Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: Wz9jjB17/nkl3JeljuOs3RmbvpbGV5+u2s8TO5v+n+g=
Subject key identifier: 03:1C:DE:87:53:AB:6F:DE:E5:2E:30:09:D5:29:5E:0A:1F:82:A3:59
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 019891110FC3D7642313C8766C661183612B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 03A1
Signing time: Sat 09 Aug 2025 23:01:10 +0000
Manifest this update: Sat 09 Aug 2025 23:01:10 +0000
Manifest next update: Sun 10 Aug 2025 23:01:10 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: s7tM12x1h2/QQiO07TtZpdjvNXnH6/71wX0zfciVP9c=)
2: eBrn60Df7uG_ub_L-IV105lzs58.roa (hash: O8+G2XvuPwR1yEXnK+zmEZeJLzoyxFForxI59j5WNAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:11:0f:c3:d7:64:23:13:c8:76:6c:66:11:83:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Aug 9 23:01:10 2025 GMT
Not After : Aug 10 23:01:10 2025 GMT
Subject: CN=031cde8753ab6fdee52e3009d5295e0a1f82a359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:16:d3:76:88:5a:e7:2f:5c:76:94:e6:a8:
1a:a9:ae:6f:9e:3c:df:46:79:74:1e:68:56:fd:59:
27:50:57:b2:6d:f1:88:cb:57:72:1c:ad:04:14:a7:
7b:ff:a9:27:ed:de:08:ac:99:6f:bb:7c:dc:37:0b:
00:51:a0:5a:e5:d6:52:9c:ab:58:31:98:e7:fc:cb:
33:9d:6e:fb:0d:9d:48:67:19:d9:c3:62:87:98:38:
24:b1:d1:23:4c:02:11:ab:cc:ad:7d:4e:1a:78:e8:
44:5e:ca:7a:b0:1d:91:5e:76:4b:41:4f:f9:5a:0f:
76:eb:d6:70:75:18:0e:4b:44:14:39:93:a7:28:66:
20:33:81:d7:58:92:0e:d5:f6:a1:fd:ed:18:a1:83:
b2:40:2a:b2:b1:d9:6d:65:1d:c2:ab:91:63:aa:ab:
87:ca:98:c4:26:99:9d:d8:27:ef:e3:8b:b0:c6:c2:
0e:cb:dd:46:6c:8e:9e:e1:50:08:3d:79:e6:86:d9:
3a:46:68:86:11:66:c7:de:fb:01:14:34:10:c3:15:
a2:7f:ad:f2:a8:b0:d0:cf:19:fd:7f:19:de:e3:e0:
3e:8a:4a:16:b1:42:3f:77:3d:76:22:af:a3:25:28:
16:32:5d:75:86:d8:5f:da:f8:a8:f0:0d:93:62:12:
00:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1C:DE:87:53:AB:6F:DE:E5:2E:30:09:D5:29:5E:0A:1F:82:A3:59
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:80:db:c2:1f:d8:8e:e8:00:7f:3e:00:d4:25:44:73:7b:22:
b5:8a:9c:24:12:ac:a1:ba:93:57:40:c1:7e:1a:a8:c9:12:89:
58:d4:bf:f1:4c:04:cd:d7:58:05:98:3a:65:8d:52:88:a3:38:
10:9c:28:df:74:01:07:f7:7b:65:98:12:0d:e0:71:48:c7:b0:
8c:af:1d:05:c0:fc:d1:55:28:d7:6c:a4:cf:c1:7e:df:d9:df:
ed:f3:e8:30:1f:8a:4e:75:61:4b:78:a3:a4:07:02:df:a1:39:
64:1e:15:2c:e6:f3:cc:b2:12:e0:97:76:63:f0:e7:0b:b7:0b:
c4:f0:32:24:1e:49:9e:fb:8b:0f:7b:36:9d:91:1a:d6:7e:31:
a1:a5:92:7f:43:2a:58:5d:f0:c7:e1:6e:a3:a4:d0:96:00:e2:
81:3a:1f:42:1e:fb:a8:67:90:3e:0d:76:4a:5a:72:63:1b:14:
95:d8:ba:7a:fd:ad:8f:b4:61:0c:ac:1d:4e:e7:1a:a9:bc:a0:
a3:12:57:cc:44:e7:b7:e2:24:55:38:23:0a:eb:e2:7e:a0:a7:
d3:69:7c:06:9d:d1:df:00:24:2e:97:9c:49:eb:3e:69:82:f9:
27:03:fd:89:4a:71:27:bb:ac:1b:71:df:94:81:08:eb:18:85:
cc:e0:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:10 2025 by rpki-client