Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: t4j3WbOhJWMZcCZgfLslcANPcFv9l21pUp5oWgguL6U=
Subject key identifier: 64:03:97:9F:32:CF:B0:B6:A1:B5:8A:7A:1A:27:2C:F1:E1:34:84:43
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 019873E2027638B1C230E4D51E81979E512E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0A2E
Signing time: Mon 04 Aug 2025 07:00:48 +0000
Manifest this update: Mon 04 Aug 2025 07:00:48 +0000
Manifest next update: Tue 05 Aug 2025 07:00:48 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: 7EpSFxG6FsjV9xOEbNrWeKAltlT/PjqdCBlDO6c4T1g=)
2: Ve2RrvNi_87VDfl21Lq8fKe-sYc.roa (hash: Bwg7wRCqbsHk5Pn4Ah5pnRiyg8rpwcrSFyOQ2YGllyY=)
3: nc0QnNEGuF1kLi9w3egLsBhEL6Y.roa (hash: KWBWDWBG7Sj1CyJ1paoXUYeG29P/pnqgE+4DRW4DIYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:02:76:38:b1:c2:30:e4:d5:1e:81:97:9e:51:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Aug 4 07:00:48 2025 GMT
Not After : Aug 5 07:00:48 2025 GMT
Subject: CN=6403979f32cfb0b6a1b58a7a1a272cf1e1348443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:83:79:64:ec:3e:68:35:fd:a1:44:23:94:
b5:c5:97:bc:13:ae:17:26:e9:0a:ff:bb:41:04:68:
0b:87:f2:79:83:c0:fb:c3:f5:e9:47:ad:a1:9d:74:
f7:65:14:c6:62:80:cc:19:60:4e:aa:04:08:db:dc:
50:0b:6f:eb:de:c4:ff:b4:e8:6b:5c:af:33:c0:a9:
d9:0a:8c:ce:3a:28:69:3a:f9:d7:ed:eb:0f:46:a9:
70:82:a5:4e:14:6d:b4:c8:81:b3:98:c2:7c:5e:83:
2c:ac:da:d9:c1:8f:b6:2f:27:02:b6:1c:2f:ad:eb:
26:5f:92:d9:35:70:50:5d:4a:41:34:7b:05:b7:10:
55:79:f6:36:de:8a:5d:61:c0:2f:d6:46:2f:71:67:
e8:76:30:3c:62:f0:a5:7f:bb:7e:61:26:a4:bc:35:
cc:73:77:25:f2:5f:37:ee:dc:19:db:61:8c:dd:2b:
ca:3e:03:a8:67:bf:69:4c:6a:e5:bc:58:68:86:0c:
a1:3c:8c:5e:58:39:a4:89:d4:c7:b8:a3:db:c9:a6:
1a:0f:ec:2e:8e:8c:95:7e:b9:4e:ad:b3:23:c0:a3:
b2:44:43:36:b2:76:94:22:a2:1f:39:26:c0:04:2a:
0e:33:d9:d0:fb:35:13:cc:1e:1b:3d:0b:2d:9f:f7:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:03:97:9F:32:CF:B0:B6:A1:B5:8A:7A:1A:27:2C:F1:E1:34:84:43
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1d:16:c9:10:66:6d:17:ec:9b:b0:03:63:86:3b:41:f4:01:
32:46:06:5d:6a:c2:5c:6b:a0:88:4b:ea:47:40:7e:6f:f7:df:
85:04:8a:a1:5a:0d:dc:29:ae:e5:92:48:db:62:3b:09:be:21:
b0:ff:4c:a5:76:8b:40:78:e2:9a:d6:fd:fb:40:1c:5d:74:4f:
8a:3d:9b:dc:a5:47:ff:b0:75:64:21:c4:26:b2:28:7d:3a:26:
26:bd:a9:36:4f:5a:e8:42:5a:3c:8b:4c:e6:fd:aa:14:4b:23:
35:c0:8a:28:4d:28:13:2f:ee:ac:2b:9c:ac:d7:e1:fe:81:d8:
63:3d:89:b5:70:f0:15:0b:47:40:73:80:35:28:a6:de:ae:eb:
cd:36:43:b3:1f:72:1d:8d:33:23:82:16:ed:6e:9f:a2:7a:e5:
c3:62:dc:2c:02:d5:57:ed:9f:59:fe:48:6e:9a:40:73:51:0f:
ca:ac:51:e6:21:c3:a3:e6:72:11:9b:8c:97:ab:cb:aa:21:df:
46:d2:6b:47:77:51:fd:11:0f:60:a2:fc:1f:63:41:9d:09:17:
b9:ca:3f:93:1f:99:ee:4d:cc:2e:c4:09:24:41:d3:42:54:f6:
13:d1:6a:d1:8c:c6:1e:e4:93:bc:9c:f9:76:50:91:f8:dd:f9:
e7:6c:91:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:50:59 2025 by rpki-client