Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier: H+8RGfIVSj07rnJ/kPl4VfysdPX6S3M7J2pBeGSIe7w=
Subject key identifier: 7B:16:B4:CB:2A:DF:C6:B5:85:3C:89:9B:F8:93:05:27:26:F1:77:58
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial: 0198D472FBCBB4A1253E49798AC8EBFCD845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number: 0B2D
Signing time: Sat 23 Aug 2025 01:02:41 +0000
Manifest this update: Sat 23 Aug 2025 01:02:41 +0000
Manifest next update: Sun 24 Aug 2025 01:02:41 +0000
Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: lDA0RWJh5q1KvTOlvTFP6vj3Arnn9OxBmZDeUI4uQlo=)
2: s3TIKJMGO-H8fbbN5SX9DjrKZbg.roa (hash: nJZCH4ElBXirrkbsvqmvn6OniRKSBo6O3OjFqSqnuAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:fb:cb:b4:a1:25:3e:49:79:8a:c8:eb:fc:d8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
Validity
Not Before: Aug 23 01:02:41 2025 GMT
Not After : Aug 24 01:02:41 2025 GMT
Subject: CN=7b16b4cb2adfc6b5853c899bf893052726f17758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:13:f7:6a:c7:16:2e:c4:7d:4e:8e:16:d9:
ce:40:06:2c:21:80:37:2e:76:4c:44:4f:36:ac:5f:
d4:c9:43:bb:48:80:06:12:bc:bd:92:c0:af:5a:a5:
02:2b:01:20:8c:8a:47:72:89:7e:7e:71:cb:09:9f:
92:e4:7e:f0:e3:be:5e:4f:7b:5c:a2:55:d5:2b:39:
72:4f:7b:8a:75:36:d8:e0:8d:d1:cf:f0:e8:25:8f:
71:7f:1b:30:ed:44:98:0f:8e:3c:4d:59:a7:4e:5f:
a9:78:e3:4d:40:67:fb:e1:7e:8b:41:14:bf:bd:2e:
b9:30:74:bc:10:dc:9a:85:97:bf:cb:80:d0:92:b2:
60:56:0d:d8:fe:a2:f2:04:a1:af:a8:4c:61:09:7c:
df:72:53:17:0d:62:7f:f4:8d:cb:fb:c3:46:9c:b1:
43:60:18:10:04:ea:53:9b:c0:87:b6:96:ff:d6:17:
69:fc:1e:fc:46:a3:be:c8:67:8a:c7:7a:e5:a0:44:
cc:cf:e0:09:59:5b:e1:b0:94:ac:b6:6f:e4:8f:b2:
56:e2:5d:be:48:56:7e:48:ed:a7:89:b1:f4:fd:9f:
99:08:01:65:be:77:38:df:9c:34:b9:c8:6d:8e:39:
a0:f4:44:d5:c4:91:79:81:2c:a1:7d:42:ce:7e:69:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:16:B4:CB:2A:DF:C6:B5:85:3C:89:9B:F8:93:05:27:26:F1:77:58
X509v3 Authority Key Identifier:
keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:11:55:bb:c2:4c:90:c9:71:f1:65:90:53:89:a2:3f:75:90:
84:4a:74:65:2e:9f:03:2a:df:08:4b:dc:58:15:90:7e:3f:fd:
da:36:91:ee:0b:4b:8e:9a:bf:ed:8c:d9:9e:f0:a6:ba:6e:f6:
31:67:50:25:9b:25:f0:40:e8:81:35:f7:22:13:cb:ab:8b:48:
c8:da:af:88:50:00:e5:38:54:10:e5:89:0a:57:7f:f2:b7:c4:
1c:ad:12:95:38:02:f9:17:24:63:a8:4d:3c:f4:83:dd:28:7b:
f1:29:eb:ec:ed:a3:f3:42:a9:25:c9:49:79:77:5d:42:4a:ed:
b7:fa:96:e8:6d:96:9b:51:51:26:d3:c3:61:68:46:b8:19:ff:
42:cf:e5:19:70:17:40:5c:9d:02:66:eb:53:07:bc:f9:f0:a8:
45:36:d4:62:40:f7:2d:94:1d:a2:df:0d:74:41:c2:f5:bd:28:
b0:01:bc:14:19:76:32:73:b4:a1:8c:65:60:90:49:39:7b:38:
d3:79:f8:65:3c:a2:c8:9d:f8:9d:3f:02:da:b4:99:b0:49:b0:
13:18:35:c0:d3:25:32:56:6b:11:d9:2f:24:f8:16:78:4f:71:
04:f6:f8:74:d3:3d:2d:83:29:30:3b:91:f3:a9:f1:b0:c8:dd:
d6:31:07:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:59 2025 by rpki-client