Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
File: DbPDFk09jCZEzymzI2dhpXHuWLo.mft (raw, json)
Hash identifier: RrnCu+jEM8L2Jz/jt3/gBjGBSy9EIYP2KhR6mdv7ZIM=
Subject key identifier: AA:8F:BE:5D:3C:67:A5:8B:EA:82:DE:D6:46:EF:62:2D:38:0C:58:A1
Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Certificate serial: 01984BC18BF0F46E611C2B7807AE3DAC1069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
Manifest number: 0C09
Signing time: Sun 27 Jul 2025 12:00:32 +0000
Manifest this update: Sun 27 Jul 2025 12:00:32 +0000
Manifest next update: Mon 28 Jul 2025 12:00:32 +0000
Files and hashes: 1: DbPDFk09jCZEzymzI2dhpXHuWLo.crl (hash: 6G4KcAGOqE+cfdMq0dJoTgZIxPnxALoIy8KjBbdvPTA=)
2: VCOPnV4kZuweFLb_llPPHRAXNUA.roa (hash: cRLhBmbu/yT6hrLfR7qsKhKnC8knJg7oOO9Ome0I9Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:8b:f0:f4:6e:61:1c:2b:78:07:ae:3d:ac:10:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Validity
Not Before: Jul 27 12:00:32 2025 GMT
Not After : Jul 28 12:00:32 2025 GMT
Subject: CN=aa8fbe5d3c67a58bea82ded646ef622d380c58a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:72:00:c2:67:fc:2e:79:e0:f2:3b:c8:cf:
10:fd:f9:93:fd:b9:2b:0d:96:40:bb:87:26:96:59:
9a:a2:b4:62:2a:e3:0e:3e:14:a2:e0:e3:e0:62:c8:
4a:a3:35:e7:a6:23:77:d8:61:11:a1:16:6d:c6:4e:
1e:2e:12:95:92:60:4e:70:84:2d:9d:78:7e:9f:cc:
13:90:d9:d5:64:17:46:92:7d:c9:e8:6e:a0:65:ff:
94:ba:eb:66:12:8a:e7:a7:35:d6:ed:9b:5e:1b:f2:
ca:c7:1a:5a:64:b1:83:ed:26:da:eb:f2:da:bc:65:
d5:67:d2:0d:f2:18:cf:e7:aa:f2:b6:cd:fc:02:31:
3e:b3:fc:fd:87:01:f0:04:09:bf:66:10:0c:17:38:
cc:6e:66:8a:d1:a2:ed:30:55:4d:5f:d2:cf:d3:86:
49:7b:6f:ca:4c:b0:fd:5b:b9:c6:b1:57:8c:bd:c8:
5e:eb:2c:13:32:5c:91:dd:b4:3d:31:d8:c7:a2:ad:
29:0b:24:0c:67:9b:ea:1b:6d:8e:a8:62:50:1d:56:
55:3a:ab:34:2a:3f:9c:27:af:16:c0:45:61:27:c8:
f8:12:82:73:07:71:c3:3f:e4:0e:69:2e:00:cd:16:
9a:59:8d:41:79:7a:56:cf:4b:be:ec:65:38:ae:8b:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8F:BE:5D:3C:67:A5:8B:EA:82:DE:D6:46:EF:62:2D:38:0C:58:A1
X509v3 Authority Key Identifier:
keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:99:e8:c1:bb:1d:bb:d5:80:29:2a:72:2d:41:08:ff:b5:6b:
72:db:c7:f4:b4:8a:4d:bb:ff:4a:47:ff:47:2d:d8:e0:63:57:
62:4e:ae:bb:c6:b6:80:cc:91:bd:fe:f6:04:42:4f:b6:13:dd:
8f:56:dc:02:48:82:c4:27:f2:8d:ac:d4:a4:e1:3f:75:89:38:
9d:be:e8:9f:2b:a7:ce:e2:98:8e:01:c8:e6:2e:e4:7a:c4:3c:
8e:6c:bd:66:cd:96:75:27:25:49:85:e9:27:de:8e:15:9b:c1:
27:f3:8b:d4:a4:48:6f:4f:87:13:ee:80:4b:ff:4d:3e:8c:bb:
be:a9:3d:c8:e0:75:9e:55:95:2e:8b:42:08:b8:05:fe:73:5c:
7b:8e:97:15:58:e9:8c:93:26:23:ea:ed:0f:69:88:a1:5d:62:
9d:ea:7e:d0:46:84:c9:3c:cb:fd:38:bf:cb:ab:0b:19:3e:09:
be:d4:98:3e:02:e8:4d:74:9c:9a:17:d4:df:68:6b:9a:0c:08:
b5:82:61:3e:4c:bd:4b:d9:5a:10:63:a6:77:92:64:0c:ee:71:
b6:7a:52:30:7e:f8:d0:12:a9:de:99:fd:07:d4:b0:70:f4:b8:
8b:bd:5e:d1:5d:f9:d5:8b:59:11:78:ac:e7:2c:08:a2:74:53:
48:37:b1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:10:40 2025 by rpki-client