Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: iqdc1zU9EhLtQSjYiGQZtA/AY4DiBAmZCjqq5vVChPg=
Subject key identifier: 2A:F8:85:B9:EF:7B:4A:2E:9E:99:D6:4D:A3:97:98:C3:3B:D5:A7:3D
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 019885B22B1618FB4F08DADB724D42CC6FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0A24
Signing time: Thu 07 Aug 2025 18:01:42 +0000
Manifest this update: Thu 07 Aug 2025 18:01:42 +0000
Manifest next update: Fri 08 Aug 2025 18:01:42 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: LzMU1Sq6ID+Zd8pXSVWQtaSGiBApezdHJjzOkOb1y0c=)
2: lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa (hash: iBeGuJYtICJBlFiRT2Vx63Td8Xc0QnYIl7/YBwzr0yk=)
3: nse16AXrwM95FOL9jR_rmw-FBUU.roa (hash: CGc2Mm01WTMfgJYYXJTw2QH6yfxtC7+nYMl9iTzeZeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b2:2b:16:18:fb:4f:08:da:db:72:4d:42:cc:6f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Aug 7 18:01:42 2025 GMT
Not After : Aug 8 18:01:42 2025 GMT
Subject: CN=2af885b9ef7b4a2e9e99d64da39798c33bd5a73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:f5:c5:93:c5:8a:8a:49:c9:cf:a6:32:3f:
91:88:10:89:46:78:9b:b0:64:db:f8:1f:61:a6:f7:
a1:28:7c:83:07:50:44:fd:6a:ce:df:73:c3:dc:7b:
24:07:61:01:e6:49:17:57:c6:d2:47:7c:51:c2:d6:
50:ef:12:3a:90:a5:41:77:d5:f5:ef:4a:24:13:9c:
e4:62:50:0f:ac:12:06:06:63:bd:14:f9:ce:84:a7:
f1:84:42:e9:60:08:39:d6:51:f9:28:4d:95:05:9e:
57:81:14:df:09:e9:16:19:33:ff:d0:8d:51:99:64:
e9:4e:17:ed:45:c2:fc:4c:c9:8c:31:fd:71:0e:83:
46:a9:e3:33:64:38:1d:83:06:09:b1:ab:04:76:93:
96:e0:67:40:5d:fb:f4:1e:6a:0f:6a:8c:1d:25:70:
aa:6f:e5:49:88:4e:30:64:5e:d0:f7:a0:8a:6d:5a:
90:ab:92:69:1b:21:5a:2c:fa:22:08:c8:41:9e:dc:
32:62:e0:3b:f0:cc:d7:9f:1a:80:3a:17:2e:0f:f3:
38:52:57:2a:c0:ea:13:a7:28:2e:3d:4e:69:00:a4:
fe:48:c1:4b:9d:1d:cc:3c:f0:aa:96:a5:74:54:9d:
b1:f5:3b:07:ac:ef:cc:00:33:2e:ad:ab:80:17:40:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F8:85:B9:EF:7B:4A:2E:9E:99:D6:4D:A3:97:98:C3:3B:D5:A7:3D
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:75:cd:5b:3e:fb:1a:75:fb:ae:b1:c0:33:c1:b1:18:bc:d0:
7a:16:82:ae:dd:62:fb:5f:4f:80:d0:2f:5d:a7:92:72:0c:a2:
b8:24:79:e2:49:6c:27:a6:63:e3:65:2a:67:83:ba:6d:ae:c4:
9d:46:61:26:31:b2:fa:4e:c4:ab:6b:78:ff:72:35:8a:33:bb:
ed:bc:0c:8b:07:90:47:f6:97:67:09:f8:a9:5e:a1:6c:52:87:
ba:2a:59:1d:01:5b:cc:b4:07:4d:37:eb:5c:63:93:db:cd:22:
11:b1:c0:8a:c2:42:d4:ab:93:56:3f:07:dd:02:fc:e2:14:62:
5b:a8:53:af:56:dd:b5:3c:c3:c5:db:56:3c:40:a3:22:b3:4d:
e4:f7:89:c7:11:d4:29:b2:e1:8a:fd:f5:13:b3:a3:5e:ec:85:
20:8f:17:06:be:7b:bf:19:80:97:b1:da:23:3f:fa:8d:48:9f:
fe:b3:22:fe:3f:88:22:1c:0a:b1:78:db:1a:bc:ae:00:96:cc:
67:39:03:77:1a:be:92:dd:6a:a7:99:92:a7:14:55:46:87:8e:
a1:0a:24:30:a7:e8:a4:5c:a1:7e:70:ec:f0:30:09:de:3a:00:
f3:cd:07:7f:4b:f5:51:3e:ad:28:7b:1f:27:28:24:01:ee:39:
d7:bc:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:56:07 2025 by rpki-client