
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: 2kEnaz+/a/rzPkMFb6XPuSiNJ1qnpUFqH4MA5xg6vQE=
Subject key identifier: 4A:04:E7:EC:8F:4F:49:31:AF:0A:E7:57:A5:91:3E:33:18:4F:7E:4A
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 019897EE5CD613D67BBA508573E0B5A0F857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 07:00:37 +0000
Manifest this update: Mon 11 Aug 2025 07:00:37 +0000
Manifest next update: Tue 12 Aug 2025 07:00:37 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: DTUjl6N2vyKlFxPQBvyR1rUvYlKQwgJxOXipBrJB0tw=)
2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:5c:d6:13:d6:7b:ba:50:85:73:e0:b5:a0:f8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Aug 11 07:00:37 2025 GMT
Not After : Aug 12 07:00:37 2025 GMT
Subject: CN=4a04e7ec8f4f4931af0ae757a5913e33184f7e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:6d:33:12:10:ee:b7:48:6f:a5:f4:54:27:
a2:e6:d2:c7:ce:15:5e:d2:7a:d3:33:2b:64:bd:4e:
64:94:47:46:31:d0:69:a0:b1:0c:c4:5b:c3:20:9d:
0e:f2:05:46:a5:06:bc:39:15:93:bc:ca:d1:93:ac:
f0:f2:78:0d:ff:81:e3:cb:fa:db:bf:fe:0f:af:ea:
38:4c:3c:ab:2f:00:8f:b3:9d:e6:a8:04:9f:0e:d9:
0c:04:2e:cd:2d:31:7e:1d:2f:65:90:d4:9d:2a:2a:
57:58:03:d6:dc:a1:07:da:4a:99:d6:3e:ea:d5:f0:
ec:aa:dd:9c:29:2d:c6:4c:5d:47:03:88:ef:b4:c8:
8f:b1:53:7f:2a:21:6c:0a:e0:de:15:6c:80:d0:d2:
35:2e:e1:9d:27:ac:b5:42:12:f0:73:27:ce:d5:5e:
d3:51:e5:70:ff:ad:5a:62:d2:66:d2:6e:c1:98:4c:
82:78:ba:ca:2d:41:0c:8a:f6:f9:10:a7:b2:ba:d1:
57:41:fb:3e:18:2d:02:d2:45:9c:5c:df:c0:4b:1a:
e2:5f:33:b1:fe:51:bb:18:c4:b5:9d:e4:76:f0:ed:
d5:d7:0c:72:28:1f:53:48:1c:06:bc:a9:fd:e5:58:
67:76:d1:80:61:2e:05:78:3b:2d:10:a7:65:5b:93:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:04:E7:EC:8F:4F:49:31:AF:0A:E7:57:A5:91:3E:33:18:4F:7E:4A
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:19:01:a2:8b:d6:39:e9:fe:bc:49:41:bf:8d:09:a0:1c:d9:
9d:4d:20:fa:8c:6b:61:0f:b1:e9:a8:4e:49:5e:bf:38:94:9d:
14:e6:d3:fc:c3:4e:89:c3:27:56:0c:10:3c:bf:87:8f:92:6a:
64:0c:4e:dd:68:94:9d:81:f3:96:0f:26:bb:2e:f0:73:ea:bf:
8d:4a:35:41:ac:9a:36:85:cf:74:e2:e1:67:50:ad:28:27:22:
7d:f5:ef:69:32:52:a1:cc:7b:56:3a:0e:65:48:de:15:75:13:
e0:57:9b:2e:31:dd:df:4a:c4:97:d3:6e:7a:58:f5:4c:db:5d:
bb:02:27:93:69:21:67:b3:38:9c:ca:dd:7f:7a:5e:c2:f4:48:
51:14:f2:c3:cc:4d:d5:99:36:58:58:04:0d:3c:29:9f:99:39:
38:da:2b:67:2d:1f:43:f7:a2:91:d1:0d:f5:db:e8:41:78:63:
35:f9:62:c6:80:36:2d:f3:7a:9b:58:ec:1d:6b:c8:51:97:0b:
d2:b9:b9:de:20:4f:93:8a:85:23:6f:b9:bf:a5:2b:4b:a8:eb:
c7:a0:72:1d:dd:0d:92:3c:1a:52:23:d9:cc:23:5a:ae:57:80:
68:74:ca:c8:e0:83:27:1c:04:87:f4:77:ea:00:17:8d:3b:fb:
a1:55:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:45:54 2025 by rpki-client