Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: rkcQku2y4xEmKyHpF4E9q9IZ1B4NATAwccHGkKUxM7M=
Subject key identifier: 65:CC:E9:3E:77:DC:E8:1F:83:30:72:C7:B7:CF:1E:1B:A0:F2:28:EF
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 019843D0BF25C1608676E2B65CBF4A90EA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 08F0
Signing time: Fri 25 Jul 2025 23:00:10 +0000
Manifest this update: Fri 25 Jul 2025 23:00:10 +0000
Manifest next update: Sat 26 Jul 2025 23:00:10 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: raEp7b6iSO4Nkz8NtHYaA5H9vvBnfLDy19+gs1hxnEY=)
2: 3t2rbtcOEw5sD7uRjCXTPR4SMU8.roa (hash: oLSU3YNaGRS7ljQgete6uiDJRLwSKNoaWdOvOIOXxdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d0:bf:25:c1:60:86:76:e2:b6:5c:bf:4a:90:ea:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Jul 25 23:00:10 2025 GMT
Not After : Jul 26 23:00:10 2025 GMT
Subject: CN=65cce93e77dce81f833072c7b7cf1e1ba0f228ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:33:57:6c:47:98:1c:e2:05:2c:28:83:2e:
36:9e:81:9a:3a:1d:1a:9d:e5:45:ed:87:8e:6d:03:
dc:8c:9d:5b:19:f9:dd:5d:e8:3e:89:9c:0c:8c:25:
fc:25:eb:bf:8a:5d:d1:61:c9:2f:45:08:94:af:48:
df:01:a2:55:6f:38:4e:83:53:7f:a7:0a:79:0a:d7:
6b:c2:ca:a3:b4:c6:b6:60:80:41:f0:57:91:ea:4b:
54:aa:e4:17:59:d7:d2:bb:ad:db:07:87:60:cc:fe:
04:68:01:ce:cb:d6:e8:f1:e9:5e:c0:fa:f0:13:61:
13:06:56:f0:c3:f2:f3:e4:a0:90:8c:79:f3:eb:bb:
b8:13:8c:91:a2:bf:bb:5e:bd:92:ed:16:1c:3f:76:
9b:fb:13:f7:9c:b0:2c:71:58:c6:9b:53:ee:16:b4:
0f:97:b4:08:0b:b4:4a:82:08:c0:a2:46:8f:02:e4:
3b:a1:4e:fa:1f:5a:a9:4e:81:29:2f:50:a1:a2:ce:
07:84:11:b8:81:5c:39:8b:55:a2:1c:e6:1a:c9:d3:
4f:cf:f4:2a:95:11:d3:2a:f2:a3:47:4b:0f:33:6a:
b1:78:cf:81:8c:27:68:e8:83:1b:d6:25:f2:2a:9b:
43:cd:3d:20:8d:ec:ca:c0:9c:a3:ee:fb:bd:8a:a0:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CC:E9:3E:77:DC:E8:1F:83:30:72:C7:B7:CF:1E:1B:A0:F2:28:EF
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e6:3d:f0:5b:ab:57:2a:36:c4:a1:7d:7b:b7:d7:a5:d8:92:
28:32:70:69:0a:67:d4:fb:ab:10:7f:ce:dd:df:a1:55:25:8d:
fb:0c:a2:4f:68:6c:6d:fe:9a:b9:6c:06:86:c4:d0:73:a6:ea:
13:31:65:04:e2:45:76:54:13:bc:8e:3c:76:35:f3:96:65:a4:
21:66:dd:b1:ba:65:c2:9e:0e:c9:0f:35:33:cb:48:98:45:1e:
97:cf:cd:02:6d:a2:84:10:7a:e3:90:fe:5c:a7:b1:ea:25:f9:
ec:1d:cb:5c:6e:f9:52:e7:cc:dd:fb:90:8b:00:d1:b3:31:4a:
57:31:6b:ed:50:54:fc:ec:2f:be:9f:67:7b:98:59:3c:fa:c3:
dc:35:c8:5e:f8:96:e5:2c:18:c2:d8:2a:e3:50:fa:e4:a0:de:
ca:e0:63:3c:b1:61:e4:fd:79:4c:e8:39:84:41:da:43:ab:58:
e1:c5:75:a9:c6:48:13:78:13:dd:35:6e:1f:37:d6:c5:04:ee:
af:05:11:9f:13:6e:1d:4b:dc:2f:21:c6:aa:47:6e:2e:f7:3a:
5e:b7:19:5a:08:18:61:07:5b:dd:cf:e1:75:44:0e:d9:cb:87:
fd:b9:47:26:15:98:a4:89:40:6a:33:1b:d9:66:07:7b:4f:4f:
84:bb:dd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:12:09 2025 by rpki-client