Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File: 0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier: 0Vopy7hGq5PcAZ/r0vqbYFufmy5rnetJcr8Jttgresc=
Subject key identifier: 85:BF:89:D9:60:4E:74:87:9D:53:BD:6D:51:45:17:CD:2C:AE:DA:90
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 0198820BD02AAA2CCD0003868C62CA7298E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number: 01EC
Signing time: Thu 07 Aug 2025 01:01:08 +0000
Manifest this update: Thu 07 Aug 2025 01:01:08 +0000
Manifest next update: Fri 08 Aug 2025 01:01:08 +0000
Files and hashes: 1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: fqYQm6fcQvtbh0KG4GBjqFux3hxNMKKpfA0adbcJUuk=)
2: oKSHvOI6a3wBQ4njfGV3S_7Sbkc.roa (hash: zclvRtzWTLzWr7SKBjsrPG4/869JCHe23hkSJVxmGco=)
3: wOvEyLEfRcu6DG-p65x_OfzTRz4.roa (hash: ZaQzkHyCf48D1aPuMMUWfO/IOaJleVElEqvlsuTrYGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:d0:2a:aa:2c:cd:00:03:86:8c:62:ca:72:98:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Aug 7 01:01:08 2025 GMT
Not After : Aug 8 01:01:08 2025 GMT
Subject: CN=85bf89d9604e74879d53bd6d514517cd2caeda90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4a:68:47:5d:47:70:67:85:eb:c4:44:74:1e:
ed:f4:5d:ab:4e:a3:17:bd:4e:2a:0b:0f:20:bd:ed:
e8:8b:12:1d:d6:5f:04:c0:6e:56:54:71:38:9d:64:
8c:19:8b:76:ca:d1:0a:77:f1:4a:c9:b6:fa:78:cc:
0c:f1:24:f8:d3:f3:07:ad:db:14:a6:f6:cf:ce:26:
0e:e5:15:9f:b7:08:91:d3:e8:86:1b:02:2a:6b:33:
55:df:af:0b:3a:df:75:6e:23:72:22:ee:16:d3:d1:
89:75:c0:ff:17:6b:43:4c:da:f5:4c:cb:3d:c2:7d:
fe:b7:63:9b:5b:40:2e:16:86:1b:e8:b8:2d:4f:bb:
32:c9:94:9c:cc:ee:b3:70:39:10:40:5e:12:9a:e7:
51:7b:4a:64:ae:c6:a1:aa:ff:48:92:6e:79:0e:76:
28:78:b6:e4:0b:26:0f:c2:09:7a:31:da:1e:0c:25:
64:fa:2c:5e:58:47:60:ab:98:4b:c9:e7:9a:67:f9:
5e:98:cd:6a:69:60:d9:50:9e:c3:ff:f2:0c:d7:ca:
c1:00:37:b3:47:fd:cf:70:ad:05:d1:a6:9f:81:be:
66:af:42:ab:73:f2:ce:c2:d4:88:1e:e7:1d:d5:82:
90:3c:51:04:86:df:e6:09:75:31:a0:f7:30:88:96:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BF:89:D9:60:4E:74:87:9D:53:BD:6D:51:45:17:CD:2C:AE:DA:90
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:40:75:4a:70:18:06:4a:33:a4:84:d4:8a:98:a8:a9:81:b2:
f1:9b:cd:de:2d:51:2e:81:d3:ad:ea:5f:b3:e2:42:9c:ad:44:
62:f7:45:54:1b:a8:92:6f:2e:09:ab:fd:00:4f:f0:d2:67:1f:
fa:27:9c:ff:23:4d:2e:70:a5:eb:ff:34:f2:45:42:64:77:aa:
89:e5:68:80:5a:7d:bb:e0:26:8a:2d:4a:5a:0b:bf:71:0c:5c:
0a:28:9b:d0:3e:8f:7d:33:91:9d:88:4d:c2:d8:ba:07:83:3f:
a2:2c:08:27:35:6c:77:26:b8:3e:8f:45:ce:10:8d:db:46:6b:
7c:2d:b3:b3:ba:3c:07:5e:d0:5c:3c:d0:75:c1:e4:4b:ad:d3:
c0:bb:18:85:ab:fc:32:e9:3c:e8:7b:f5:ef:f2:1b:ab:6c:b8:
f8:c0:a1:7f:4e:bb:b3:7f:7a:0e:31:37:88:b4:1a:0d:bb:66:
25:04:fe:ed:5a:a2:7d:fc:3c:6b:e2:e5:8b:89:b6:13:14:82:
e8:5f:bd:fa:57:b4:3e:d6:db:88:15:95:bf:b1:ea:ab:fc:2d:
f1:3a:a8:04:45:c3:8b:9a:23:5b:b1:04:16:ea:d7:29:25:13:
f2:f0:ff:9b:37:80:41:23:4a:18:69:f6:d2:15:96:b1:bb:8e:
8a:28:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:04:25 2025 by rpki-client