Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: BD6iDLHa3B8RPkaegSqljJlSaHuhnw2IK607Jt29hj8=
Subject key identifier: 16:46:29:54:01:41:AD:DB:A0:31:D4:5C:54:50:E2:62:99:7E:E8:66
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 019A187393205EB614C5D383FFED3F6734EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 097F
Signing time: Fri 24 Oct 2025 23:00:18 +0000
Manifest this update: Fri 24 Oct 2025 23:00:18 +0000
Manifest next update: Sat 25 Oct 2025 23:00:18 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: xlZn0MHOWv1M5a57k9iO70NFkiZ/73Mj8JgwmxMCQC8=)
2: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (hash: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:73:93:20:5e:b6:14:c5:d3:83:ff:ed:3f:67:34:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Oct 24 23:00:18 2025 GMT
Not After : Oct 25 23:00:18 2025 GMT
Subject: CN=164629540141addba031d45c5450e262997ee866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:09:aa:02:e0:ad:2c:6c:4f:b3:d8:0b:4d:
e7:0f:ff:56:45:28:c9:96:ef:eb:a5:de:6b:a0:9c:
df:a2:59:b3:28:7c:14:9b:09:ef:02:0f:c8:0e:a7:
a9:ac:37:1e:8c:e1:c7:9d:f8:94:85:db:63:02:73:
bb:a8:cd:4b:b2:9b:c0:be:13:ee:0e:0b:f8:e8:c0:
26:6f:93:7e:08:0f:2a:95:7a:a3:bf:2c:1e:fb:01:
11:92:8e:7f:5c:3d:15:dd:1a:c4:51:d8:d9:88:73:
0a:bc:1a:6c:a0:d4:49:70:6d:10:7d:8a:85:9b:61:
e4:d6:4e:02:50:d2:62:aa:e7:11:01:1c:d7:08:57:
42:93:17:e0:c1:e7:69:19:bb:82:7c:7a:a4:dd:ee:
92:63:3a:64:3c:26:0e:69:f7:79:17:83:99:95:95:
c3:34:30:28:7d:d0:61:93:60:dc:08:7d:ab:0e:ae:
3c:09:42:ab:7b:10:d1:b8:d5:d0:64:c9:ac:1f:2a:
a4:1a:37:43:46:bd:cc:96:c1:52:dd:be:d9:aa:8a:
77:e2:81:1d:d6:a5:d0:ba:27:0b:72:0c:83:8a:86:
62:3d:80:e8:ca:66:dc:64:56:08:a2:9c:d9:fa:27:
88:82:14:b7:7d:d4:a5:f1:80:d2:0b:00:a8:15:36:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:46:29:54:01:41:AD:DB:A0:31:D4:5C:54:50:E2:62:99:7E:E8:66
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7c:6e:ab:07:72:72:0b:02:81:26:20:60:f6:c1:02:eb:b3:
1e:71:9b:2b:86:61:b8:65:57:1c:f8:cd:b2:81:f3:66:37:e8:
2e:c7:1e:42:23:69:f3:4b:35:31:e9:bc:df:b5:95:11:fb:78:
1f:25:34:af:5f:14:e5:5f:a6:48:05:74:71:ed:ec:58:28:66:
52:96:f7:84:40:ae:5c:1a:22:d5:dc:34:59:4e:82:62:79:03:
1a:d9:bb:90:f4:b1:e9:1d:c7:8b:b6:11:38:03:ce:26:62:79:
2c:8a:03:f2:a6:9d:47:13:8c:7e:1c:fa:ef:c2:18:3c:ea:6d:
c8:01:b1:78:ac:48:fc:3c:20:2b:78:d7:44:c7:a3:88:b4:a6:
74:21:38:0a:74:63:12:5f:3b:4c:ae:cf:d7:a3:6f:db:b3:be:
52:c4:bc:27:60:4e:69:84:31:e0:91:42:20:88:f5:c2:89:7e:
ce:a9:77:63:9d:c2:21:8f:63:40:4b:a2:43:a4:46:a2:61:dc:
ca:81:0c:65:e5:10:0b:a6:18:a6:eb:6c:b3:d4:dd:48:fb:1b:
38:ce:55:56:ab:ab:2b:98:76:11:96:09:6f:37:c9:b3:f3:05:
ca:d1:f4:b8:38:a5:cf:e2:bb:c4:a6:b2:54:e9:b2:6c:04:ce:
cd:f7:a7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 05:37:44 2025 by rpki-client