Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: FT3yokkaRdcyMUhpcRG93q87arleRXNdEbGN59kLP7M=
Subject key identifier: 58:7E:5B:A9:DC:24:83:C9:D6:3A:2E:80:8F:6E:32:16:B3:05:A2:A7
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 01984A0A69716649DBEEC1D6B7377E7F05EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 0985
Signing time: Sun 27 Jul 2025 04:00:53 +0000
Manifest this update: Sun 27 Jul 2025 04:00:53 +0000
Manifest next update: Mon 28 Jul 2025 04:00:53 +0000
Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: a8ZEOBIezXuiYlB0Bw9T2wWRbPM9Yw8/rp7JP4Gw948=)
2: _2hrxKKbdmRyLOnHUiOQipQACXY.roa (hash: DxOyoU679BPpOs0ffrHVPaZuK8yvllJ+3WIdB3uJM5Y=)
3: t16GyUN0G0ERD6SmYA9i0r30zic.roa (hash: oKvu0HJILKuRj6gBGrcQg1IlSuH1C1Ay4XKjgYCj9is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:69:71:66:49:db:ee:c1:d6:b7:37:7e:7f:05:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Jul 27 04:00:53 2025 GMT
Not After : Jul 28 04:00:53 2025 GMT
Subject: CN=587e5ba9dc2483c9d63a2e808f6e3216b305a2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:6c:0e:f5:00:cf:02:41:09:9c:21:71:08:
d1:d7:b2:f8:32:34:37:fd:2d:9a:3f:bc:76:e2:f1:
69:3b:e0:4e:3e:ea:d5:e6:bb:25:89:3d:24:54:9b:
1c:4d:4d:89:47:87:f8:04:36:77:5d:a2:7b:af:99:
53:c0:51:95:95:49:95:44:f7:c7:b4:d9:da:35:d1:
31:8c:a7:36:89:ff:38:6c:46:8d:05:74:19:b6:03:
39:5f:c8:29:6f:1a:99:a8:08:2f:d3:b8:1c:09:00:
8f:52:57:99:79:be:6b:4c:66:31:a1:29:40:30:66:
a1:18:1d:8e:cf:1c:8e:0f:5b:c2:ee:17:e6:92:3c:
d0:a0:c4:f5:30:fc:12:e6:cb:44:49:8c:c4:ae:af:
24:bb:6c:b5:5a:81:c2:e8:9c:69:9a:52:79:3b:85:
de:47:4a:dd:6f:f6:26:6d:10:5b:24:70:3e:18:9c:
86:54:d6:1e:5b:b2:6c:08:e5:22:50:f4:d7:21:f7:
4e:36:de:97:88:e3:9c:44:49:81:c0:4c:30:81:3b:
cc:91:de:f3:ae:97:a1:bc:54:e1:df:8a:6e:d7:62:
5b:3d:98:36:fd:a5:1b:10:e7:37:e2:07:05:09:dc:
97:c8:a8:aa:8b:09:12:3a:d1:f7:0e:38:b8:aa:bf:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7E:5B:A9:DC:24:83:C9:D6:3A:2E:80:8F:6E:32:16:B3:05:A2:A7
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:88:65:ed:1b:00:ee:a9:2a:21:35:88:32:14:f3:c7:81:da:
a3:16:6b:11:c0:08:3c:6f:6c:7e:51:bd:3d:bc:2c:f6:84:4a:
87:5c:be:e8:3a:aa:a6:a2:ac:c1:fc:bb:78:34:83:0b:7f:33:
42:89:79:54:e0:67:d7:b1:56:c2:28:41:6f:1b:c4:46:38:30:
f4:81:aa:a9:09:b0:3e:d2:a5:df:c1:50:cd:69:c6:ad:15:ae:
12:eb:3c:53:ef:6c:34:d4:36:1d:45:a9:54:10:c2:a1:93:86:
fb:49:e2:3c:e6:df:f2:b0:42:6c:b9:c5:ac:0c:a7:42:31:d9:
78:5e:31:27:e4:9e:f1:3e:d6:33:e9:45:d4:17:f4:28:ed:79:
62:4c:6f:35:dc:5f:21:ed:f2:fd:69:43:8f:41:3e:0d:87:6b:
42:ac:bb:5d:24:65:1f:43:c5:37:fa:b4:c4:86:aa:1b:31:c9:
69:67:29:d1:65:13:53:a5:61:6b:6c:50:c8:7a:7d:e6:0a:33:
d9:6d:d1:52:da:3c:b6:bf:f6:3b:5c:d2:2e:39:53:76:9d:17:
f9:04:32:bf:83:8b:ba:3d:01:32:ff:07:59:4f:3a:4e:28:24:
d7:57:22:27:90:56:f6:74:95:1b:db:2b:c4:ad:e8:3f:10:b4:
e0:3f:85:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:17 2025 by rpki-client