Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: 3L6K0lcjERzDwuZ4czzQ2RdA9fjqywMYgtvkCiZNKrI=
Subject key identifier: 7A:B7:8A:4D:4F:06:B3:1A:EB:7D:B6:1A:82:10:31:4B:B0:DB:C6:21
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 01989034EEF238CE74B82044D52290BBBC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 02E0
Signing time: Sat 09 Aug 2025 19:00:44 +0000
Manifest this update: Sat 09 Aug 2025 19:00:44 +0000
Manifest next update: Sun 10 Aug 2025 19:00:44 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: OKvi46QbuGxh/vwfAbLNjS9RHsVtMKfr6VE3DgvmYyk=)
2: GqXg2NC5IUxRI1mWcJNsyZxesng.roa (hash: wIFPJcYLl1DLySOyYumJerZ6TcbUU8g29XL5Yzwhz2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:ee:f2:38:ce:74:b8:20:44:d5:22:90:bb:bc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Aug 9 19:00:44 2025 GMT
Not After : Aug 10 19:00:44 2025 GMT
Subject: CN=7ab78a4d4f06b31aeb7db61a8210314bb0dbc621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:1b:e3:0e:1f:c5:59:70:ab:62:5b:32:83:
7b:8d:99:69:45:ff:54:7b:59:9a:19:00:ef:65:0d:
38:b3:40:ff:aa:33:1c:c0:5b:4d:9c:5b:60:bf:2b:
92:d1:97:33:9f:d6:8b:88:aa:92:2c:04:ce:ff:1c:
90:8d:b9:3a:42:60:be:2a:57:be:13:71:68:92:57:
e1:0e:3a:6d:4c:5a:96:dc:94:99:60:16:b2:b7:1e:
86:d9:49:31:dd:92:98:5d:b8:40:79:54:36:22:93:
a7:e3:5c:58:3c:9b:e3:0f:89:1c:d1:ea:92:c4:db:
57:c4:79:d1:b3:33:30:1a:35:41:9b:c3:60:c5:0c:
00:ac:71:75:bf:1b:b8:7f:91:74:34:0c:eb:b5:d5:
fe:7b:e5:00:a0:d3:c0:d3:f4:3b:bb:27:3e:80:08:
55:85:e9:8e:f0:8f:03:ea:b8:05:cb:38:2e:04:a2:
03:4b:9e:3c:7b:d3:98:21:91:99:c1:87:39:53:be:
57:80:90:10:c1:cd:a0:44:4e:f1:c1:e6:0d:d8:c0:
3e:11:26:2b:f8:07:5f:fd:81:b9:ab:91:36:98:31:
f9:1c:bd:f5:00:73:82:fb:10:06:e8:f2:b5:6f:44:
70:f3:b9:40:e6:9d:a1:e0:d6:7c:a7:d0:d2:2a:d0:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B7:8A:4D:4F:06:B3:1A:EB:7D:B6:1A:82:10:31:4B:B0:DB:C6:21
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d4:7d:9a:f5:21:04:9f:6a:26:e2:14:7b:0b:aa:52:10:9d:
b3:e9:70:30:ab:2b:ed:b2:8c:a1:35:3a:24:8c:80:c4:86:c6:
58:61:f1:e0:12:8d:58:1a:b8:41:9d:b3:32:de:b8:60:5d:ba:
b6:db:f3:ac:49:db:ce:0a:f4:7a:84:dc:5a:f2:a7:ca:6b:34:
b1:95:db:08:b5:42:d8:42:7e:c1:f5:71:96:32:b3:35:dd:22:
56:f3:95:00:a5:90:0d:ae:0b:39:80:e1:cd:ef:e1:5b:78:20:
27:65:8f:aa:e0:29:f6:73:e9:1b:e0:ae:50:83:ee:58:36:59:
95:c6:30:2f:48:46:ec:19:cf:f2:b2:2f:40:d2:cd:7e:5f:1a:
a7:91:33:40:d2:5b:15:e3:e1:ba:03:95:ac:25:9e:6d:86:8d:
d1:4c:ab:56:70:f2:b4:cb:e3:98:06:18:0e:a6:32:94:a8:d9:
a2:27:64:a3:7f:d2:04:c6:44:f2:ef:23:87:78:2b:67:19:10:
11:85:0a:85:d6:75:1e:7f:1f:a1:cb:9b:38:42:a3:42:35:e7:
95:c6:12:1d:d2:19:9f:8f:6d:96:5d:4f:eb:1d:a5:ce:df:fc:
d3:93:ec:38:b9:85:83:d4:37:3b:fc:dc:6d:22:ce:8c:72:fd:
73:f5:06:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNO7yOM50uCBE1SKQu7yJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTVlYjc1MzY2MjBiNTg1N2QxYmY1OTAxODNkNjUwY2Ey
MzIyN2YwHhcNMjUwODA5MTkwMDQ0WhcNMjUwODEwMTkwMDQ0WjAzMTEwLwYDVQQD
Eyg3YWI3OGE0ZDRmMDZiMzFhZWI3ZGI2MWE4MjEwMzE0YmIwZGJjNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yob4w4fxVlwq2JbMoN7jZlpRf9U
e1maGQDvZQ04s0D/qjMcwFtNnFtgvyuS0Zczn9aLiKqSLATO/xyQjbk6QmC+Kle+
E3FoklfhDjptTFqW3JSZYBaytx6G2Ukx3ZKYXbhAeVQ2IpOn41xYPJvjD4kc0eqS
xNtXxHnRszMwGjVBm8NgxQwArHF1vxu4f5F0NAzrtdX+e+UAoNPA0/Q7uyc+gAhV
hemO8I8D6rgFyzguBKIDS548e9OYIZGZwYc5U75XgJAQwc2gRE7xweYN2MA+ESYr
+Adf/YG5q5E2mDH5HL31AHOC+xAG6PK1b0Rw87lA5p2h4NZ8p9DSKtATKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq3ik1PBrMa6322GoIQMUuw28YhMB8GA1UdIwQY
MBaAFNHl63U2YgtYV9G/WQGD1lDKIyJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82NWZhM2MtMDE3NS00Y2VlLTk5MzAt
NTljZmQ0NTNkZDE3LzEvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82NWZhM2MtMDE3NS00Y2VlLTk5MzAtNTljZmQ0NTNkZDE3
LzEvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNR9mvUh
BJ9qJuIUewuqUhCds+lwMKsr7bKMoTU6JIyAxIbGWGHx4BKNWBq4QZ2zMt64YF26
ttvzrEnbzgr0eoTcWvKnyms0sZXbCLVC2EJ+wfVxljKzNd0iVvOVAKWQDa4LOYDh
ze/hW3ggJ2WPquAp9nPpG+CuUIPuWDZZlcYwL0hG7BnP8rIvQNLNfl8ap5EzQNJb
FePhugOVrCWebYaN0UyrVnDytMvjmAYYDqYylKjZoidko3/SBMZE8u8jh3grZxkQ
EYUKhdZ1Hn8focubOEKjQjXnlcYSHdIZn49tll1P6x2lzt/805PsOLmFg9Q3O/zc
bSLOjHL9c/UG4g==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:58 2025 by rpki-client