Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: K4vuwejzNOtBBwbW/gFBQI/KbVAM2Ud9L9dxbp6xzAM=
Subject key identifier: 4A:0E:FA:C4:E2:96:A6:81:B5:25:D7:B3:3F:D6:42:76:F3:B1:82:46
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 0199FB7C8703EA8D74EADA3B27F144A3E9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0970
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: +CAMe43jA/34Tjm4ZBP4LLEzuAnVJ8FoyLktbi9vgDU=)
2: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (hash: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:87:03:ea:8d:74:ea:da:3b:27:f1:44:a3:e9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=4a0efac4e296a681b525d7b33fd64276f3b18246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:46:97:54:a2:a1:e7:3d:b2:26:77:77:6e:
46:49:65:0d:c0:ac:91:17:a2:18:23:46:1b:5f:cc:
94:0d:b3:ec:80:36:0f:ed:eb:48:cf:15:6f:e4:fa:
83:01:bc:0c:08:1e:95:e8:7e:3f:3d:8d:5c:1b:49:
1c:3c:89:7f:6e:45:e6:d3:50:15:55:d7:ac:3f:17:
3b:0d:be:4b:2e:6c:62:38:33:cf:3e:81:f5:99:58:
d5:6a:b9:4b:d0:3d:a5:48:39:3c:d5:42:90:d8:91:
10:46:76:fc:13:f9:fe:6b:cf:27:77:53:ca:8b:8c:
66:e4:e4:21:f8:23:c9:ed:12:01:53:66:49:88:8b:
68:6a:f2:c0:d0:a2:a2:b0:ac:92:18:f5:3c:7b:5a:
e4:b1:34:17:73:76:89:02:61:72:a6:d1:4d:fb:84:
50:a9:c8:42:43:9e:6b:3c:f1:0f:fa:e1:9b:05:16:
d6:80:b3:0c:8b:4e:b7:73:94:89:7b:38:37:f1:1b:
3f:a4:42:95:8a:df:e5:1b:cc:bf:35:3b:b1:f9:5b:
f4:05:ac:49:8c:c8:9f:ba:d5:92:f6:ba:28:be:83:
ff:0b:d8:48:82:59:ba:04:ed:2d:29:0d:01:f8:9f:
93:27:71:8a:21:6c:44:43:fd:58:23:44:f3:d0:fb:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0E:FA:C4:E2:96:A6:81:B5:25:D7:B3:3F:D6:42:76:F3:B1:82:46
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:22:7e:50:23:6d:7e:bd:f3:eb:35:fc:9f:8e:01:fd:a5:97:
3c:fd:54:da:16:59:b5:dc:52:88:2d:13:08:09:03:a6:47:14:
a7:6e:c3:0d:9a:b0:3c:0d:aa:48:9c:cf:15:84:f4:c1:df:8c:
25:b8:32:49:5b:9b:60:ac:3d:1c:79:c7:9b:43:a8:62:ae:40:
d7:a8:29:31:fb:74:37:4b:50:23:73:01:86:0a:7b:5b:d3:16:
62:1e:b4:10:93:6f:77:79:0f:8a:27:34:c8:00:05:11:56:fc:
30:99:26:39:d1:73:29:dc:68:bb:6d:0e:94:af:7f:bd:d1:32:
8d:96:6d:f2:30:ec:ab:4a:74:27:ef:b7:d5:14:7d:11:02:63:
31:23:e4:14:fa:55:76:cd:08:39:c8:7f:e7:c1:8c:b4:28:68:
db:78:0f:49:3d:dc:72:6d:28:b8:d8:8a:04:86:f6:a1:58:56:
8e:a9:90:8c:ca:bf:ee:52:dc:c1:00:4b:0a:73:e0:27:77:99:
41:7c:d4:7a:d9:5c:ab:36:ec:47:cd:0d:55:1d:03:01:56:0e:
11:ad:ca:c8:8b:74:77:8f:46:78:d2:4c:db:da:aa:14:c2:40:
39:a9:cf:c5:79:3c:9b:ae:09:ba:41:93:a4:a9:b5:5b:fb:e6:
6f:73:32:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:14 2025 by rpki-client