Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: jopP+zcC98CM0EJRKsXvjxVfB00BAgKV8vJjpnploNM=
Subject key identifier: 65:C3:12:BF:13:FE:5D:DE:29:60:AD:2F:A6:08:D0:06:12:00:4B:A8
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 0198D4E07C5A6E365D600B1D598A05DAF5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 12FF
Signing time: Sat 23 Aug 2025 03:02:18 +0000
Manifest this update: Sat 23 Aug 2025 03:02:18 +0000
Manifest next update: Sun 24 Aug 2025 03:02:18 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: F+sqRJzYkGIxeRiabSBC5izUzW4A376GS2+arXWu4q8=)
2: l2z6jen0BvB90JFFcv4xMvXKDU4.roa (hash: 3LW90buItGbBk8vwyzdEvNmU4J6IAwriJoEjk0Q8hlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7c:5a:6e:36:5d:60:0b:1d:59:8a:05:da:f5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Aug 23 03:02:18 2025 GMT
Not After : Aug 24 03:02:18 2025 GMT
Subject: CN=65c312bf13fe5dde2960ad2fa608d00612004ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:ee:1a:6f:d1:38:bd:99:ed:68:9e:12:94:
6e:6c:88:b0:a8:c8:cd:ad:9a:03:f3:09:2d:ef:95:
da:ed:e1:85:1a:c4:e2:e5:3b:ac:d5:97:6f:f1:a4:
93:fe:67:9e:56:ae:2d:30:c7:91:6b:c6:da:e8:d0:
3b:27:e3:29:0e:9b:e1:cb:13:0e:8f:83:cc:8f:c8:
7c:f4:46:0c:0d:dc:c1:4d:ac:33:f6:ea:f8:f3:1e:
0b:77:ec:65:68:d0:b9:78:26:7e:d2:30:1f:04:85:
33:c3:ad:bb:1f:4b:27:11:38:6e:e8:35:19:ba:df:
8a:67:a3:35:b8:ed:37:6e:ad:67:24:12:55:80:b8:
dd:5e:ee:b3:59:79:21:17:a3:f6:95:ca:20:65:f9:
e5:6f:63:ef:df:1b:ad:c0:a7:da:7c:dc:21:45:cf:
b6:83:9c:46:6e:d9:6c:2f:00:0c:d6:49:ee:d8:51:
81:8c:6f:7d:cd:10:46:fa:14:c2:32:94:9a:82:5b:
d2:76:27:6a:9d:98:54:48:ac:93:24:80:33:8e:3c:
fd:c5:73:48:9d:d8:d4:55:3c:15:3f:81:f0:e5:6c:
f6:67:ea:34:ba:c8:b3:91:4b:33:dd:d9:f7:98:8e:
f0:ff:55:53:19:3d:71:1b:24:d8:83:c5:e0:18:6a:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:12:BF:13:FE:5D:DE:29:60:AD:2F:A6:08:D0:06:12:00:4B:A8
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:25:e9:3c:b1:fd:2a:fc:90:64:c0:6d:e6:54:84:68:95:8d:
56:eb:ca:30:65:42:3d:4c:c8:cf:95:6b:cb:88:b5:2f:81:b7:
86:64:30:d7:e6:55:a1:6f:26:dc:6f:9b:c9:ec:1f:c9:41:ee:
49:a6:9b:da:ea:31:fc:6f:fb:4d:11:12:33:5d:31:c4:06:01:
c1:bb:fb:dd:77:66:3d:61:a7:68:5e:9b:22:c5:4e:ec:26:93:
da:32:0a:87:ce:56:61:c3:62:5e:da:a1:57:12:63:85:2f:80:
5d:65:ee:9a:35:6d:78:45:6f:69:79:3a:5b:50:34:dd:7e:02:
d6:2d:58:7b:5c:b7:e6:04:04:c7:80:3f:f2:c8:c1:a4:8c:7b:
82:6a:59:12:b6:f3:04:fc:20:9d:c1:02:de:c1:14:62:61:1b:
9c:09:8b:d2:4b:45:e2:83:e0:0c:a9:0a:22:64:28:56:d2:a1:
cd:58:f9:ac:2c:50:5e:ca:ff:99:a1:da:82:9f:8b:97:51:e0:
6d:0f:fc:45:e0:3b:b6:34:d1:dd:94:a9:68:e1:4d:b8:6b:58:
99:08:73:b4:90:20:ab:c6:20:cf:68:9b:26:ae:c4:fc:89:41:
10:d2:99:57:f5:41:56:a9:7b:3c:31:88:3d:fc:3c:ea:04:57:
65:fc:ee:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:09 2025 by rpki-client