
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File: 0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier: PISjYfwt8uzCEHylKh+CLdxA57pRNTjClsKlNED3KRY=
Subject key identifier: 26:D6:30:05:9C:E0:E0:2A:4B:A0:6C:0C:D1:20:50:31:B0:C6:8F:F2
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial: 01988B0EE1B14061573D0CED1C85095C214E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number: 04B9
Signing time: Fri 08 Aug 2025 19:01:04 +0000
Manifest this update: Fri 08 Aug 2025 19:01:04 +0000
Manifest next update: Sat 09 Aug 2025 19:01:04 +0000
Files and hashes: 1: 00FQiMdjUQle4zFwKcr67i8rD5o.roa (hash: vAwK94aBbQ1WLXSLlow/JuiTreizX+JgqV5lHzwa2Js=)
2: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: WlwmgXXsgvFvTtz8g77x1Ak+i1c8WIalKr873+nMmTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:e1:b1:40:61:57:3d:0c:ed:1c:85:09:5c:21:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Validity
Not Before: Aug 8 19:01:04 2025 GMT
Not After : Aug 9 19:01:04 2025 GMT
Subject: CN=26d630059ce0e02a4ba06c0cd1205031b0c68ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:e4:f6:ba:1e:26:b1:29:ef:7d:90:c1:e3:
36:e3:e9:50:a3:71:7a:88:ce:e0:b4:ba:9e:1c:22:
70:49:4d:3a:eb:ce:ad:a4:22:02:4a:60:c7:28:84:
a5:d1:50:5a:6f:db:25:e9:e8:48:29:45:47:8c:e5:
d6:dc:63:72:bb:af:96:73:92:c0:b4:f9:30:43:12:
d6:05:92:92:d6:bd:f8:2f:bc:4c:2b:ec:49:f9:66:
fb:66:09:e1:46:12:59:68:96:79:34:4c:71:b9:29:
eb:f1:6d:69:09:46:d2:f4:a9:5c:ef:fd:18:3f:0c:
d3:f0:3f:03:2e:b3:29:fe:75:98:2f:ab:0f:cc:b1:
24:2f:5d:c4:e4:52:1c:37:53:62:41:98:74:34:ea:
d9:2a:b3:cf:d7:c9:ff:79:92:b0:2e:ea:56:53:ea:
e7:28:a3:83:cc:91:c8:14:bb:7b:ea:2b:f7:6c:16:
74:8c:e6:f4:89:5e:8b:50:3b:b8:3b:1f:b7:6d:89:
41:63:b4:49:69:69:b8:6a:91:5f:64:9c:f9:2a:73:
1f:78:6a:41:ee:c0:2d:c3:da:28:90:2e:c5:3b:d4:
37:33:62:e1:a1:cb:e3:8e:ec:83:ab:d8:a5:dd:a0:
10:70:29:91:59:d9:27:4a:ae:4b:a9:ed:c4:e3:03:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:30:05:9C:E0:E0:2A:4B:A0:6C:0C:D1:20:50:31:B0:C6:8F:F2
X509v3 Authority Key Identifier:
keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7d:9f:9e:0a:36:91:52:b2:65:97:31:b4:41:7f:1a:5f:86:
9d:47:b1:57:53:95:6d:7c:a8:41:5c:b1:ca:d0:5d:c2:b5:68:
89:ba:36:68:b1:87:9c:01:50:87:08:7e:ec:71:e7:a1:7c:9b:
d0:72:32:bc:bb:e3:d1:db:e0:cf:10:87:f5:5f:c4:ca:fa:c2:
1c:d9:f8:d3:62:e4:f1:5d:19:38:27:57:18:21:3f:be:3e:8d:
9b:74:13:fc:22:6b:af:5e:52:ff:55:46:cc:b2:4e:0c:9f:bc:
98:91:b9:e1:9a:b7:77:0e:05:4d:23:18:33:d5:24:20:77:10:
7b:2a:2f:7f:e3:09:ff:de:16:a1:42:e6:bc:4f:3c:93:4a:9d:
b5:49:4d:54:fd:03:70:26:14:dc:85:af:ce:25:59:c6:b9:9b:
85:d3:4f:3b:c9:ef:ea:af:3d:6b:98:1e:8c:c0:81:ab:e6:7b:
ed:8b:12:78:f9:f2:dc:46:29:84:d3:0d:b0:20:54:68:f7:85:
a1:0c:8b:09:94:bf:ee:13:e0:45:c4:36:9e:27:31:ce:43:22:
eb:1c:cd:dc:91:51:ad:f5:e1:3a:29:c7:e2:e3:1a:12:70:de:
ce:d8:98:d1:0e:e8:d2:cb:87:db:2c:02:6c:da:fd:1b:25:9f:
c8:0f:0b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:06 2025 by rpki-client