Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: c6DJzDSE1kXkrJxurV5MHXViZLjX011RLFsFgk8u1f4=
Subject key identifier: 00:10:57:45:01:94:4D:C2:7E:D6:B9:1A:A5:17:1E:30:E7:3A:81:11
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 0197B5FC26D299E365E320819D5FBA6CAA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 1251
Signing time: Sat 28 Jun 2025 10:01:30 +0000
Manifest this update: Sat 28 Jun 2025 10:01:30 +0000
Manifest next update: Sun 29 Jun 2025 10:01:30 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: dDNQWjkYo9wYkOdjctoymirv2ORn8rImhIHK8ww1wDA=)
2: 7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa (hash: 8HGos2aeHkG0saEvUQyEseTwmsTJnTnE4JuY9jxzUVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:26:d2:99:e3:65:e3:20:81:9d:5f:ba:6c:aa:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Jun 28 10:01:30 2025 GMT
Not After : Jun 29 10:01:30 2025 GMT
Subject: CN=0010574501944dc27ed6b91aa5171e30e73a8111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a4:48:ba:9d:19:ce:3d:a6:7f:66:e7:11:98:
20:78:4d:06:70:75:33:9b:6e:2d:eb:9c:f2:bb:b6:
56:91:56:b5:85:77:53:1f:71:6f:60:69:c1:94:24:
82:14:2b:9f:be:35:27:21:79:e0:42:f9:d4:b8:75:
94:8d:d7:87:e1:aa:e9:28:e1:e0:90:31:b5:73:16:
25:37:ff:6f:67:1d:93:b8:08:5d:99:0d:69:f0:4a:
9c:5c:95:a4:08:b6:67:3c:0a:c4:83:33:49:30:36:
13:8c:57:0e:26:78:b0:c5:9d:9f:3f:9b:a5:52:ed:
2c:3c:71:48:8a:f7:52:01:a0:2f:d7:b3:44:f7:62:
e0:e1:14:0d:6d:36:62:f3:2e:8e:18:04:ed:e9:be:
b1:4d:20:79:c9:2f:bf:05:69:93:b3:db:d5:80:a8:
06:10:bb:0c:d2:fd:e3:31:bd:61:25:cc:20:ad:f9:
63:34:dc:f7:45:a0:80:cd:82:ad:e1:c6:c0:9f:99:
67:69:4f:1e:65:b1:36:16:f3:fb:56:56:98:c1:22:
80:7e:4a:c6:cf:36:be:0f:90:c3:e8:5e:35:4e:c4:
56:50:73:2c:56:fc:93:5f:c7:eb:48:fc:10:4f:6b:
f2:42:d6:4e:aa:91:d5:eb:a7:3d:67:d6:2d:62:96:
9a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:10:57:45:01:94:4D:C2:7E:D6:B9:1A:A5:17:1E:30:E7:3A:81:11
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2b:29:5b:2b:08:3c:4b:73:a9:67:eb:b2:2e:bd:7a:de:2c:
ce:21:3f:88:24:8c:7e:6d:3f:f3:47:d7:09:ae:51:a2:a9:23:
b3:6d:ce:f1:33:95:20:52:49:1a:04:48:8f:c2:3c:a1:31:81:
a1:9e:cc:0f:fe:93:60:a3:7e:4b:b6:40:80:a5:04:43:ec:81:
64:c4:27:8a:2a:ec:6c:22:c1:23:50:1e:6f:cc:64:8c:b9:60:
cb:b1:a6:6a:a7:35:f9:e5:86:b2:8f:ff:98:62:da:68:63:19:
bb:36:7c:f6:70:32:e0:bc:ce:fe:53:98:ca:10:91:24:30:ce:
0d:23:88:8d:f2:d8:19:21:cc:68:e2:19:2b:76:a4:25:0f:62:
df:48:14:62:ed:17:53:81:d9:b9:4d:2c:f5:51:39:34:ae:ac:
aa:71:99:24:71:75:aa:0f:9d:88:35:46:ca:4d:21:7f:17:3b:
88:95:da:9a:da:f9:ae:4b:f3:f3:82:37:b0:86:34:be:37:f0:
c2:8a:51:f9:b8:62:06:57:dd:19:ff:5c:3e:a5:27:73:c0:3b:
45:c4:e5:6b:be:b2:ed:0e:12:d3:a1:ba:6f:74:f6:67:b9:36:
5f:78:45:4e:f3:fc:fa:47:98:08:36:13:f2:74:f3:3b:f1:36:
cc:f1:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:35 2025 by rpki-client