Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
File: DbPDFk09jCZEzymzI2dhpXHuWLo.mft (raw, json)
Hash identifier: KWfmpySF9bIbdNTsjIDWecbr1k6OFLITi83Wf7Zv4XE=
Subject key identifier: 8C:7B:78:7F:81:C4:5B:3B:69:7D:31:D4:5D:03:24:1A:29:70:D8:83
Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Certificate serial: 0199394B9D04DF9BC3714903A110C1E738F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
Manifest number: 0C84
Signing time: Thu 11 Sep 2025 15:01:20 +0000
Manifest this update: Thu 11 Sep 2025 15:01:20 +0000
Manifest next update: Fri 12 Sep 2025 15:01:20 +0000
Files and hashes: 1: DbPDFk09jCZEzymzI2dhpXHuWLo.crl (hash: qV5ZZml3zvF2KKQu6Mi9qhmHw+xBH8vM1mLvVemMI0U=)
2: VCOPnV4kZuweFLb_llPPHRAXNUA.roa (hash: cRLhBmbu/yT6hrLfR7qsKhKnC8knJg7oOO9Ome0I9Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:4b:9d:04:df:9b:c3:71:49:03:a1:10:c1:e7:38:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Validity
Not Before: Sep 11 15:01:20 2025 GMT
Not After : Sep 12 15:01:20 2025 GMT
Subject: CN=8c7b787f81c45b3b697d31d45d03241a2970d883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:69:41:85:4b:34:f9:d5:4d:e8:d9:fb:04:
33:96:7d:f0:94:8c:cb:2e:46:3e:bd:f0:02:4b:a6:
5f:95:4e:64:f3:de:eb:f2:58:50:89:d1:98:d5:da:
20:80:46:db:ad:56:c4:92:5e:f2:87:1b:75:00:c6:
13:96:cc:99:4b:d0:7f:d6:08:53:4e:c5:2e:c5:6f:
71:ea:f5:c7:78:0a:6d:84:c0:7c:01:b4:dc:59:73:
1a:5f:77:9b:7d:b4:5a:ae:93:aa:9a:87:cc:14:51:
12:ae:ae:a8:d5:f1:35:0c:b4:d6:27:c8:be:ac:af:
19:9d:d7:73:d2:cf:2d:95:25:04:af:04:53:78:cd:
df:37:f1:69:52:22:1d:0e:d7:2b:c4:fe:5f:a2:ea:
2d:f7:48:46:de:d0:56:bf:da:d9:ce:ba:33:83:3d:
c1:10:fe:cb:fa:bd:1b:e3:17:a9:fd:01:2f:32:0c:
4d:e4:ca:d8:7e:f1:dd:3c:9f:3b:04:f5:36:d3:30:
c2:1f:2d:21:bd:45:1f:f8:23:1e:01:a5:49:b2:19:
56:81:44:df:e4:f7:9b:6d:9c:fc:ce:14:8b:44:0b:
b4:70:1e:0e:f4:c1:ff:4b:56:13:88:7f:24:a1:a0:
4f:46:bd:8f:d4:d6:96:8c:e0:1d:a0:79:7e:04:b5:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7B:78:7F:81:C4:5B:3B:69:7D:31:D4:5D:03:24:1A:29:70:D8:83
X509v3 Authority Key Identifier:
keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:80:f9:f7:a1:ad:46:f8:2e:b9:26:b5:1b:6d:1f:e0:24:63:
33:c3:d7:72:f2:02:51:a8:98:dc:96:60:1c:a8:6a:7b:27:81:
aa:3c:f5:f0:62:11:84:49:c3:33:05:22:69:ab:08:3a:60:46:
f5:36:58:07:3d:df:f3:1f:2b:c8:08:96:90:21:24:75:07:a1:
6f:0a:c5:4e:c4:01:55:d6:d2:c5:04:0f:65:ae:e8:9a:1f:1f:
fa:a7:d1:e0:04:da:46:5a:36:6a:29:ea:41:b9:e6:db:ab:22:
72:8d:1c:96:98:66:b1:c6:ae:10:13:4e:ae:3c:5b:ef:ff:63:
01:cc:8d:85:9c:f5:67:37:11:e2:aa:6b:14:36:93:8b:ac:70:
19:a4:c0:7c:40:0d:ab:e2:eb:af:7a:4c:5b:f7:da:69:f3:62:
9e:04:00:2c:3c:d1:06:2c:04:c0:60:85:00:17:87:6c:26:e7:
97:e9:5d:91:62:fc:05:16:00:92:95:1f:b2:26:52:f9:ff:90:
9a:e9:74:d2:59:6b:25:17:8d:10:c4:0d:2a:66:9e:9d:8b:f3:
2c:69:a2:cf:6d:fb:4f:96:06:0b:16:16:70:f6:85:b7:f0:cb:
9e:bb:1d:9b:6a:67:98:87:db:e0:cb:c0:de:80:b7:b5:12:aa:
c1:2a:87:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 17:35:15 2025 by rpki-client