Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json)
Hash identifier: P/Y3Hs7fQOJr0b7rxi8ah7L74YlVJDtcRKOwwqkoioE=
Subject key identifier: 65:E4:3E:59:E4:82:9E:AF:26:5A:06:37:34:7C:62:5A:41:95:8E:10
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 01984AE57EB2E3964514B4B9AF13B665A2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
Manifest number: 11A0
Signing time: Sun 27 Jul 2025 08:00:10 +0000
Manifest this update: Sun 27 Jul 2025 08:00:10 +0000
Manifest next update: Mon 28 Jul 2025 08:00:10 +0000
Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: DpJyCcs1qCgc0g/8xTHPCxR5yg5uF1exAibZZidiufg=)
2: ZaVHu31VAXDQEgbg1hmbQOB4eOg.roa (hash: EYijjQcoYf+HyMImzsoFjLR79h1EVyZb4ZUwNqCaoig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:7e:b2:e3:96:45:14:b4:b9:af:13:b6:65:a2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Jul 27 08:00:10 2025 GMT
Not After : Jul 28 08:00:10 2025 GMT
Subject: CN=65e43e59e4829eaf265a0637347c625a41958e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e9:b2:ec:7c:75:25:94:0b:8f:30:8d:9f:e4:
5b:4f:ce:8d:fd:20:b2:11:8b:88:aa:46:f8:63:b1:
b7:89:14:6f:bd:b0:74:f6:89:a1:e4:8b:25:04:78:
df:be:e4:b4:c0:6f:c6:cf:9b:71:12:2d:ba:e2:0e:
60:83:a1:8a:e5:ac:71:dd:1f:bb:ae:f0:bc:ad:e1:
19:51:20:87:d2:86:8b:f7:e7:4f:3f:6f:52:c6:62:
83:f0:45:c6:bb:82:89:1c:0c:bf:bd:c9:54:4f:d2:
0d:0b:9d:e8:85:f5:8e:ee:c4:91:d7:28:49:00:51:
55:32:5f:61:76:c1:7a:c3:ad:9c:e1:8e:83:65:24:
03:47:ba:eb:1e:9e:40:96:d1:36:b8:20:85:c3:ac:
cf:44:e0:2c:f3:76:6d:47:68:df:e8:01:30:15:96:
77:43:ef:b4:76:a9:93:9e:fd:e1:7b:1f:a0:fc:d4:
52:97:63:69:ce:fa:52:94:e6:e3:21:b0:ff:7e:3e:
82:fe:fb:87:28:50:b8:96:30:f2:ab:4e:46:73:96:
95:93:69:02:e6:e7:9e:32:e2:6c:b7:ec:fa:73:ea:
9e:1c:d0:b6:fe:24:3f:7e:2b:8e:b1:e6:fb:42:80:
bb:e4:17:02:64:24:24:1e:a6:32:18:3a:56:87:14:
20:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E4:3E:59:E4:82:9E:AF:26:5A:06:37:34:7C:62:5A:41:95:8E:10
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:71:58:a0:12:46:03:fc:4b:b0:7f:a1:8f:d3:75:bd:8e:1c:
3c:49:9b:ca:20:87:3d:c4:3e:9d:10:a4:ab:fa:ba:2b:f0:40:
6e:9a:ee:c0:3d:e0:8b:0a:0d:01:30:e9:ce:79:78:51:2b:0d:
bf:c3:13:02:99:25:16:57:1f:33:89:02:44:fe:ac:11:e3:84:
78:e1:95:ef:34:99:7e:fe:db:70:9a:fd:c4:39:e5:f3:52:e6:
94:95:37:d4:61:81:4d:71:1f:8a:e0:5b:b8:7f:21:9f:a4:28:
34:7a:71:e9:c9:dd:cd:4d:95:c7:12:cf:c2:aa:f4:0e:8f:f5:
5f:28:8a:9a:01:f7:a5:64:87:83:f8:19:64:82:0a:b0:4c:d7:
30:8c:c0:59:58:d0:eb:b2:70:d8:7c:2d:21:cf:2a:ce:42:35:
d7:02:fe:5b:d7:5e:d6:b0:ff:16:00:a7:50:ea:2a:61:bf:5b:
1b:82:56:28:d8:a6:cd:96:c4:a7:db:3f:5e:0c:02:3a:42:ad:
5d:4e:2f:77:a2:af:6c:c4:1d:22:88:18:94:b4:b7:f1:e2:4e:
fc:5c:a3:10:2a:48:76:4d:2c:0a:ce:7d:1b:cd:c1:a3:9a:85:
ec:51:2f:00:3f:35:01:44:f1:4e:b4:8e:de:3b:ab:83:9b:37:
53:13:bb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:32 2025 by rpki-client