Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier: xZmofOAdCQXpObTZAlfFD+luNe50LIg2WnrZ7u4qozY=
Subject key identifier: 5C:F8:7C:94:40:76:D1:7C:01:68:06:7D:3F:69:64:AC:DE:68:1E:57
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 0197B8213B612351648F2A3F92BC83566D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number: 1388
Signing time: Sat 28 Jun 2025 20:01:14 +0000
Manifest this update: Sat 28 Jun 2025 20:01:14 +0000
Manifest next update: Sun 29 Jun 2025 20:01:14 +0000
Files and hashes: 1: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: TqR2lqUm2wyL3CWaHc8urM4RUXellnmJj+EjVpG2KlE=)
2: xjZ1XJhW_cFPR3oT-Y__-eT7BLU.roa (hash: iqLiaW6nsbh481RYQHU8cc/w97YkMP9DpENBWhWu8os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3b:61:23:51:64:8f:2a:3f:92:bc:83:56:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Jun 28 20:01:14 2025 GMT
Not After : Jun 29 20:01:14 2025 GMT
Subject: CN=5cf87c944076d17c0168067d3f6964acde681e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:ec:f4:41:a1:44:00:bf:ed:f8:e4:b0:05:
68:16:e9:55:03:d2:b4:8d:d6:b5:40:de:a1:64:b9:
c5:72:4d:20:8b:b6:28:87:90:35:71:b4:e3:12:0f:
1d:2c:e7:66:33:2a:7e:5c:01:21:b1:fa:94:ae:21:
a5:78:06:ea:4c:e0:c3:97:cc:75:b7:1f:c4:69:27:
60:82:47:09:0f:a2:ae:ca:78:b9:de:7d:7f:53:16:
78:3c:8e:14:2d:dc:54:5a:44:e7:69:d7:d5:db:21:
f1:b0:8a:fb:ec:0b:62:81:1c:55:a9:78:97:ba:ba:
bb:f1:13:81:dc:70:12:0b:ac:c2:1f:80:ce:0c:75:
d6:6e:bf:bc:d0:05:c7:d4:f6:e0:17:09:f6:b9:59:
df:c6:ea:a9:e5:f5:fd:bc:2e:d1:23:f2:7f:0b:b8:
c0:a6:10:c7:78:17:0f:3c:e2:e6:f8:ce:45:5c:8b:
12:2f:db:ae:c9:a0:d0:ac:e3:6a:d6:52:72:7d:53:
fa:90:84:b6:71:73:ae:21:6a:8b:f5:8d:04:b1:a8:
76:ce:6a:36:0c:9b:03:1c:a7:ec:aa:73:80:94:07:
2d:94:33:63:75:be:85:1e:d0:9e:ef:93:5e:b2:82:
7c:78:cc:98:ab:d7:5c:15:9c:3e:96:10:b3:26:01:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F8:7C:94:40:76:D1:7C:01:68:06:7D:3F:69:64:AC:DE:68:1E:57
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:10:2a:d0:ad:30:61:33:ee:3e:0c:fd:08:95:21:1a:8c:32:
aa:6f:03:3b:66:3e:f2:46:a1:51:80:40:ed:3c:97:c8:1d:7a:
8d:98:f9:75:ea:95:9b:a3:14:d1:06:45:fa:c0:56:b5:f7:ab:
f7:9d:f4:84:0d:ca:ed:34:2a:7a:e9:2d:d9:14:f3:b0:59:75:
2b:6a:6c:c1:89:bb:46:01:cb:b3:92:ae:01:d1:b9:65:0e:3e:
be:83:2e:aa:67:95:c8:59:5c:24:2a:7f:54:14:07:34:4d:af:
07:01:0c:0e:4e:b5:ce:df:93:2a:f4:02:d0:0a:c2:0d:cf:f0:
25:a1:eb:c4:97:bb:4a:7a:a7:6d:6c:2b:87:8f:2f:f8:ea:a3:
95:c3:0b:81:b9:39:d7:4f:10:f2:a9:a9:2f:d5:f1:74:13:32:
d2:d3:ee:92:df:49:d5:e4:51:93:f4:55:de:73:37:da:32:bb:
c2:1a:bc:dc:21:fc:82:32:15:99:ec:a7:bd:f9:3d:57:57:3d:
82:61:27:ca:dc:81:3b:02:7c:0e:d3:b4:4a:27:2a:76:ae:3f:
5e:88:d0:e6:73:10:50:b2:67:f6:74:e1:45:a6:b2:ea:b6:b9:
a6:0a:fd:1b:7e:63:8b:47:d4:13:77:79:63:c4:3b:d5:b2:e5:
36:6d:c3:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4ITthI1Fkjyo/kryDVm0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZWJiZmFhZWMyNDAzOWI0MWViYTU2YmIxY2FhNTE2Nzdk
MjFjNzAwHhcNMjUwNjI4MjAwMTE0WhcNMjUwNjI5MjAwMTE0WjAzMTEwLwYDVQQD
Eyg1Y2Y4N2M5NDQwNzZkMTdjMDE2ODA2N2QzZjY5NjRhY2RlNjgxZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZTs9EGhRAC/7fjksAVoFulVA9K0
jda1QN6hZLnFck0gi7Yoh5A1cbTjEg8dLOdmMyp+XAEhsfqUriGleAbqTODDl8x1
tx/EaSdggkcJD6Kuyni53n1/UxZ4PI4ULdxUWkTnadfV2yHxsIr77AtigRxVqXiX
urq78ROB3HASC6zCH4DODHXWbr+80AXH1PbgFwn2uVnfxuqp5fX9vC7RI/J/C7jA
phDHeBcPPOLm+M5FXIsSL9uuyaDQrONq1lJyfVP6kIS2cXOuIWqL9Y0Esah2zmo2
DJsDHKfsqnOAlActlDNjdb6FHtCe75NesoJ8eMyYq9dcFZw+lhCzJgFlvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFz4fJRAdtF8AWgGfT9pZKzeaB5XMB8GA1UdIwQY
MBaAFAzrv6rsJAObQeula7HKpRZ30hxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmIt
YjE2ZTY4M2RiZTI3LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmItYjE2ZTY4M2RiZTI3
LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhAq0K0w
YTPuPgz9CJUhGowyqm8DO2Y+8kahUYBA7TyXyB16jZj5deqVm6MU0QZF+sBWtfer
9530hA3K7TQqeukt2RTzsFl1K2pswYm7RgHLs5KuAdG5ZQ4+voMuqmeVyFlcJCp/
VBQHNE2vBwEMDk61zt+TKvQC0ArCDc/wJaHrxJe7SnqnbWwrh48v+OqjlcMLgbk5
108Q8qmpL9XxdBMy0tPukt9J1eRRk/RV3nM32jK7whq83CH8gjIVmeynvfk9V1c9
gmEnytyBOwJ8DtO0Sicqdq4/XojQ5nMQULJn9nThRaay6ra5pgr9G35ji0fUE3d5
Y8Q71bLlNm3DIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:42 2025 by rpki-client