Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: Z8yInqIf0A5VZVmoVQpGxSeQB/MGwoUUfmP/BgLf2Zo=
Subject key identifier: 58:A5:51:14:8C:86:FA:E2:76:35:B9:81:64:62:2B:BE:12:1B:70:E3
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 0198D660145A3474E5B4BE35200ACEC0E8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 0AAB
Signing time: Sat 23 Aug 2025 10:01:17 +0000
Manifest this update: Sat 23 Aug 2025 10:01:17 +0000
Manifest next update: Sun 24 Aug 2025 10:01:17 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: Tnsm2jvFDcec3xa4CTgQtvKd5fExiKaSJoNoj3UEohQ=)
2: oeUHXPRVWNrr1QJirrKSZQy6zrU.roa (hash: SxbvFYL3nEPIvag7xzWrtYfbRcEggJtZoR9CvV7aWPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:14:5a:34:74:e5:b4:be:35:20:0a:ce:c0:e8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: Aug 23 10:01:17 2025 GMT
Not After : Aug 24 10:01:17 2025 GMT
Subject: CN=58a551148c86fae27635b98164622bbe121b70e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:b4:85:33:33:42:df:8e:06:5c:99:28:fb:
2c:41:70:ad:8b:ed:e5:63:7a:2d:fa:27:25:21:4a:
60:ba:98:3d:e6:5b:5b:3b:eb:a8:c7:5e:f4:64:db:
6e:6a:a5:fb:fb:2e:db:03:27:9e:a0:23:fa:14:58:
1d:26:eb:27:26:9c:fa:62:f7:f5:38:66:8a:ca:44:
05:d5:05:0b:25:30:65:d9:e6:5a:74:15:ff:67:34:
b7:41:e7:8a:fb:03:84:73:8e:c7:7f:ef:ba:48:24:
85:59:83:cc:b3:af:a4:ea:bf:2e:5b:a7:b1:c0:9a:
e6:3f:ca:f0:0d:72:d4:12:02:f6:ef:ed:aa:b4:e5:
ef:b2:95:f7:90:51:88:7f:1f:76:17:3c:d7:59:2f:
69:7c:b2:ec:31:a7:88:c4:42:73:ab:ea:e6:a7:f4:
f0:62:8e:79:44:e4:2e:22:46:1b:dd:78:25:49:7b:
d8:5f:fb:80:0e:f5:06:95:89:00:65:14:f6:fa:a2:
7d:20:e7:ed:78:d9:1f:7c:76:4f:e7:05:42:3f:ab:
73:a6:27:1b:b8:97:5d:b5:f4:7a:8f:f7:30:e3:3a:
99:3e:30:65:0e:b8:ff:77:92:72:10:69:49:c2:4f:
0b:a9:ce:f2:11:91:41:05:ce:e0:47:76:35:13:84:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A5:51:14:8C:86:FA:E2:76:35:B9:81:64:62:2B:BE:12:1B:70:E3
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ca:a0:d2:06:82:28:ed:6b:ed:4d:15:14:e1:09:a8:d3:46:
0d:1c:12:e7:a9:b5:35:d9:8e:d3:55:4e:92:6a:50:ec:c6:ce:
e4:6e:b5:5b:32:15:77:38:87:2b:b2:57:2d:96:8c:08:9a:b2:
7c:19:4c:7e:63:73:cf:ce:a9:6f:a6:39:88:a8:f4:8c:70:9c:
cc:28:d5:9e:56:87:71:7a:5b:32:3e:d2:e5:cb:31:71:f0:99:
67:ba:93:8c:cd:7c:c6:7b:69:40:73:db:95:64:38:5d:70:40:
b2:7b:3f:65:d4:50:3f:ca:30:07:1e:e7:a8:0b:44:d0:84:6a:
bc:61:e5:17:30:d2:c4:23:92:d2:ad:05:13:d8:e1:4d:e6:79:
b6:5b:cd:db:84:0c:28:b7:60:99:2b:44:ce:a7:76:4a:f5:5b:
67:27:29:71:00:9f:e9:2c:24:72:49:d6:68:b6:45:2e:25:56:
75:fc:6f:df:4a:e1:2f:dd:68:e7:f4:f1:0c:54:0f:c4:e1:94:
b8:c3:1e:13:35:e5:5b:0f:16:fb:86:82:f5:74:9d:63:31:ba:
e0:f6:7f:ac:0c:6e:4a:b4:4a:50:60:3c:17:af:f5:d5:8b:cf:
68:e1:0b:71:93:ab:75:e6:b2:b6:dd:c4:c8:23:4d:a2:97:80:
44:d9:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:47:36 2025 by rpki-client