Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier: YwkTEnKrfY/Z7fmv3fHjQ60921cKOQTfuklaa/K9D+o=
Subject key identifier: 72:40:07:88:34:28:5E:91:36:AD:E4:7C:54:36:66:6C:B1:C8:F2:24
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 019848F757EA7CFD48B4F092FA706CA720DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number: 13D3
Signing time: Sat 26 Jul 2025 23:00:26 +0000
Manifest this update: Sat 26 Jul 2025 23:00:26 +0000
Manifest next update: Sun 27 Jul 2025 23:00:26 +0000
Files and hashes: 1: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: xRch+1YiIqxcvqj6n3fImMQV5NkNHFhrESjk/nqqR/U=)
2: xjZ1XJhW_cFPR3oT-Y__-eT7BLU.roa (hash: iqLiaW6nsbh481RYQHU8cc/w97YkMP9DpENBWhWu8os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:57:ea:7c:fd:48:b4:f0:92:fa:70:6c:a7:20:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Jul 26 23:00:26 2025 GMT
Not After : Jul 27 23:00:26 2025 GMT
Subject: CN=7240078834285e9136ade47c5436666cb1c8f224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:ce:03:bb:9f:d6:f7:22:31:e0:de:88:db:
71:0c:71:f9:78:5f:07:bd:28:e8:1f:a7:2f:14:c5:
97:ca:a0:20:56:69:d5:0b:e1:76:5a:df:c3:eb:60:
7b:4b:96:f6:a5:4e:ff:42:2c:f1:e0:ad:4d:08:a8:
98:56:19:33:60:d9:8a:52:9e:9c:73:cd:f2:9a:0a:
0f:f9:8a:5a:cc:c1:f2:3d:8d:cf:0e:4e:70:62:02:
2e:70:22:aa:b9:54:bc:a4:45:b0:3c:a5:bc:71:ce:
4b:55:f6:bd:a9:aa:e3:43:b8:93:3b:f1:10:e2:89:
3c:15:24:6d:65:a9:59:1a:b8:0a:a4:63:fd:75:59:
c0:8e:2c:4c:8c:e1:72:68:db:1d:13:de:e5:00:83:
e1:d0:c8:b5:c1:11:86:6c:44:c1:75:c5:47:31:8f:
5a:7c:74:2c:22:4e:ea:2a:82:24:53:97:1f:1c:82:
be:b4:8e:e4:95:e9:54:9c:b8:67:76:e8:a9:3c:37:
e5:40:c1:12:85:c7:f5:40:a6:3b:1f:2f:29:4d:b8:
46:ca:58:f7:53:13:79:da:34:74:6c:52:ba:b6:b8:
a0:5d:9b:40:fa:bf:34:e2:78:7a:f3:e1:ae:88:b4:
a5:3d:f9:90:6c:05:5a:83:08:4d:48:0a:39:4d:b5:
39:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:40:07:88:34:28:5E:91:36:AD:E4:7C:54:36:66:6C:B1:C8:F2:24
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:59:4a:73:49:fb:d9:48:38:ed:95:08:a9:e9:29:6a:98:b4:
ab:5a:fc:1a:4c:ee:97:7b:ca:59:7e:7c:30:31:ef:19:c6:c0:
02:b1:eb:2c:2c:76:fd:7b:06:4e:10:e4:05:88:ef:64:c7:b6:
42:70:04:d6:e5:51:b1:34:e1:c6:ae:b7:3e:31:d7:08:56:b3:
2b:88:b0:75:92:34:39:1c:26:bb:20:09:1f:3d:8c:58:fa:12:
c4:80:9b:5b:3e:5e:fe:1e:af:b4:10:52:b0:ed:64:30:8c:b0:
f8:c3:da:1b:2b:f4:72:be:10:4b:66:57:7f:32:7f:a2:f1:ff:
8d:a4:c7:f4:a8:a7:36:07:21:88:9f:ca:4a:22:af:a5:cf:20:
7c:a9:1b:6f:85:12:0e:3a:b6:7d:75:3d:f1:52:59:00:bb:72:
a6:af:f6:62:3b:c4:30:cb:3f:b2:93:3a:71:e7:49:64:8b:33:
57:0d:a8:79:c3:3c:4a:72:d4:7a:f6:03:b0:22:22:72:a6:f2:
7e:9c:8a:7f:c9:73:e4:0f:d7:a5:b4:ef:60:b0:22:f9:4e:89:
d3:d6:de:41:3c:05:0d:32:24:cf:3c:7d:0c:89:66:4a:67:59:
58:30:18:67:7d:0a:2e:f9:f6:13:f9:f5:0a:0d:21:94:06:87:
52:08:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:44:34 2025 by rpki-client