Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
File: 0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json)
Hash identifier: tuCy1fRWWvIhaJ6owdJwmTtcnLiyIbZoplJohL/bqsQ=
Subject key identifier: F2:C0:B3:FF:16:88:CE:E6:68:B1:36:10:07:6E:AF:BD:72:BD:A7:A1
Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Certificate serial: 0198752B7B7F788AFAE751D5F0A7265A0A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
Manifest number: 0DDC
Signing time: Mon 04 Aug 2025 13:00:40 +0000
Manifest this update: Mon 04 Aug 2025 13:00:40 +0000
Manifest next update: Tue 05 Aug 2025 13:00:40 +0000
Files and hashes: 1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: qNnaXutuwqxcr0t6b6ElKdOecZnsd5cVqAu2OZxkuIc=)
2: iNP53awYopMvAC4_B7BQl71kOxY.roa (hash: bB0RVg76/44F7S9NnPgzE3dfYBZqeAvXewkbyz58CrI=)
3: lsnXG1QZQcE8MO7Sy6Rk0--VHVo.roa (hash: H6uKA8IXZMicdWaKzhjJe9pvq8QiwubQ+Jp2iPiiq2o=)
4: tO7FKCFax-gtGeKJuusgZ6pHQQ8.roa (hash: o1Lh17vyaKAVv+dEziVl9qAFWYzZNADmVMYgNFzVQxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:7b:7f:78:8a:fa:e7:51:d5:f0:a7:26:5a:0a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Validity
Not Before: Aug 4 13:00:40 2025 GMT
Not After : Aug 5 13:00:40 2025 GMT
Subject: CN=f2c0b3ff1688cee668b13610076eafbd72bda7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:b9:e2:5d:ef:33:b4:c2:a5:53:1e:7f:4d:
51:90:45:dd:d9:d5:80:c5:e3:69:4b:76:93:16:5c:
22:90:df:cd:4e:08:70:af:ad:03:84:70:a0:c9:a2:
19:40:35:65:5e:85:3e:1d:b4:75:62:43:fd:a4:21:
e9:c0:a7:73:f8:3b:aa:01:3c:6d:18:e2:2e:0a:d8:
46:3e:01:bd:5a:5e:c9:66:d1:62:d4:1c:da:d9:86:
1f:7d:f0:e7:8d:9c:94:b4:a4:b6:63:7e:9f:df:25:
11:67:2d:1f:55:25:fc:c2:3d:99:81:5c:74:2c:36:
4d:74:ed:41:1b:cd:29:e7:c6:61:ef:92:52:09:da:
f7:62:f4:df:c3:5e:00:5c:ab:23:a1:16:13:da:b3:
f7:44:2e:61:c2:e0:ce:69:94:db:fd:f7:7b:e4:e2:
c1:cd:a0:e9:37:f1:91:b1:f7:83:2a:9a:1f:fc:d1:
55:36:ec:51:9c:31:68:04:4e:47:6e:34:fb:8b:a3:
6a:74:5e:24:d2:f1:53:26:2f:10:c8:35:ed:1c:a3:
60:d2:1d:0b:c5:c7:35:cd:bb:e2:77:6d:a1:87:43:
e4:74:cb:34:c1:cc:b2:20:74:ec:e6:8f:29:25:14:
7e:e5:ac:fb:9f:ad:3e:53:87:a3:1e:64:c0:15:d8:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C0:B3:FF:16:88:CE:E6:68:B1:36:10:07:6E:AF:BD:72:BD:A7:A1
X509v3 Authority Key Identifier:
keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3c:d8:92:97:ae:6f:7d:5a:bd:cd:59:0a:74:6e:6b:4f:69:
e7:e6:ee:9f:83:eb:0e:1f:d8:c6:94:a2:47:c3:87:2f:2a:ed:
4f:15:94:a8:54:e0:cf:06:4b:cb:30:6e:e3:76:e9:3c:eb:c8:
07:1d:45:49:76:c5:b7:35:f5:c9:ab:a6:0d:77:18:ed:5e:19:
bf:14:ba:b5:4d:fd:ab:1e:18:6e:e8:7e:f1:4d:3f:65:0c:57:
2e:b7:ba:82:20:d1:76:a7:a5:5d:b7:0f:c5:71:da:f8:dd:72:
f4:9d:85:98:1a:26:38:19:aa:29:8b:a0:be:9b:f0:8f:f6:0c:
db:81:e5:c3:66:d0:6c:3f:f3:1b:da:d2:b3:0c:61:41:41:36:
f0:2d:99:0b:bb:e0:cc:65:cd:aa:94:d7:0d:49:29:40:3f:63:
64:e6:89:ad:06:55:cf:5e:32:54:dc:0e:f8:0f:c1:3d:58:21:
40:b7:2b:02:b2:13:66:97:c1:d3:2f:1c:24:94:a0:05:8b:ee:
1b:ce:ee:b5:f9:2e:4e:f4:c6:20:83:cd:27:21:b4:45:e2:b3:
2b:4c:9c:2a:71:ae:ed:43:59:b8:8c:4c:9b:34:8d:08:3d:99:
5e:3d:fa:5b:9d:7a:2e:70:40:43:a5:50:3a:c5:7e:ce:83:31:
97:73:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:11 2025 by rpki-client