Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: EbJ3mLprTw/2vfWRVHOK2+0hBi9+cCaFENCPKALP6yo=
Subject key identifier: 9C:2B:4E:92:F7:4B:38:0A:C8:A2:7A:4C:93:8B:BB:42:1B:DA:59:66
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 0199233137B6BB8E5F060711572D71F25038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0900
Signing time: Sun 07 Sep 2025 08:00:51 +0000
Manifest this update: Sun 07 Sep 2025 08:00:51 +0000
Manifest next update: Mon 08 Sep 2025 08:00:51 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: WsKv4UjtSRrCQZ6ZA9oN6Tzhwl308bNI4RApF2CPHFs=)
2: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (hash: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:37:b6:bb:8e:5f:06:07:11:57:2d:71:f2:50:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Sep 7 08:00:51 2025 GMT
Not After : Sep 8 08:00:51 2025 GMT
Subject: CN=9c2b4e92f74b380ac8a27a4c938bbb421bda5966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:a3:40:ce:70:85:a3:2c:8f:0d:90:23:07:
bd:f7:19:e2:cc:41:f7:d7:26:9e:36:08:01:c3:e1:
bd:89:36:bd:65:98:29:d0:b8:5a:75:87:9b:48:8e:
6d:61:eb:62:7a:11:9d:f4:71:8a:a6:28:cd:80:0a:
61:29:0c:fd:5b:21:6e:40:1a:b8:a6:c1:bf:4a:49:
f8:37:91:97:39:5f:93:ba:11:01:b5:76:b7:55:5c:
6e:74:2f:6d:0c:df:9b:a8:58:2a:8b:fb:04:f2:6b:
b1:cd:8a:91:51:04:17:bf:c0:dc:5b:17:86:cc:95:
b9:43:a7:62:48:08:5f:44:92:a4:03:57:93:8d:70:
fe:81:36:80:4f:68:25:70:2f:4e:bf:64:bd:60:30:
dd:a8:c9:fb:ba:ba:a0:06:a7:79:37:d1:23:11:de:
6a:dc:89:00:6a:cf:e9:95:8b:a0:94:d8:48:27:7f:
19:1f:af:2b:07:be:70:a6:60:44:e1:2d:04:c8:36:
b5:82:67:2c:96:60:4d:db:f8:67:b0:47:a2:fe:d5:
ca:f3:7c:ee:bc:8e:11:c0:4e:f9:b9:de:c1:63:4c:
d1:07:66:84:cf:87:d7:fd:e9:b5:15:28:a0:71:77:
51:84:e7:53:3e:de:cc:ac:41:99:23:ee:6c:fb:f7:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2B:4E:92:F7:4B:38:0A:C8:A2:7A:4C:93:8B:BB:42:1B:DA:59:66
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0c:fb:e8:5a:b8:03:6d:b1:b9:5b:65:60:f8:8e:76:01:c5:
cc:d2:5e:ce:ec:b3:b3:f5:c6:fc:05:33:30:2a:e6:e8:67:d2:
dc:c1:a9:d7:ac:30:ce:a2:4e:e7:0f:d9:59:d2:08:bc:21:b9:
a7:06:e5:8f:0e:1d:bb:8c:b1:ac:d1:f6:1f:e2:9c:1d:af:d3:
e4:12:b3:ee:a3:2f:87:68:80:99:52:84:3a:bb:78:0d:75:23:
a6:76:23:4f:37:2e:9a:b7:2c:b8:fd:6e:51:b7:a8:97:46:d6:
39:18:88:80:bd:94:ed:b6:89:ca:fc:59:5c:5b:97:ca:40:71:
82:43:e8:02:47:14:f4:af:84:20:1a:a7:e2:0f:c8:54:95:bf:
1e:93:7e:da:14:4c:d5:bf:37:2f:77:9c:0b:8f:ee:cc:c8:00:
f1:04:ce:d1:2b:5f:ab:ff:00:b9:e9:97:06:26:70:9b:5a:2c:
8a:9c:4b:b7:a2:53:a7:4e:55:55:22:0c:17:da:e3:bc:85:3c:
b7:a7:f7:88:54:ad:fa:2d:ce:7a:3f:ba:0c:d0:d2:8d:8e:b2:
f8:89:02:c5:41:f0:a4:86:f2:74:34:ec:5c:4d:57:99:e4:19:
cc:69:e0:d9:c1:7f:27:da:4a:3f:d0:7c:ac:bc:e6:79:ed:8d:
31:6a:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:03 2025 by rpki-client