Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: fkJ0dKhUinvh95B7BrRti4l6CuOZsENwVyldkxitCl8=
Subject key identifier: 75:60:46:AC:81:0E:24:31:6F:02:11:A7:4E:A7:0B:BD:E4:62:7B:F5
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 01984776E746E4C0E8577234706BD6DDBAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 0A61
Signing time: Sat 26 Jul 2025 16:00:31 +0000
Manifest this update: Sat 26 Jul 2025 16:00:31 +0000
Manifest next update: Sun 27 Jul 2025 16:00:31 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: hIbjpkzPU0Xd5ayp2cdcXufWa+VjuVQMfzoRFq13PEw=)
2: oeUHXPRVWNrr1QJirrKSZQy6zrU.roa (hash: SxbvFYL3nEPIvag7xzWrtYfbRcEggJtZoR9CvV7aWPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:e7:46:e4:c0:e8:57:72:34:70:6b:d6:dd:ba:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: Jul 26 16:00:31 2025 GMT
Not After : Jul 27 16:00:31 2025 GMT
Subject: CN=756046ac810e24316f0211a74ea70bbde4627bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:2b:04:da:99:50:48:a3:ee:ab:ae:6f:ec:
64:5d:82:9d:a0:8b:3d:3d:bf:27:f8:f5:2f:99:15:
28:06:94:7b:45:35:8d:bc:e2:ab:70:0a:bb:7a:da:
98:1f:50:76:9b:d0:a5:9d:6f:da:64:02:94:41:7c:
95:8d:bb:a7:0b:26:44:2f:32:51:f9:76:24:b6:89:
74:85:94:c3:04:03:c5:90:67:b1:ec:e7:22:7c:72:
39:d4:49:63:35:7c:77:ee:94:79:78:69:a1:3c:b4:
6d:1c:98:12:1d:ca:c3:a3:26:59:77:7b:72:85:87:
b0:ef:ce:e6:0e:05:2e:ba:b0:7d:6d:bf:7b:d9:39:
38:74:f2:f3:6f:04:d1:3e:f5:55:34:d7:44:60:9e:
5a:8c:b0:34:e2:f1:57:8b:90:81:88:b4:df:bc:64:
b1:32:cc:64:bf:4a:01:5f:67:47:93:c5:cb:c4:05:
26:0f:97:9e:5d:c4:4a:31:82:c7:18:3e:a6:48:4d:
87:d6:8c:e3:2d:2a:1b:64:15:c0:4b:cc:9c:4f:09:
b0:a8:70:cd:3e:e5:5b:1b:39:26:fd:79:2e:18:ba:
3e:55:95:7a:84:1b:42:5f:5c:9e:34:5c:72:85:3d:
2c:04:6f:75:10:be:9d:77:e8:0b:7d:2a:dd:47:23:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:60:46:AC:81:0E:24:31:6F:02:11:A7:4E:A7:0B:BD:E4:62:7B:F5
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:04:23:8c:07:ef:9c:be:57:62:dd:f5:ab:d3:50:fc:52:86:
45:f9:be:02:cc:5d:20:94:91:ef:37:31:da:bc:89:bb:3a:db:
32:a0:6f:10:3a:de:1b:2f:3b:fb:48:66:d8:2d:bd:be:2a:bf:
7e:f3:1d:f8:cc:7c:5b:27:21:62:84:02:58:f1:3d:94:19:dc:
4f:b8:cb:38:1a:54:c8:76:f5:aa:9a:fc:fa:44:37:c3:4f:32:
28:ef:2d:05:f3:a5:a7:41:71:c6:1e:8d:65:10:71:7e:3d:58:
31:46:b3:fb:94:b8:79:b9:bb:1a:69:52:9a:b6:3c:42:38:de:
c5:04:27:0e:ce:89:10:6d:a6:0c:56:a3:6c:6c:d1:b0:aa:79:
26:69:26:c5:c7:fd:83:8e:1c:e2:37:56:b3:bc:d6:84:1c:0f:
68:f9:71:60:cd:c4:b6:0f:48:22:c7:de:aa:2f:58:31:69:90:
9a:59:dc:6e:4e:52:e5:6c:40:63:7e:69:8d:d1:31:8e:ed:a9:
a2:6e:ec:ee:9d:f8:05:0d:90:9c:71:b5:57:ea:7e:3a:93:0b:
3e:ee:99:ed:b3:60:34:3f:a0:3a:51:b2:a6:5c:7b:72:1b:a0:
cb:4b:73:53:5c:b7:7a:f8:24:d8:e2:77:31:d0:3b:88:fa:61:
0d:b4:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:02 2025 by rpki-client