Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier: InxWJrhs+COXTdWnrO2ywMQ2ee1Na00QRt2btfmDmm8=
Subject key identifier: 0B:9D:ED:91:0D:1D:6C:B0:76:38:6B:4A:8B:1A:FF:9E:74:96:CA:38
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 0199FB7CFF1388E1CC22E7D4EF42EEA6AD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number: 14B4
Signing time: Sun 19 Oct 2025 08:01:36 +0000
Manifest this update: Sun 19 Oct 2025 08:01:36 +0000
Manifest next update: Mon 20 Oct 2025 08:01:36 +0000
Files and hashes: 1: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: WhvUH1j27C5pxgUgMsSd7n773nzPZYphj6+rJGiy9ak=)
2: xjZ1XJhW_cFPR3oT-Y__-eT7BLU.roa (hash: iqLiaW6nsbh481RYQHU8cc/w97YkMP9DpENBWhWu8os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ff:13:88:e1:cc:22:e7:d4:ef:42:ee:a6:ad:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Oct 19 08:01:36 2025 GMT
Not After : Oct 20 08:01:36 2025 GMT
Subject: CN=0b9ded910d1d6cb076386b4a8b1aff9e7496ca38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:37:29:7b:2f:ba:fd:bd:85:e6:f0:21:36:
9b:11:15:55:bd:8e:f1:5c:fb:25:f0:98:01:02:19:
9b:2b:f6:25:64:ba:97:2e:49:f2:ca:8f:28:0e:4a:
77:13:64:3b:09:d5:8e:ef:94:fa:22:85:d5:24:d9:
fc:5a:05:b9:d3:34:01:0c:c0:a1:51:1c:9a:6b:f2:
ee:79:29:0b:ff:f6:ee:8b:7c:75:7d:41:ea:a8:04:
52:54:9f:3f:d2:a4:5b:de:2c:8f:5c:67:10:d5:a7:
c1:11:9e:e0:7e:db:48:2f:a0:1a:0e:e6:22:9a:25:
d6:f9:92:0a:fe:97:4a:7e:5a:12:5a:a8:39:93:52:
47:76:3b:d8:8a:43:38:9c:0f:fd:9b:ab:71:36:d3:
61:74:e9:f1:ca:05:34:1d:a7:07:ba:aa:e9:de:0e:
51:c8:ab:d5:55:f3:fe:c9:f1:bd:6c:82:b4:03:4c:
e4:d3:81:15:2b:3c:93:4f:9b:e8:71:59:c2:60:eb:
44:6f:c1:31:15:5a:11:10:0c:af:46:7d:d7:7c:0c:
8d:68:3d:89:b8:83:ad:60:8d:c8:b3:20:8b:fe:07:
c6:ea:24:e9:ea:9a:0a:cc:19:61:b0:2e:47:f6:f3:
8e:38:e6:4b:33:01:51:68:e7:92:d6:a0:63:b2:4d:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9D:ED:91:0D:1D:6C:B0:76:38:6B:4A:8B:1A:FF:9E:74:96:CA:38
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b6:6c:d1:49:e0:86:af:ad:95:4f:40:27:d4:35:4a:2a:b0:
a1:5f:2f:a8:83:9a:df:3d:15:fa:fe:ef:d7:6b:55:75:80:fb:
61:47:49:9d:f8:ea:6f:c0:21:45:34:71:99:5b:00:c3:21:82:
20:0e:a5:ea:3d:72:14:d4:0a:a4:f3:c3:4e:1e:f0:0c:3b:71:
a9:3b:25:f2:d1:05:ec:47:ca:39:9b:0d:68:73:23:62:fe:e9:
e0:dc:61:53:a5:86:d1:91:41:1c:36:b5:d2:b1:28:15:17:52:
2a:6a:f8:bf:5d:ad:ab:9d:b5:4f:bc:6a:53:bf:0a:ea:78:da:
fd:0b:79:12:da:7e:ac:cd:0b:52:b2:37:18:9d:2f:89:98:a2:
1b:67:99:2c:a5:4d:3b:c7:eb:3b:9b:92:35:95:28:69:0d:af:
6c:59:c3:8b:72:da:20:08:df:f1:93:69:75:35:be:72:6a:3d:
db:c0:37:99:e6:a6:75:79:30:ba:3b:fa:5c:68:79:f1:1b:01:
b0:3b:37:88:cb:8e:5f:dc:73:00:44:a3:6e:7d:8f:a6:44:a2:
63:96:e0:c6:ed:b3:0f:5b:b6:3a:c3:d5:d6:65:68:08:86:05:
be:a6:e4:b3:d5:ef:b5:9a:6c:4f:56:86:bd:72:b3:a1:3b:54:
bb:4d:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:16 2025 by rpki-client