Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: XQ+GV6EfiSE5fJRBdUszvQKNYNUpHL60hhjHp1yO1Bc=
Subject key identifier: 30:CD:E0:7D:36:D8:8E:FD:B1:E5:9B:52:54:67:A8:21:E0:9E:11:5C
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 0198820BD02327DD420CE4AFA0B02A7E4537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 10B5
Signing time: Thu 07 Aug 2025 01:01:08 +0000
Manifest this update: Thu 07 Aug 2025 01:01:08 +0000
Manifest next update: Fri 08 Aug 2025 01:01:08 +0000
Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=)
2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: l7GSIXhfTDUM/bQIwSCiPAPPm+QzGXPRIxdrTjgXAo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:d0:23:27:dd:42:0c:e4:af:a0:b0:2a:7e:45:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Aug 7 01:01:08 2025 GMT
Not After : Aug 8 01:01:08 2025 GMT
Subject: CN=30cde07d36d88efdb1e59b525467a821e09e115c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:d7:76:c9:b3:f4:e1:8b:7a:d1:19:29:19:
b5:ee:d7:c1:4a:99:a5:4b:3f:13:65:1e:59:dc:36:
c9:06:6a:fb:30:14:04:96:c7:34:fc:17:55:18:94:
8c:9f:cc:5c:65:b4:6b:1d:fa:a7:cc:87:0b:31:16:
c3:68:41:4f:16:0a:d5:52:26:97:43:c3:77:ee:4f:
a4:be:e3:1a:d9:80:c8:fd:51:6c:b7:04:19:4a:f4:
f4:4c:95:d8:a0:1f:50:44:de:4a:63:c3:55:6b:15:
b0:46:a3:d9:a7:7d:e6:a2:92:51:2f:c0:57:57:8b:
94:7e:ed:b9:51:61:21:89:17:4f:a3:1f:58:c2:2b:
b3:c5:b7:64:0d:bc:9f:25:49:31:b0:d6:8d:6e:72:
b4:d0:90:d8:dc:3e:0b:d4:f2:a0:b2:37:92:98:08:
0e:79:51:0b:e5:c8:cf:fa:f7:04:13:06:8e:fb:48:
b4:06:21:ae:a8:da:6d:08:61:d6:4c:de:22:b0:be:
e3:88:bb:03:8d:54:a1:a9:4b:0e:1f:11:fe:7e:03:
2c:bf:f6:6e:14:8c:dc:5f:c5:68:3f:2a:8d:0c:76:
4d:e3:02:92:cb:85:81:cc:f9:4a:34:b7:6f:ad:26:
99:72:f2:55:68:10:6a:0f:6f:73:47:7e:b8:8c:f7:
5d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CD:E0:7D:36:D8:8E:FD:B1:E5:9B:52:54:67:A8:21:E0:9E:11:5C
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:be:f2:b9:00:c6:7a:cb:b8:1c:57:c0:ed:25:f4:44:6b:99:
8d:71:28:5c:59:cd:c6:27:9b:58:bd:8c:bd:22:7a:f3:af:49:
bf:11:47:a6:fa:73:18:76:e2:d2:d9:41:8b:ee:dd:81:ca:8d:
e4:39:ee:3b:f2:21:92:b7:11:0d:53:25:75:32:80:1f:e5:82:
1c:37:b3:c4:63:cb:d3:f8:1c:ad:5a:a3:a5:98:e8:cd:89:43:
fd:d4:7a:63:0f:16:0d:66:26:14:c2:72:7a:fc:a3:15:01:9b:
27:52:e7:de:05:90:84:07:21:e8:4b:f9:38:36:55:e3:03:05:
73:7d:35:b7:ec:49:69:7c:b9:37:d5:fd:cc:bd:e9:18:4a:01:
88:2f:e5:5d:0d:d6:48:8d:29:03:e6:06:22:3d:85:04:55:fd:
db:01:6a:e3:be:17:fc:70:eb:da:a6:73:ca:e4:7f:84:f6:54:
08:d1:0b:25:a7:d1:d3:89:46:3a:21:bc:18:75:75:37:60:17:
a9:96:cb:51:33:cd:45:0c:bc:bd:e6:88:72:00:b5:97:e4:31:
44:60:82:b0:0a:0d:b1:af:d8:3f:f1:72:aa:85:77:f5:7b:aa:
0f:a1:9b:7f:a9:c5:f0:91:ac:64:4a:1f:ed:a7:24:af:fe:b4:
1a:12:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:42 2025 by rpki-client