Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: LpIDgxQgDDPgOeWwWtFq9hcRdP1SRUqAEAbE0Ww8xmM=
Subject key identifier: A7:7A:CF:F9:20:0C:62:EE:86:85:55:5C:DB:66:BD:33:B2:61:B0:AE
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 0199FB0F05A6C1A61AF03E25A41DDBAD80C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 137E
Signing time: Sun 19 Oct 2025 06:01:29 +0000
Manifest this update: Sun 19 Oct 2025 06:01:29 +0000
Manifest next update: Mon 20 Oct 2025 06:01:29 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: oT3O2JbyvAQPT0vPuAaNYy1afc4ntNuSOb4Utwqzwp8=)
2: 7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa (hash: 8HGos2aeHkG0saEvUQyEseTwmsTJnTnE4JuY9jxzUVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:05:a6:c1:a6:1a:f0:3e:25:a4:1d:db:ad:80:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Oct 19 06:01:29 2025 GMT
Not After : Oct 20 06:01:29 2025 GMT
Subject: CN=a77acff9200c62ee8685555cdb66bd33b261b0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:aa:76:38:7a:04:7c:a9:2a:94:f8:52:b7:ee:
53:21:cd:18:33:be:59:a9:1b:73:1b:f1:58:fe:1c:
5b:5d:3f:a0:e9:13:b9:f4:92:dc:d4:b7:81:33:b9:
a2:40:fe:86:7a:66:fb:ec:9d:fe:d6:22:31:53:b5:
98:ca:fa:ab:46:2d:c6:fd:b6:f2:ab:49:e5:c1:a5:
17:6e:b9:0b:ca:7f:23:f8:36:ae:b9:60:af:ed:e3:
7c:83:10:5b:01:04:d4:3c:42:f9:f0:b8:24:9e:81:
8b:3b:5a:1b:9f:b3:b2:98:8a:0d:f0:90:d9:a8:5f:
b2:d1:ae:44:fe:64:39:3f:48:b0:4a:b1:89:b4:de:
76:76:c3:f4:6e:89:ee:2d:e5:5f:fd:b8:22:0e:a7:
a5:fe:54:e6:a4:86:6f:5a:5c:90:bc:ba:5b:e6:e3:
77:ec:ed:4f:30:34:a9:6b:08:50:50:33:59:7a:3a:
29:7b:a4:15:7d:4a:55:17:67:5f:de:59:20:8d:c2:
15:93:3e:0f:cc:38:8e:57:d7:98:46:63:23:a8:80:
28:11:7e:2e:99:45:57:bb:88:a3:3f:d3:16:ed:09:
99:df:91:67:ce:ff:05:3a:95:5f:6d:7b:df:33:4c:
79:62:6c:97:47:92:f4:17:ad:55:aa:84:54:0d:09:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7A:CF:F9:20:0C:62:EE:86:85:55:5C:DB:66:BD:33:B2:61:B0:AE
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:97:4b:03:73:00:d0:e2:77:60:8c:c1:aa:14:5b:3c:ee:7f:
f1:7c:f4:f8:98:a3:d2:14:92:3c:18:17:6a:ec:98:7c:24:49:
c7:27:51:8e:65:32:1d:96:33:a6:dd:9a:c7:72:32:57:5b:ae:
be:d3:91:fe:3f:81:15:b6:23:3c:37:68:5f:bf:7b:ad:44:d1:
d2:91:b7:3c:16:7e:64:6e:14:a8:e0:da:b0:ba:58:79:cc:6d:
a3:23:5a:67:0d:c2:f8:31:77:3d:d6:93:9e:97:cd:65:6a:2d:
f7:ee:63:60:ef:4d:1a:70:fd:b6:1d:de:ef:53:9b:3f:29:dc:
5a:c0:57:65:71:26:c7:d9:0a:05:af:ea:ff:11:7c:24:a4:5c:
5f:79:9e:e5:80:98:f0:c7:ff:09:55:77:93:07:69:1d:84:89:
01:a0:d3:2b:e8:75:98:0e:52:5c:3e:d3:39:ab:24:5c:8b:b0:
0d:42:ad:ca:de:9d:2a:5f:88:3f:db:a4:dc:30:a3:30:d3:04:
54:86:03:03:92:a2:f3:bc:8e:52:f5:ff:94:2d:4b:13:1a:c9:
42:98:80:f1:17:4d:49:e7:07:81:f4:e4:f3:d4:20:59:11:54:
cc:d4:db:43:c3:f2:aa:43:b9:b4:09:61:9f:90:b4:22:9a:47:
7e:e0:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:20 2025 by rpki-client