Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: Q2W92/6ZpNi3W7Tmx3sEBF3P/EFX00XnOFsjzX0FE2U=
Subject key identifier: FD:A3:5A:37:B8:1B:CA:E4:9E:5C:61:BD:23:C4:95:7E:16:F7:14:A0
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 019A03A4D22FFDC2BAAD9A2A870351F262FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 0B47
Signing time: Mon 20 Oct 2025 22:02:04 +0000
Manifest this update: Mon 20 Oct 2025 22:02:04 +0000
Manifest next update: Tue 21 Oct 2025 22:02:04 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: G0vsq4QB/uDv30Mlh2JW3ZEQvNw1F2PYWLPWgLoIeDM=)
2: oeUHXPRVWNrr1QJirrKSZQy6zrU.roa (hash: SxbvFYL3nEPIvag7xzWrtYfbRcEggJtZoR9CvV7aWPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:d2:2f:fd:c2:ba:ad:9a:2a:87:03:51:f2:62:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: Oct 20 22:02:04 2025 GMT
Not After : Oct 21 22:02:04 2025 GMT
Subject: CN=fda35a37b81bcae49e5c61bd23c4957e16f714a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:3c:89:db:71:a3:49:9a:1d:73:f9:cb:ff:
10:f1:ff:ee:bb:8c:31:3a:68:ad:29:3e:10:a2:89:
b9:c6:38:1c:03:ff:f7:0a:f2:58:bf:e3:95:ee:f2:
b2:d7:08:fb:8b:ab:2c:4f:45:a3:38:5c:28:e9:b9:
08:1f:33:65:e5:c3:ac:5c:2e:3f:fb:53:36:ee:ac:
b4:25:e4:7c:2b:4e:4f:bf:15:e9:16:f6:96:78:9f:
c1:34:0f:db:e1:8b:e3:97:c5:cd:27:9e:b2:21:08:
a8:ab:f2:e7:44:92:03:e7:e0:fa:a9:1a:77:60:de:
6e:8e:53:a1:89:9e:20:fd:d8:7f:c6:d1:a1:a5:3a:
8a:e2:cc:a9:8e:c9:49:46:90:45:07:c7:40:95:55:
c1:10:ec:8a:75:49:03:9a:61:df:b1:28:13:81:a7:
ab:a4:8a:c8:6e:e5:b8:cd:76:38:20:d3:07:c4:62:
37:39:24:72:25:fb:d2:1d:1b:c1:1e:ca:4d:7c:cd:
9c:ff:8e:b1:70:2d:47:b7:05:53:4a:10:ec:2b:70:
62:ac:6c:2e:2f:68:cc:b0:36:a2:d9:4f:44:2d:4f:
ee:ef:36:80:ff:76:02:80:bd:26:93:cb:c4:13:23:
39:34:2d:8a:46:24:46:8c:34:1c:d2:32:0a:df:5a:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A3:5A:37:B8:1B:CA:E4:9E:5C:61:BD:23:C4:95:7E:16:F7:14:A0
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:58:73:ae:c7:f4:ae:1e:a2:65:5e:05:49:50:6d:75:9e:a1:
63:c2:09:75:96:a8:e1:b6:d7:25:e4:92:04:3d:a3:78:f4:16:
22:e1:8e:49:0c:38:47:9a:88:bf:36:c9:35:5c:cb:f7:16:5d:
ed:4d:b0:fc:52:58:08:32:b8:bd:d1:75:a2:6f:22:44:22:e7:
0d:f9:e8:9e:7e:8f:7e:f0:56:78:91:7e:c5:fe:1d:13:1b:7f:
57:e8:93:1b:35:22:e4:3f:1b:43:1d:64:ae:9b:0e:f5:6d:1f:
65:f8:48:89:4d:96:ae:e0:74:0d:f2:2a:de:d5:67:c6:d0:ff:
f1:af:3a:ce:c4:5f:2d:f9:e0:c3:50:3f:50:64:f3:60:86:f9:
29:64:1b:3b:a0:9e:6f:eb:e6:fe:e6:06:88:d7:49:44:87:78:
e0:72:43:23:ce:6e:52:52:12:8c:4b:75:fc:86:3d:ac:c7:11:
14:e9:83:23:eb:fd:32:80:d1:36:e7:42:48:d3:f3:18:2e:86:
34:1c:59:b0:b2:44:cd:c7:dd:1e:54:f4:9d:b1:ea:64:cf:4e:
b6:c9:5f:47:ca:d6:ae:79:59:5f:db:09:6d:7b:eb:01:0a:11:
dc:3a:a7:d7:7e:63:cc:44:7a:9c:b7:ce:f0:29:32:a9:6a:36:
f4:ad:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:35:32 2025 by rpki-client