Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: qHitERZVt/AieJ/JVCOb/1T40oLABQxfYGwYHLKwMOE=
Subject key identifier: A5:6A:09:B9:EF:CC:FC:99:EF:1D:42:2B:A6:C1:ED:AE:C7:CB:F2:F6
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 0198D5BBE436BD5FFC423B4FD72C8BC74209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 12E6
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: 0GBaUVLmxdrqJIBMUJ+tDqZylAC7b80VySo1yg0g7YI=)
2: 7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa (hash: 8HGos2aeHkG0saEvUQyEseTwmsTJnTnE4JuY9jxzUVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e4:36:bd:5f:fc:42:3b:4f:d7:2c:8b:c7:42:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=a56a09b9efccfc99ef1d422ba6c1edaec7cbf2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:1a:b0:7d:0a:1f:51:86:43:7d:21:81:12:
93:5f:b2:b7:d5:5e:9a:1d:d6:99:f6:46:b5:3c:09:
8c:7c:38:83:28:cb:d0:5e:05:e4:2b:e1:48:c1:13:
8e:e7:b9:52:b9:38:27:d1:15:f0:58:fc:a6:98:b0:
a1:83:fb:88:4d:23:ff:0e:bb:68:80:3f:53:1f:53:
ab:39:22:63:0c:dd:8b:f8:6b:30:81:34:8b:2e:83:
c1:26:9a:45:27:d9:18:56:68:41:e3:34:c2:f7:26:
7f:5c:ce:36:e0:71:76:ae:d4:61:9f:e5:e2:88:65:
5f:54:66:a8:f1:63:d7:b7:a7:43:f9:aa:ef:b0:a1:
c5:70:c9:65:b6:17:9b:52:d6:b1:31:51:6a:df:c9:
82:f4:4f:9c:6e:4b:e0:0c:8e:a8:27:86:24:0c:4f:
11:b7:a1:c8:17:41:bd:8a:8e:b5:60:ac:98:7d:49:
7f:ea:f8:3e:b4:79:8a:f9:c8:07:23:a7:04:79:98:
1e:7a:0e:08:82:07:86:32:93:f5:6c:e9:f2:5e:58:
45:17:2d:d1:dc:e3:ad:8e:f4:0a:fa:94:03:76:f9:
71:28:fc:ee:f4:1f:bd:6c:6a:8a:70:73:f6:d9:7e:
64:c1:37:f7:d9:78:a5:a0:29:78:24:fa:67:dd:96:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6A:09:B9:EF:CC:FC:99:EF:1D:42:2B:A6:C1:ED:AE:C7:CB:F2:F6
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0d:58:ec:0f:02:7a:ce:75:f0:d6:22:6a:22:e7:54:cf:62:
d4:eb:ea:03:0b:2b:75:be:ea:af:a9:9d:94:52:61:93:9e:3c:
b9:8c:9d:b4:db:0f:8f:f7:9b:a1:1e:da:4b:0f:3e:00:00:96:
f6:90:96:7e:dc:55:c5:52:36:db:d2:a3:3a:d1:8f:dc:4f:84:
a4:b0:c7:d7:35:88:ff:58:b7:1a:f1:46:43:5c:28:d8:82:af:
11:2b:53:15:83:a0:f3:11:6e:f4:2c:d5:25:b1:bc:53:34:b3:
ba:46:1f:3a:b0:ad:5f:ca:fa:3f:fc:67:13:9a:ed:1b:d1:cb:
5d:23:45:a2:2a:d4:cc:58:23:14:95:5d:a4:5b:b9:ba:44:a0:
35:0e:bd:63:97:3c:20:4b:fd:5b:c6:cf:04:93:4f:f3:83:bb:
58:fe:5b:8d:3d:ec:92:66:77:cc:cc:9b:d4:fc:a3:59:8e:5d:
6a:93:d3:4d:9f:fd:7e:8c:7d:81:d4:96:58:fd:7d:e4:50:e6:
13:a3:81:11:6d:21:32:db:62:5b:18:d5:a9:62:45:3d:d2:3a:
1e:4c:97:7f:b5:4c:d6:5c:98:49:75:0b:19:33:38:4a:7b:f9:
dc:e6:ef:4f:c7:06:67:a5:e8:65:06:94:c0:98:01:ca:28:36:
2f:74:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:12 2025 by rpki-client