Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: Sp4gcbBwdrHsh1P5xQzIMQZVBuuDx5LYVa4/MfACsQI=
Subject key identifier: E5:62:7E:77:D1:26:F0:A7:CB:0D:2C:E1:7A:FF:86:D8:E4:1C:AA:F5
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 0197B6A08A5732EEA26FC503C87C82F5A6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 0A16
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: 6nM2z/fA2xyRYMEDnGBBJqVI+bs6yzGz/xPApe4uEbE=)
2: oeUHXPRVWNrr1QJirrKSZQy6zrU.roa (hash: SxbvFYL3nEPIvag7xzWrtYfbRcEggJtZoR9CvV7aWPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8a:57:32:ee:a2:6f:c5:03:c8:7c:82:f5:a6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=e5627e77d126f0a7cb0d2ce17aff86d8e41caaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:41:a5:80:32:50:a3:a6:25:00:65:04:a0:
3d:66:66:9f:bd:38:2c:05:38:0f:95:4c:ae:b9:8d:
f0:bc:25:6d:15:31:d6:24:06:b8:33:f8:ee:c2:8d:
51:06:07:ab:39:9a:14:dd:96:1b:9a:10:7e:78:db:
87:99:73:92:50:e1:ac:8b:2c:eb:1b:09:c1:9f:58:
0c:dc:45:17:f2:0c:4a:a8:9b:b4:93:34:50:57:8e:
a9:f9:f4:c0:55:6b:cc:84:3f:ae:00:55:12:63:38:
34:0c:9d:4e:93:0c:27:84:94:6f:5e:0a:03:47:d3:
66:9d:24:8d:89:70:3e:1f:e4:74:77:72:bf:05:3e:
e9:dc:19:89:3a:34:00:48:fa:69:26:de:cc:52:5c:
7d:c3:63:94:eb:7d:ac:e0:8b:78:2a:c4:0f:96:ed:
40:96:28:c8:88:f9:33:d2:20:81:83:c2:0d:67:dd:
ac:9a:45:e7:1f:96:2e:32:d6:35:14:db:d2:4f:53:
b9:a7:26:9a:49:82:1c:4a:8c:9e:e1:d3:05:a4:07:
5a:f3:2e:b0:74:58:d5:d4:f2:1c:9a:56:a7:6a:d5:
d7:86:cb:d1:7b:41:c6:5b:f7:8a:90:9a:36:f9:45:
9a:d8:47:96:87:c7:e0:ce:4e:39:de:95:ff:46:73:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:62:7E:77:D1:26:F0:A7:CB:0D:2C:E1:7A:FF:86:D8:E4:1C:AA:F5
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:91:7f:85:cb:5a:09:8f:0c:bd:7f:37:b4:eb:bc:53:04:d2:
c0:90:d7:0a:83:87:f2:49:29:4d:c5:11:e2:6d:b1:23:3a:c4:
bc:e6:4f:28:34:db:ba:84:c5:82:3f:70:15:55:3b:d3:95:13:
20:d1:da:db:16:3a:62:9c:c6:48:26:36:03:4b:a7:99:a0:c1:
af:71:93:3b:b2:aa:92:f0:d1:83:cf:05:73:e5:33:6f:09:37:
c5:85:88:db:6d:91:df:92:16:fd:5d:af:4e:3f:aa:f5:e2:3e:
0e:85:65:1d:e8:4b:08:ab:9b:7a:e7:ee:df:c6:fe:7f:65:4c:
f1:6e:bc:56:2d:fe:71:f2:20:4b:61:4f:d7:9a:6c:40:38:b6:
8e:a7:b2:04:30:99:50:04:9f:32:34:26:5d:7c:22:0d:9e:c1:
8e:1e:10:c1:5f:15:da:3f:61:64:f2:1e:f6:f7:79:13:c7:c5:
7b:2a:04:35:45:99:c7:3e:87:8a:dc:af:d9:ff:05:39:36:3d:
cf:46:c0:e7:9a:eb:ec:99:ad:fd:78:67:5f:44:f5:56:cb:43:
ab:fe:31:7d:e0:41:bd:09:cd:41:0a:ad:53:6c:c0:38:bf:0a:
c1:c1:dc:8b:b2:9d:ce:0c:4e:2a:21:7d:c1:f7:c0:89:aa:f9:
9d:39:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:24 2025 by rpki-client