Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: gsJIHNUxW+X0zn1VhRDCr1xsOr5W1S3X1QqBGfaisuA=
Subject key identifier: 63:8D:DE:90:B1:D9:63:98:DE:78:D1:08:81:24:20:7E:BB:50:01:28
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 019873E3AE42DEA6D4F02692E674F04EB0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:02:37 +0000
Manifest this update: Mon 04 Aug 2025 07:02:37 +0000
Manifest next update: Tue 05 Aug 2025 07:02:37 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: kjmvDmHHeNesipj5irvkkgWNUjzilfLebBxnvMId2xg=)
2: SqjmPfaLrtBpjmBn0-LK2-XYK6E.roa (hash: oP41hXDxiX++ad4HH6tMbCxCouHbTfiMX6JPBOFqfjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ae:42:de:a6:d4:f0:26:92:e6:74:f0:4e:b0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Aug 4 07:02:37 2025 GMT
Not After : Aug 5 07:02:37 2025 GMT
Subject: CN=638dde90b1d96398de78d1088124207ebb500128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:e5:42:0c:37:70:df:2d:0d:3f:f8:cd:95:
0d:79:1f:f7:88:3a:83:62:a2:80:e4:00:3e:04:a6:
0e:af:66:12:16:4f:5f:e4:06:28:b4:ce:e1:f8:ee:
9c:bb:ba:40:55:5c:ae:03:e5:22:38:dd:3c:c5:23:
ab:37:ed:c1:15:f6:31:5a:df:41:a7:a1:49:0e:66:
00:da:9d:55:7d:ae:0b:b0:30:0f:7a:ce:61:23:a9:
d2:68:ae:b4:c1:34:76:f0:44:95:51:27:d5:0e:eb:
39:30:c9:92:6a:bd:27:94:f7:1b:9d:ca:f7:e2:da:
b6:fa:e0:30:77:ca:66:12:a5:35:61:3f:bf:4d:5c:
de:54:e9:42:35:ae:9b:71:8b:de:81:86:15:9c:42:
35:71:a1:ba:e5:af:62:65:c9:11:de:bd:bd:04:89:
55:e1:79:5c:b5:87:0a:86:57:d6:09:b4:4c:9f:e9:
b1:db:03:4f:e6:5f:b7:58:e5:6a:33:f4:fe:dc:dc:
2b:10:e2:d5:d2:f5:d3:38:ff:44:e6:2b:bd:0b:c5:
20:3e:10:68:0a:59:59:b2:e4:57:ef:a5:93:eb:a5:
29:b7:ef:f9:16:f8:f7:1f:c0:4c:60:09:90:37:ed:
dd:ac:f5:76:bc:6d:75:da:d4:3f:f4:da:a8:f5:05:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8D:DE:90:B1:D9:63:98:DE:78:D1:08:81:24:20:7E:BB:50:01:28
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9d:8c:9b:92:93:0c:f6:f5:d8:0c:79:72:a7:30:4a:3c:b4:
5a:8a:5f:70:ae:d8:11:b1:c9:98:18:9f:e0:cc:f3:7b:d2:92:
58:35:04:43:f4:62:d7:82:66:84:45:e6:e1:47:6a:6a:61:36:
04:1c:3d:33:8a:c7:68:bb:3e:bc:36:e7:3b:64:9e:8e:71:bb:
fa:f8:b3:77:d7:2d:d3:ae:88:94:d0:cc:e1:6b:ae:47:1a:85:
c3:15:03:ee:00:0b:48:dd:49:dc:46:9b:74:98:f5:fc:9d:96:
5c:54:a1:66:dd:97:2f:19:98:a8:e8:df:d2:4f:e2:c7:64:c9:
fb:10:d1:ce:3e:85:63:c0:56:9e:5d:6d:78:ef:f1:6f:dd:da:
d4:73:38:6b:2a:5d:c2:ef:f1:78:ab:27:37:2e:a5:05:7e:71:
5e:d5:e6:d1:e8:25:7e:5f:92:54:69:d5:0c:ab:ef:6b:8a:aa:
c5:48:2e:64:cd:68:e4:bb:43:f5:85:15:52:57:a5:da:46:d4:
95:2b:3d:ca:9c:06:16:7a:06:fe:f7:4c:0c:2d:b4:69:88:56:
6d:2a:61:56:2b:48:d0:a5:ad:39:0f:92:87:b4:39:7c:c8:39:
6d:de:3a:5e:ef:c8:00:e5:32:5e:95:41:9a:39:9a:15:5b:73:
08:dd:9d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:54 2025 by rpki-client