Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier: /eysW5pGnCZN4UnJzeXdxzi+uSoPPBCkVm0LsMgaWDA=
Subject key identifier: 52:86:43:55:EB:92:15:14:04:10:AE:14:89:9D:75:F1:0D:4C:30:CC
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial: 01984B53659663F5EE130C94C3D3A27E2395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number: 08A3
Signing time: Sun 27 Jul 2025 10:00:13 +0000
Manifest this update: Sun 27 Jul 2025 10:00:13 +0000
Manifest next update: Mon 28 Jul 2025 10:00:13 +0000
Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: LjNxbtClTRf1AQcbrF2rHWFujFIPnN/j+Zc4Crf5Xzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:65:96:63:f5:ee:13:0c:94:c3:d3:a2:7e:23:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Validity
Not Before: Jul 27 10:00:13 2025 GMT
Not After : Jul 28 10:00:13 2025 GMT
Subject: CN=52864355eb9215140410ae14899d75f10d4c30cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:92:3f:8d:bc:cc:23:4a:73:93:5b:37:32:92:
3e:97:7c:d0:da:9f:83:1d:ce:c8:f6:ea:36:b9:c6:
2e:cd:e2:b2:15:6e:63:f0:02:c0:28:12:8f:11:6d:
06:b8:da:63:64:c6:df:c7:fb:97:fe:2b:9c:9a:7f:
87:cf:9b:89:17:47:82:f3:27:a1:f0:13:ed:96:cb:
ea:1d:88:a8:58:a5:bf:ae:79:a3:dc:02:c3:f7:a4:
e3:1a:c2:49:0d:d9:cc:cb:c5:40:06:5a:71:f8:6c:
ef:c7:e6:d7:34:62:3f:1b:fa:27:a6:fb:5a:24:84:
21:21:d9:14:39:29:d1:ef:11:fd:54:f9:04:f4:b2:
1e:a3:5b:1e:ca:7a:0d:43:bd:5b:82:8b:2e:ca:0f:
f7:d1:7a:1d:a4:38:86:e3:f1:90:a8:10:08:8a:db:
ee:79:48:eb:64:65:3d:37:c7:8f:e0:e9:32:bb:62:
35:fc:98:c3:31:88:1a:af:2d:28:85:b7:fc:78:e5:
68:f4:af:01:4c:15:1a:bc:81:50:9d:94:e0:f0:a5:
bd:09:fa:4f:30:19:58:0e:9a:5f:59:ef:3d:cc:da:
99:76:51:f2:56:41:14:7d:d2:40:f3:7f:a1:07:58:
50:87:c2:6b:24:fb:8e:c3:ab:a0:e8:6e:49:54:1c:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:43:55:EB:92:15:14:04:10:AE:14:89:9D:75:F1:0D:4C:30:CC
X509v3 Authority Key Identifier:
keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:51:0f:d2:27:2a:04:52:ab:b7:a0:f7:b6:56:95:cc:c7:45:
62:10:82:16:85:0e:13:a1:1d:e3:ba:6a:b3:f7:ed:23:f6:f1:
c4:64:98:ec:5b:25:38:6d:91:84:8e:0e:23:e7:3f:f4:45:51:
4a:b9:82:c1:85:81:c4:2e:49:0b:93:5d:ab:25:ff:c2:93:2d:
55:34:0e:c6:4f:ce:1d:ac:a1:33:a2:1f:c7:0e:a1:17:d7:8f:
61:9c:a7:02:1c:cb:13:2f:f3:06:73:ec:a0:f3:79:90:dc:6a:
35:fa:a6:e1:af:e0:0c:f4:22:69:ce:c3:1c:74:f7:af:f6:aa:
9c:77:7b:48:cd:f6:58:23:29:06:61:1f:88:e6:77:92:80:ce:
6f:09:e7:a9:8b:0d:a1:f5:73:c9:85:24:4a:6c:a4:97:97:24:
91:01:6b:fe:0f:b3:a2:28:29:a6:6a:a0:49:22:52:c5:9f:9d:
78:e4:0b:61:75:ea:92:0a:32:1b:03:5c:ec:f7:03:9a:5e:80:
a0:8f:7b:47:f5:3a:9c:06:3e:61:50:53:d0:1a:e4:63:5d:be:
15:50:5f:96:32:a5:a8:0e:fd:e4:40:ca:98:98:bc:6a:9b:ed:
6e:30:2a:6d:ce:47:52:50:d9:67:4f:44:25:c4:15:04:50:2d:
1a:17:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:43:04 2025 by rpki-client