Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: gheRT+0z5pdJXCar5YUUMx+tGcCQZM/7kHObiVqXp+0=
Subject key identifier: D5:18:CD:5E:F3:2F:38:3C:DD:4B:EE:F2:F7:8D:07:D0:15:C6:4B:CD
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 0199FE0FC76714328F64CF38AB74BC7AE396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0AA2
Signing time: Sun 19 Oct 2025 20:01:10 +0000
Manifest this update: Sun 19 Oct 2025 20:01:10 +0000
Manifest next update: Mon 20 Oct 2025 20:01:10 +0000
Files and hashes: 1: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: oRJYIY5iwQ9Hw23rZHQYOtH8KieTvQ5rrg+6OU20D7s=)
2: O7YDGlReH1x3D0s7Ygr1Vy16MbI.roa (hash: WAs5UezYMvac542kW/ZhIkgbBXd8gscxgdqz/AR6xPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:c7:67:14:32:8f:64:cf:38:ab:74:bc:7a:e3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Oct 19 20:01:10 2025 GMT
Not After : Oct 20 20:01:10 2025 GMT
Subject: CN=d518cd5ef32f383cdd4beef2f78d07d015c64bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:97:ac:e8:9b:88:44:07:6c:1f:92:73:6e:
06:44:85:59:5e:b4:00:7f:c4:8d:c0:97:a7:d3:6d:
80:bd:76:73:3a:92:00:ef:59:2e:5a:1d:c8:29:a9:
f8:3e:52:3f:ed:6d:7b:57:8d:f6:27:ad:92:29:28:
92:0e:1e:d7:ed:b5:b6:9c:1e:70:38:43:21:bd:0f:
91:da:ea:3a:0f:f1:6a:f2:57:23:cc:15:72:99:dc:
e3:02:20:2d:95:f3:1a:4b:4e:f1:fe:92:dd:85:cc:
c0:7d:25:11:fd:b1:48:24:17:89:c2:27:a6:7f:5d:
19:42:f1:ba:73:a7:63:b7:70:8f:17:75:bd:c1:86:
81:c6:c8:57:39:4b:dd:bf:45:8a:a5:d7:51:77:08:
7b:ef:4d:0d:62:9d:11:85:36:38:dc:5d:af:d0:a3:
dc:b8:f8:ac:ac:f0:4a:1c:8d:19:31:d1:ce:03:e6:
54:2c:b0:a2:02:02:81:99:cd:f7:85:c4:40:61:85:
6e:76:f7:dd:ce:e2:6b:d1:fd:ea:b3:02:d3:b7:fd:
4b:6c:8e:53:9d:dc:57:d4:65:dc:86:4e:9c:05:be:
f0:99:c0:8c:5e:3f:70:3d:0e:f4:df:58:ce:3e:48:
43:47:45:24:5d:94:4b:b7:5b:1e:5f:c1:a4:52:86:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:18:CD:5E:F3:2F:38:3C:DD:4B:EE:F2:F7:8D:07:D0:15:C6:4B:CD
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4d:6e:fe:5b:80:79:01:4a:56:51:24:bd:d1:bb:f3:45:c8:
27:b7:4b:2b:d4:f7:97:69:35:a9:48:95:72:4f:ba:2a:dd:ec:
1b:36:77:6a:3b:60:72:bb:37:06:36:ef:a7:34:d7:73:6c:ae:
c2:41:71:e3:75:ac:51:ee:54:98:85:78:5c:a9:d3:ce:e9:f5:
3f:cb:3b:25:a0:a9:34:d6:85:a6:96:46:c2:21:b2:5a:7e:c6:
9d:3c:72:bf:ae:be:ae:16:87:39:60:94:10:76:5b:d6:29:41:
e5:fe:6e:88:64:48:ca:36:06:29:bf:23:e3:71:b8:27:29:ea:
a5:0d:7b:d0:77:76:27:c1:38:3a:3e:2b:a6:d2:24:f1:06:24:
ec:92:e4:31:df:fb:e0:a4:64:11:d9:a1:66:98:34:85:4d:45:
07:8c:44:ad:d0:d9:48:df:e2:fe:cd:6f:ab:26:ce:93:dd:d7:
39:d6:99:b4:6e:af:7e:b0:27:91:60:0f:d5:33:e5:6f:80:6f:
2e:b5:35:b8:fd:ca:03:d1:46:e3:bf:92:34:68:05:2e:12:51:
ba:72:58:71:f4:03:3e:f6:07:c7:2d:3d:25:bd:0a:fc:c4:23:
dd:46:38:20:72:3a:15:a4:c0:63:e6:81:b5:3a:4c:71:7b:ff:
8c:33:00:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:03 2025 by rpki-client