Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: nOD/DnPVVwztLErfsFSXwCEUHKeOsX4Ddqrg8KzP/s4=
Subject key identifier: F5:A8:01:9C:73:CB:07:BC:B3:9D:AF:0E:63:55:9C:F0:77:75:78:DB
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 0197B8C5D81E150400321F6439F30052C9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0975
Signing time: Sat 28 Jun 2025 23:01:03 +0000
Manifest this update: Sat 28 Jun 2025 23:01:03 +0000
Manifest next update: Sun 29 Jun 2025 23:01:03 +0000
Files and hashes: 1: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: vUwNRo5UVq5F5ok0RSrHsTHSInYmuvmYMIKBOMeFxOU=)
2: O7YDGlReH1x3D0s7Ygr1Vy16MbI.roa (hash: WAs5UezYMvac542kW/ZhIkgbBXd8gscxgdqz/AR6xPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:d8:1e:15:04:00:32:1f:64:39:f3:00:52:c9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Jun 28 23:01:03 2025 GMT
Not After : Jun 29 23:01:03 2025 GMT
Subject: CN=f5a8019c73cb07bcb39daf0e63559cf0777578db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:d2:1c:10:c5:60:e0:1d:46:49:3e:ea:bd:
02:9e:08:a2:da:33:6d:8d:a0:e9:d7:9e:cc:95:f8:
13:93:1c:8d:f7:06:b7:b9:84:7f:5d:77:6d:19:3f:
0f:c6:44:61:4f:09:25:93:4d:9e:9b:e6:98:d4:54:
fd:63:3b:9f:0f:89:ea:b2:01:62:52:7b:29:e7:98:
ec:5b:3d:5b:ef:07:05:95:6e:39:87:27:80:aa:1f:
b9:90:4e:40:c9:f9:63:c8:ea:49:0c:42:b6:56:b6:
2a:a8:1a:82:64:f2:44:98:86:93:94:36:fb:24:64:
05:e7:e5:e5:31:2b:fb:bd:5b:e0:a6:81:aa:d7:70:
51:f9:9c:cf:19:ce:0c:47:f4:00:20:14:1f:4e:52:
04:76:8c:62:c6:5a:ae:b6:1c:63:a8:c2:25:16:4a:
c1:95:47:cd:0b:24:92:10:77:1d:f1:71:82:0e:56:
6a:33:74:aa:67:54:b1:15:ab:48:bb:49:8c:49:f6:
82:6c:50:15:bf:14:d5:37:90:2a:96:93:a7:cd:71:
56:9e:48:c3:66:a8:58:40:c8:05:e8:67:62:00:66:
ed:7f:21:8d:2d:dd:e5:69:1d:cd:b0:95:53:90:e9:
43:5f:21:ef:c5:f3:ff:5d:90:a7:02:22:86:30:7e:
ef:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A8:01:9C:73:CB:07:BC:B3:9D:AF:0E:63:55:9C:F0:77:75:78:DB
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:23:85:90:74:9e:2a:9d:10:38:17:48:5f:e1:24:5d:2c:3f:
a8:25:79:c4:10:4a:af:4a:a0:8b:76:ba:6b:ec:30:8c:fb:88:
3f:fd:33:b8:4a:81:b9:e2:cc:12:7a:39:81:a9:70:0a:5f:4d:
50:b2:61:95:52:80:67:35:d0:f9:8d:c0:20:84:3f:ef:38:c1:
03:aa:2e:6e:60:ad:29:eb:c3:0a:ef:40:b5:b1:5f:54:ff:a1:
36:f5:41:d7:0c:4a:b2:1c:ef:3e:7d:98:cd:e5:5c:c3:3b:13:
bc:87:2a:e0:21:92:6e:07:d2:84:db:c3:61:c6:7d:8f:2f:a8:
d8:46:d6:b3:a9:44:db:9a:9d:90:15:4d:66:14:86:59:8c:f0:
71:ed:ef:87:0f:20:30:79:db:05:c6:35:06:ce:58:79:8f:d5:
5a:96:51:c9:81:1a:9d:9c:56:23:b3:30:73:3f:fb:b3:0b:75:
0d:57:8b:57:cb:18:8c:b2:a5:a3:34:ad:13:56:8d:1b:a6:13:
e6:47:4c:6c:0f:fa:4f:a2:55:05:08:5c:23:8d:83:4e:26:71:
97:3d:5b:56:ec:ef:1b:2e:c7:a9:f7:cb:e0:79:8a:e7:0e:af:
35:33:52:d7:29:d5:76:e5:d1:a7:1f:c2:64:13:c7:40:1d:66:
4a:06:35:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:50:51 2025 by rpki-client