Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: NAQr2yUokv4XBCiQ3CJpceXr+igkTiJfxKPbupHAjlM=
Subject key identifier: 33:C4:FA:A9:38:C1:45:1B:FA:93:43:15:2D:DC:1C:FA:D0:88:48:17
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 0198D697F6B26113A39EE60DFB25390DABE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0A09
Signing time: Sat 23 Aug 2025 11:02:19 +0000
Manifest this update: Sat 23 Aug 2025 11:02:19 +0000
Manifest next update: Sun 24 Aug 2025 11:02:19 +0000
Files and hashes: 1: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: 6i0v2msIEh1um5ac+IPvUxCVqEdvLSlB8YZZHNc6vb8=)
2: O7YDGlReH1x3D0s7Ygr1Vy16MbI.roa (hash: WAs5UezYMvac542kW/ZhIkgbBXd8gscxgdqz/AR6xPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f6:b2:61:13:a3:9e:e6:0d:fb:25:39:0d:ab:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Aug 23 11:02:19 2025 GMT
Not After : Aug 24 11:02:19 2025 GMT
Subject: CN=33c4faa938c1451bfa9343152ddc1cfad0884817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:8d:85:71:d3:f2:97:be:85:58:f2:48:98:
27:d3:94:3b:64:82:fc:88:77:3c:7f:c0:4d:ec:86:
62:73:61:bb:0c:fb:c9:41:a5:ef:3a:24:5f:bc:56:
a3:4d:d9:a1:b7:85:9c:88:73:25:27:ff:6a:8c:8e:
66:f7:03:91:47:63:94:fa:45:45:49:89:91:99:90:
38:f5:9f:df:d0:17:a2:49:ba:75:42:e5:12:58:fd:
61:91:75:80:e3:8c:fa:3e:1c:e6:93:f4:80:c7:ab:
9c:b5:51:d6:d5:12:fb:cd:f1:fc:54:ab:48:fd:73:
5b:e5:55:1a:6b:7d:36:62:28:51:d7:97:e6:0a:07:
84:b3:37:d7:e1:e2:24:ca:c7:f5:ba:f2:48:14:a8:
8e:81:7b:a6:e4:f6:a1:40:e6:e5:5d:75:09:51:f3:
a7:c3:8d:fa:6c:f0:c5:ac:1b:e3:58:89:5c:c3:59:
e2:03:b1:67:00:1c:de:4a:15:5f:43:f2:7b:56:1b:
c7:71:58:89:dd:8d:88:56:7a:ca:a5:86:bc:45:e9:
0d:f1:73:7e:de:ad:8c:92:9c:f7:61:86:b1:30:0a:
a8:ef:9d:93:ca:eb:11:32:80:3e:15:2a:61:32:2f:
bb:89:2e:7c:d1:bb:b2:c5:1b:c7:61:50:21:1b:db:
51:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C4:FA:A9:38:C1:45:1B:FA:93:43:15:2D:DC:1C:FA:D0:88:48:17
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:97:9c:b9:92:13:ab:ea:4c:bb:45:b1:ff:6c:60:dc:97:f4:
c3:98:50:39:7e:5b:76:39:b2:eb:3b:b5:d0:2e:3d:1e:d7:c5:
da:ca:9d:bc:90:03:fd:3a:6a:88:a1:83:3e:66:a6:39:3a:c5:
03:ab:68:fd:c0:ec:a3:c8:6e:26:12:3f:cd:93:29:58:e4:2d:
c2:ee:60:8b:b8:15:79:d3:27:45:e5:ca:cc:9f:16:35:a2:5a:
75:31:ad:93:62:88:bb:e4:58:e1:c4:69:48:fd:6c:f2:f7:b2:
54:8c:9c:71:4b:8b:25:e0:fd:45:ae:01:91:81:cb:91:29:b7:
84:af:61:cd:6a:ef:30:04:7e:5c:fc:93:12:96:e4:f4:73:c0:
96:24:1c:d6:fe:f9:db:5a:f0:9c:d8:71:d1:d4:ab:c7:32:bf:
cf:48:8d:bb:e0:1d:a8:d3:cb:c3:cc:2e:91:a8:dc:14:bc:2e:
1f:92:34:05:80:83:3a:ba:12:3c:be:bf:cd:d1:5c:6c:d6:1c:
f7:03:c8:cc:fc:95:4a:a4:cf:7a:19:bf:f0:ec:70:96:0a:e3:
5c:02:00:8e:ff:8f:6d:63:6e:f1:42:7e:01:0b:d9:15:96:43:
4d:1b:2d:f1:c2:83:73:17:3d:c0:67:a6:ec:a6:a6:48:dc:e9:
73:5f:14:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWl/ayYROjnuYN+yU5DavkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZWZhY2IzNzQ0MWRkMTkxODNiZDFjYjU3ZGI1ZWU1NTQ3
N2E3YTcwHhcNMjUwODIzMTEwMjE5WhcNMjUwODI0MTEwMjE5WjAzMTEwLwYDVQQD
EygzM2M0ZmFhOTM4YzE0NTFiZmE5MzQzMTUyZGRjMWNmYWQwODg0ODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QCNhXHT8pe+hVjySJgn05Q7ZIL8
iHc8f8BN7IZic2G7DPvJQaXvOiRfvFajTdmht4WciHMlJ/9qjI5m9wORR2OU+kVF
SYmRmZA49Z/f0BeiSbp1QuUSWP1hkXWA44z6Phzmk/SAx6uctVHW1RL7zfH8VKtI
/XNb5VUaa302YihR15fmCgeEszfX4eIkysf1uvJIFKiOgXum5PahQOblXXUJUfOn
w436bPDFrBvjWIlcw1niA7FnABzeShVfQ/J7VhvHcViJ3Y2IVnrKpYa8RekN8XN+
3q2Mkpz3YYaxMAqo752TyusRMoA+FSphMi+7iS580buyxRvHYVAhG9tRqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPE+qk4wUUb+pNDFS3cHPrQiEgXMB8GA1UdIwQY
MBaAFAzvrLN0Qd0ZGDvRy1fbXuVUd6enMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQt
ZTNkZDUyNzk5YmRhLzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQtZTNkZDUyNzk5YmRh
LzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZecuZIT
q+pMu0Wx/2xg3Jf0w5hQOX5bdjmy6zu10C49HtfF2sqdvJAD/TpqiKGDPmamOTrF
A6to/cDso8huJhI/zZMpWOQtwu5gi7gVedMnReXKzJ8WNaJadTGtk2KIu+RY4cRp
SP1s8veyVIyccUuLJeD9Ra4BkYHLkSm3hK9hzWrvMAR+XPyTEpbk9HPAliQc1v75
21rwnNhx0dSrxzK/z0iNu+AdqNPLw8wukajcFLwuH5I0BYCDOroSPL6/zdFcbNYc
9wPIzPyVSqTPehm/8OxwlgrjXAIAjv+PbWNu8UJ+AQvZFZZDTRst8cKDcxc9wGem
7KamSNzpc18UjA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:59 2025 by rpki-client