Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
File: DkOg3wWaUlGkALWh8TIboA0xINI.mft (raw, json)
Hash identifier: +x4Cb7YTrfPavGoird3RdarvKOrJb4aTTZ1do42QsEo=
Subject key identifier: 32:EE:39:CC:F9:3D:62:B3:F5:6E:21:19:27:16:B5:06:48:67:77:7D
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 019853E8CD12B0CCA117B78D38A1932964EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 02:00:22 +0000
Manifest this update: Tue 29 Jul 2025 02:00:22 +0000
Manifest next update: Wed 30 Jul 2025 02:00:22 +0000
Files and hashes: 1: DkOg3wWaUlGkALWh8TIboA0xINI.crl (hash: h1iWOexPliE5t/awrcj6osDM0+X/BGj3HVhUkQpCc/g=)
2: meyQlZ2V2fFm7jP19tS1SnwZU8o.roa (hash: Rjzn7WIqlB0uqbC7++KFiY3Pm+Td1rmouk6fxkElj30=)
3: u8p2k1kowabt5V010HcHbUdny4A.roa (hash: +zIIZMzEVP0HgE88S7aeA3JokmowyYpTKNzs1+R3c2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:cd:12:b0:cc:a1:17:b7:8d:38:a1:93:29:64:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: Jul 29 02:00:22 2025 GMT
Not After : Jul 30 02:00:22 2025 GMT
Subject: CN=32ee39ccf93d62b3f56e21192716b5064867777d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:8e:6f:e1:6a:37:74:6b:a0:81:0e:bd:68:
83:11:b9:b5:c9:94:54:8d:21:3a:8e:33:46:8b:89:
89:4d:d5:8b:28:ba:3e:25:a1:06:44:f2:db:26:5e:
b9:65:cf:b5:1b:7c:0e:a9:ec:40:ed:5d:6f:d2:5c:
e9:e3:ce:fc:37:76:f0:f6:84:62:d0:e6:9f:c3:81:
e9:da:2b:43:78:81:4f:4b:d5:3c:6b:46:e3:55:60:
e5:53:58:4e:43:a3:a2:04:f7:ba:c2:ad:80:69:a1:
a6:34:f8:71:43:fd:0e:8b:0e:25:0b:f5:6c:38:59:
3a:56:4e:31:27:bb:8e:65:37:d3:e3:df:05:72:83:
99:a8:f5:ae:62:be:f8:0b:42:bc:ea:88:7f:b4:85:
37:a2:f1:9a:c9:d6:c5:cd:d0:ea:e4:b0:7d:ba:59:
53:06:fe:57:63:08:6d:fd:56:fd:82:ee:c4:7d:3b:
2e:30:97:bf:fb:de:00:02:3a:8d:8c:7a:6a:3c:c1:
e7:d3:73:95:05:5f:b1:dc:c0:0d:1b:a2:5c:48:f7:
4f:f8:4e:b5:d3:bf:6f:ac:86:0c:4e:99:63:34:96:
c8:cd:9c:04:ac:69:aa:46:67:ce:a9:09:98:ff:80:
9d:25:91:da:90:d1:5c:68:e9:6d:7f:6f:e4:f3:ed:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EE:39:CC:F9:3D:62:B3:F5:6E:21:19:27:16:B5:06:48:67:77:7D
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f9:d3:ba:61:b9:62:c1:cf:67:3d:f8:21:a0:61:b8:dd:67:
70:e0:c9:24:0c:73:c0:54:0d:80:b2:5d:18:8e:fb:07:3c:f3:
0b:84:dc:ec:2b:e7:4a:5b:79:79:ad:6e:b8:1a:94:46:80:cf:
67:85:80:a4:8b:3a:2e:27:bc:cd:bc:62:e7:1f:b4:48:b6:ba:
78:c3:44:60:68:83:6d:50:67:a4:d5:57:a7:11:e6:51:a5:3a:
55:41:21:77:73:b5:95:da:d0:cf:18:05:93:21:9c:84:15:c4:
db:63:23:91:b9:e4:aa:db:7f:90:6d:c0:0f:cb:05:e4:81:57:
86:f4:fa:16:a7:d0:04:10:3f:63:22:83:38:d6:e3:d8:3c:95:
49:69:6c:89:4f:50:38:69:58:82:8d:86:cc:01:ad:5d:1b:45:
53:22:4a:25:fe:5c:06:a5:f2:8e:c6:e5:3d:cc:a1:64:4a:30:
f0:18:7e:83:a0:3f:65:d6:ac:f1:d8:9f:2b:b2:82:e7:61:03:
49:af:4d:d0:68:73:a2:f9:f5:24:b9:73:46:cb:9e:5e:02:ca:
b5:1e:4b:c4:87:62:f0:1d:f0:8f:d4:9f:b4:50:c3:7d:b6:c5:
6e:44:fc:0f:7f:5f:ae:66:b3:0e:f1:7d:b1:7b:58:df:26:f0:
c0:6e:27:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:04:00 2025 by rpki-client