Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: cGPL0BbcvnUmVdlFJhgYwuLRZs8mEHZHhtJ57l9D5fY=
Subject key identifier: 01:72:68:0D:D9:66:D3:A7:46:7F:63:2B:4A:2E:09:72:AB:B7:1F:59
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 01974BC49CF3277F7A09E92F22ABF43552EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 121A
Signing time: Sat 07 Jun 2025 19:01:05 +0000
Manifest this update: Sat 07 Jun 2025 19:01:05 +0000
Manifest next update: Sun 08 Jun 2025 19:01:05 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: /4LnWq8/qTu+8vJpvbjB//Uk2Ky3lQd7ncUfCcNm93k=)
2: 7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa (hash: 8HGos2aeHkG0saEvUQyEseTwmsTJnTnE4JuY9jxzUVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:9c:f3:27:7f:7a:09:e9:2f:22:ab:f4:35:52:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Jun 7 19:01:05 2025 GMT
Not After : Jun 8 19:01:05 2025 GMT
Subject: CN=0172680dd966d3a7467f632b4a2e0972abb71f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:b1:f7:14:4e:5d:6f:33:84:46:af:e6:9b:
0c:47:37:ff:24:30:f9:3b:0d:e2:32:d9:1e:11:ad:
f5:f8:1d:c7:fc:71:dc:5d:60:bb:fc:81:65:38:39:
ad:f7:19:08:57:3b:61:07:fd:90:4c:7c:d7:64:9f:
fb:48:b2:2a:9a:5c:54:ff:75:8f:a4:0a:13:1c:3e:
b1:b5:23:0a:a0:e3:73:08:8d:af:77:8f:46:04:e1:
52:ae:5e:0c:63:9b:ed:71:6b:99:37:d2:42:bf:ef:
2f:e3:94:30:9d:dd:12:49:3c:f6:42:2b:f4:59:de:
c3:23:f1:4e:8c:ab:a9:88:90:89:88:34:e1:2d:73:
12:ce:59:31:f0:ba:11:63:50:11:28:01:81:c9:7c:
68:af:b4:a3:e1:9d:b2:8a:13:d4:e6:ec:ac:a4:fc:
a1:8b:4f:f3:ba:7a:26:09:bf:81:a6:2e:b5:ae:1f:
3a:c9:1c:04:49:4e:b9:14:52:42:23:22:36:98:ff:
98:ae:12:c4:88:df:f3:fa:8a:cc:1b:9c:9c:2b:98:
37:c1:c7:10:bc:e7:2c:f1:c4:09:a6:16:d6:67:1e:
d5:44:75:0d:d9:09:26:f5:fb:70:ad:af:8e:af:01:
d9:5e:49:4e:d4:03:9f:41:38:0b:37:a9:6b:f4:1d:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:68:0D:D9:66:D3:A7:46:7F:63:2B:4A:2E:09:72:AB:B7:1F:59
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ad:37:a3:41:7c:cf:73:c4:e2:6f:f8:08:02:76:35:05:02:
52:73:b2:ff:b8:d4:eb:06:ec:8b:9e:15:d6:5b:50:7f:44:25:
72:89:74:64:bb:39:3d:7f:77:b4:52:6c:da:41:6f:08:f4:9f:
7b:77:91:37:2c:bd:06:ec:df:55:48:30:a5:32:1a:1e:19:5d:
06:35:1e:83:5d:c9:9a:8e:8b:08:74:82:5c:02:8b:7f:11:fe:
42:b0:86:29:71:1a:07:af:60:d4:1b:55:bc:dd:f3:6c:69:53:
c2:4d:2d:48:c2:6e:34:22:a4:84:08:0e:64:15:35:03:9f:01:
ee:11:78:a9:a2:08:50:75:62:15:25:87:2d:3f:e6:91:29:49:
4c:18:bf:e2:dd:22:eb:6c:1a:24:9f:22:fe:d1:39:7e:41:ac:
02:1a:a2:f5:8b:2b:5a:76:85:6b:67:ea:42:82:53:4d:5c:d4:
ef:ae:54:6b:f0:12:a2:f7:19:bb:43:18:a2:aa:ed:44:ac:05:
57:0a:0c:87:13:31:44:fc:bb:0f:32:2d:45:08:ee:17:5f:f4:
87:05:5f:09:14:3f:bc:23:c8:0f:8a:aa:ce:ce:4e:39:f8:99:
de:27:2c:79:bc:64:c9:33:5b:3f:63:32:0e:5b:6b:95:46:18:
4f:f5:bb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:31 2025 by rpki-client