Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: 2kz3197aW9Su1xxw/pR6XozeUCE6O9JQ3sBGGprMYLo=
Subject key identifier: 2A:EA:A5:07:63:61:7D:AB:39:E2:5A:40:EA:90:ED:EF:1D:6A:95:B2
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 01988732B5E73FBE47150850A9F414073617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0B43
Signing time: Fri 08 Aug 2025 01:01:44 +0000
Manifest this update: Fri 08 Aug 2025 01:01:44 +0000
Manifest next update: Sat 09 Aug 2025 01:01:44 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: /Oe1fEyAtHHSy5dK0Zq4lWAD8M/tkP+iK7FVGgVkC3Y=)
2: 7p9fYepg7S5sPZLFet1T6ZdUO0A.roa (hash: 2r3FGqEA9Im8wCkJsvxrPrJGP9I8oT0rHkJZAkKFfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:b5:e7:3f:be:47:15:08:50:a9:f4:14:07:36:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Aug 8 01:01:44 2025 GMT
Not After : Aug 9 01:01:44 2025 GMT
Subject: CN=2aeaa50763617dab39e25a40ea90edef1d6a95b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:2a:d2:2a:51:db:c5:f9:ea:17:3f:b2:8d:
d4:e4:f8:97:11:c8:9a:ca:d1:b0:fe:9a:74:a0:5e:
38:6b:22:4e:f7:cf:00:1d:85:fb:ad:ab:18:82:27:
03:fb:8e:9c:37:f6:a5:ba:51:dd:2a:ad:76:d3:ab:
e5:23:64:23:b9:4b:36:79:66:76:40:05:4f:eb:11:
2f:64:a7:52:20:e8:47:a5:ee:2e:64:d7:07:38:83:
60:10:41:12:0d:81:89:0f:76:8e:62:6c:c3:05:9b:
ed:bb:0c:04:b5:33:24:fb:ac:d6:94:f6:2d:f1:88:
bd:b7:6e:8d:8f:50:40:9e:9d:04:58:0b:2b:56:61:
ef:01:fb:bd:b1:47:31:aa:56:0e:e1:cd:6d:34:56:
dd:7f:c9:f0:bd:e5:ac:20:71:57:80:5a:7e:42:cd:
10:2e:ad:21:c9:ee:7f:d6:10:58:3a:a2:9e:d3:5f:
82:dc:81:bd:48:a3:aa:e5:d6:8c:b8:03:48:d4:57:
88:21:f8:a6:35:55:f7:a6:4f:03:60:b1:8c:21:aa:
e6:91:eb:ce:55:13:f8:de:90:52:28:5d:89:6f:98:
16:6d:bb:b8:4c:da:f8:42:2d:67:a6:d8:cf:04:12:
d6:32:42:4f:5e:a3:d2:5d:84:4c:61:29:2c:38:00:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EA:A5:07:63:61:7D:AB:39:E2:5A:40:EA:90:ED:EF:1D:6A:95:B2
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4d:39:b9:e5:c7:86:39:10:8a:4e:ea:ba:df:c6:33:71:58:
ff:75:5c:b1:50:30:00:e0:01:02:a6:fe:6d:df:5b:c9:c0:f3:
36:7e:02:84:87:fd:c9:23:a2:a9:6d:89:cf:84:4c:b9:bb:ed:
fc:5e:81:49:cd:16:b5:5f:50:e1:38:71:b3:64:41:48:03:d3:
16:37:24:93:5a:65:ff:30:f6:f5:17:15:1b:c0:a6:2d:5c:da:
ac:d1:11:38:9a:45:18:bb:c3:0c:e0:9e:3a:91:63:5a:bd:15:
8c:5b:9f:64:58:9a:33:2d:bd:be:e6:e8:d3:45:2a:fb:68:45:
b2:97:39:52:d0:00:82:c6:2c:00:35:7b:e8:a0:c0:2e:5e:d2:
ef:0a:5c:5f:53:3d:5f:4f:79:05:55:1e:05:82:a2:39:38:74:
2f:f4:47:1a:16:3a:a6:ef:1a:a3:5e:85:c2:c9:3b:a8:71:14:
5b:5c:20:4c:ec:57:b1:47:7a:42:eb:e2:2f:e3:18:a6:d6:14:
1f:9e:35:19:41:98:1b:a0:1f:16:e9:4e:13:0f:42:42:90:c1:
a8:e9:f4:72:01:69:b0:5b:25:8f:92:01:b8:7a:ca:dd:b5:61:
3f:47:b3:c0:54:c8:3b:79:04:2e:07:a5:f5:41:05:45:f7:dc:
18:12:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:56 2025 by rpki-client