Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: nSxAGtzp1wwhTl0wCHYwH62rnkiv7b07ERjlvhWlCvs=
Subject key identifier: 2D:2A:A5:8A:26:21:2A:56:C4:E5:B4:CF:5E:AB:DE:3E:4B:D3:87:9D
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 019921E80BA264853E08775C321F14A77BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0A30
Signing time: Sun 07 Sep 2025 02:01:19 +0000
Manifest this update: Sun 07 Sep 2025 02:01:19 +0000
Manifest next update: Mon 08 Sep 2025 02:01:19 +0000
Files and hashes: 1: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: mNqYbwoqinjvzWBe7n58wscO1E7zW8f+aBzjCKiceYE=)
2: O7YDGlReH1x3D0s7Ygr1Vy16MbI.roa (hash: WAs5UezYMvac542kW/ZhIkgbBXd8gscxgdqz/AR6xPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e8:0b:a2:64:85:3e:08:77:5c:32:1f:14:a7:7b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Sep 7 02:01:19 2025 GMT
Not After : Sep 8 02:01:19 2025 GMT
Subject: CN=2d2aa58a26212a56c4e5b4cf5eabde3e4bd3879d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0e:5e:1c:79:cc:7f:f7:31:6e:92:ea:9c:a7:
11:28:94:f2:dd:54:b2:88:96:63:c2:b2:d9:93:8e:
25:64:e1:9e:2d:c5:1f:32:63:78:7c:c8:ce:27:dd:
9e:0e:e0:c7:76:47:3a:48:8a:e0:fb:1d:8c:d5:d3:
fe:30:38:55:a1:0a:9b:a7:2f:46:a6:62:d5:e3:89:
69:a2:f7:d8:3a:b7:c4:1a:eb:ca:b6:a0:01:32:1d:
4a:c1:d0:09:b1:d1:69:44:6a:ac:d8:4c:34:e7:3d:
6a:6c:d0:90:5f:bd:e1:70:93:1c:df:30:df:ee:79:
5d:0c:2f:b1:c6:e1:73:da:ae:c6:58:63:46:dc:3a:
57:6f:82:3f:95:10:c3:0f:09:6a:23:ef:ee:09:60:
0b:04:27:19:32:8e:6b:ce:c2:2f:60:c3:13:4a:89:
9b:92:98:3d:cb:ea:46:4d:6f:43:a3:eb:e5:67:9e:
5e:0d:c9:99:6e:d4:be:e0:54:97:70:b1:55:8a:6b:
d2:0f:56:37:c4:35:eb:08:c5:33:de:f6:ea:20:43:
e8:fd:cc:c4:59:ae:78:96:fa:94:17:19:e0:5b:7b:
31:42:38:0b:9b:36:7e:44:8e:cb:73:02:1e:93:d7:
0d:73:4e:36:3c:0c:9e:69:c3:f9:4c:3e:08:c8:8e:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2A:A5:8A:26:21:2A:56:C4:E5:B4:CF:5E:AB:DE:3E:4B:D3:87:9D
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:44:a5:fc:8c:77:ac:c1:cc:88:b2:1b:1c:8e:b5:33:6a:4c:
73:cc:72:e9:88:11:c9:fc:84:45:a8:f4:02:51:15:0a:af:55:
0a:bf:5a:19:f5:91:b9:e5:01:b0:85:79:d1:e0:14:05:24:08:
1f:07:32:c9:51:2b:cf:39:41:5e:fb:f1:d1:84:07:88:87:0f:
53:c1:99:b2:66:62:9a:80:25:79:26:90:b2:24:65:20:fa:bf:
86:c9:78:10:f6:72:05:8a:1f:9d:81:9c:5c:29:e8:d7:8a:8f:
02:eb:f0:82:c1:9e:8d:7e:77:23:45:73:dc:23:3e:85:a5:30:
14:43:2a:30:b6:4e:89:50:d4:eb:9a:6c:fe:43:bf:53:ae:fd:
7d:7f:3f:8e:d4:be:70:1e:30:49:11:bc:15:2a:5a:47:8e:dd:
af:31:b1:9d:bb:ea:85:6e:e5:b1:b4:a5:16:05:e6:68:40:d4:
d8:64:e3:9c:98:52:3c:ab:0f:dc:32:9d:5f:cf:df:0d:18:db:
a1:dd:e4:a8:7d:79:73:fc:98:2a:15:f9:b0:a5:87:33:6d:db:
96:ab:f9:e8:26:59:5c:30:72:fb:34:09:f8:3a:6f:6f:cc:3c:
8d:79:81:66:0a:0a:99:42:5c:0e:eb:7a:a5:64:c9:59:48:23:
44:e7:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:48 2025 by rpki-client