Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: Pqtj+gUdv1QMD0xPKptKiy9as7o+u4QInA3vYuLyiSc=
Subject key identifier: A8:EF:38:66:17:2B:CE:3A:D9:76:6E:DB:68:12:0E:14:4E:C3:5D:FA
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019872CFAB64437BB69CCC9D4F05050A0DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0CD1
Signing time: Mon 04 Aug 2025 02:01:09 +0000
Manifest this update: Mon 04 Aug 2025 02:01:09 +0000
Manifest next update: Tue 05 Aug 2025 02:01:09 +0000
Files and hashes: 1: 1gDvISiJeBsiPwYz4SY-svlQBnI.roa (hash: TbL9yAwFZc+YcGPNcHElB5t7SsEiiC06AsozHAUITq0=)
2: FSvZKOyprvPTwpvLudP_lAeqhlU.roa (hash: Cxa/2gvgTaa5x9r85ztjFw7YmkKPnGeCTh6zV9r6OPQ=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: 4PpwtnNQaBNCcWC5xc6zT4MbBn91IHSftw9louvrICA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:ab:64:43:7b:b6:9c:cc:9d:4f:05:05:0a:0d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Aug 4 02:01:09 2025 GMT
Not After : Aug 5 02:01:09 2025 GMT
Subject: CN=a8ef3866172bce3ad9766edb68120e144ec35dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:98:5f:f0:be:9a:57:dc:e3:4e:7b:91:73:
0d:8a:fb:56:d1:c4:4e:ee:6b:6d:c5:bc:66:8a:99:
c3:cf:ed:96:46:8b:8a:92:50:eb:ec:ca:f2:f0:6f:
18:53:af:ab:a5:2c:28:7c:ae:9b:59:6a:a8:3e:eb:
ea:26:95:90:13:95:82:b4:6f:2e:01:2e:04:29:a4:
0c:1f:a1:36:bc:45:ea:de:a6:88:bc:06:e0:a1:78:
79:ed:b3:79:88:ea:6c:75:90:7b:9c:5b:6d:1e:21:
26:79:cb:f1:a6:b8:22:d1:c7:47:f7:37:0b:ac:1f:
f1:5f:77:c6:48:bf:d6:cd:a6:74:27:7d:8b:b3:92:
1d:02:db:d1:20:ef:2a:45:bc:fa:90:5f:a2:fb:e3:
d5:2e:88:ba:77:ae:87:50:db:37:ba:47:f2:be:6f:
96:72:ac:f3:a6:d0:7c:65:5c:d8:50:8c:af:a4:f2:
c2:13:64:79:de:56:63:fe:c9:ee:13:56:d8:f5:85:
4f:ea:84:4e:c9:28:84:62:3f:b4:12:eb:7f:94:5a:
bc:91:af:4f:76:82:60:9a:91:fe:af:72:99:84:ff:
7b:6f:15:b9:18:55:60:eb:af:2f:d3:65:ea:ad:7e:
5e:1f:9c:8a:3d:06:07:73:50:46:23:07:bb:2a:42:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EF:38:66:17:2B:CE:3A:D9:76:6E:DB:68:12:0E:14:4E:C3:5D:FA
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:22:4b:e7:46:e2:fd:be:db:77:eb:5d:59:c5:05:ea:a3:7e:
9e:b5:ee:91:b8:b4:91:f0:4e:b2:0d:1c:18:f3:ff:28:95:b5:
77:8b:1b:68:62:2b:54:6d:cf:ac:47:69:ad:3f:2d:fe:47:d6:
f5:ba:5a:d3:88:3f:10:a3:2b:11:ce:11:4b:0f:73:5e:53:21:
4b:6f:90:7c:80:d6:21:50:b1:18:87:71:3e:e0:20:3a:8d:d4:
b0:19:0b:79:eb:ed:fb:39:bd:2c:65:4f:f3:cb:4f:05:72:e4:
ba:2d:d1:70:72:54:5c:d9:a1:1f:73:2a:e6:b9:23:fb:d3:92:
8a:be:43:e1:74:77:6d:d1:13:ac:2d:ed:97:e2:37:e4:b3:a8:
58:3f:a3:28:9b:e4:4e:a4:ff:51:dd:73:1c:c3:8c:e1:66:28:
54:12:c7:f7:e8:91:72:cc:34:74:e2:62:6d:23:e2:cd:b3:5b:
18:99:e8:81:13:eb:c1:94:03:05:54:c6:b5:ac:88:68:af:8b:
bc:e9:a0:aa:86:88:97:d8:e6:c7:e7:23:79:b9:f8:66:75:e8:
61:14:2c:ea:62:73:42:d4:fe:7b:14:81:d4:24:1e:eb:0f:a8:
83:1d:52:17:07:e6:30:30:f9:bf:66:b6:9b:98:72:27:8a:6c:
bb:82:74:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:23 2025 by rpki-client