:67:82:38:4e:8c:b0:d8:b7:a6:ca:22:
98:3f:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:51 2025 by rpki-client