Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: 8i5sQHdhOpENAnhAyi5Ds3a/O5s+DvmnXVj78w57Cjg=
Subject key identifier: 67:56:01:AE:C4:EB:16:B8:8F:3A:58:93:62:C5:E9:47:6A:D2:D0:11
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019873743C548E67592E7B4982472F7C95EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0A1D
Signing time: Mon 04 Aug 2025 05:00:54 +0000
Manifest this update: Mon 04 Aug 2025 05:00:54 +0000
Manifest next update: Tue 05 Aug 2025 05:00:54 +0000
Files and hashes: 1: Tf-xMXx1FGSa7W5MTFk1ptTbsJI.roa (hash: rPricXL6DKMNzIm/8wBOd/xDJhVzBjF0FcknH/0CxQI=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: ixV/MJfoS5gT5tqdFEMynLqbX5yzzoknZ7tCnAo0ev4=)
3: yzmCfwKm_JPG030YXapakt0raKE.roa (hash: FgUsVc5q6Pi83IVxku3Q5cKwPTsj2kNtxaix/96GJI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:3c:54:8e:67:59:2e:7b:49:82:47:2f:7c:95:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Aug 4 05:00:54 2025 GMT
Not After : Aug 5 05:00:54 2025 GMT
Subject: CN=675601aec4eb16b88f3a589362c5e9476ad2d011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:07:1b:4a:7f:8c:41:d3:49:64:b1:c7:42:
ca:ee:30:48:d2:dd:25:0a:23:c1:a6:eb:cb:3a:db:
e7:1a:f8:ed:f3:25:8a:d0:94:37:67:03:5b:24:5a:
ad:36:04:c2:f4:91:fd:3d:fd:77:bc:77:e2:e1:ef:
09:b1:28:58:44:6a:3e:b9:43:d7:20:d6:14:96:17:
39:47:aa:54:a6:28:ce:d9:ee:23:93:bd:a6:dc:94:
52:e2:fd:a0:89:3e:fb:fe:1a:52:14:3a:bf:ea:61:
65:aa:fe:65:28:7a:74:b4:43:fe:10:e7:35:41:b5:
84:56:f1:be:9d:72:d7:5a:df:01:aa:6d:d3:98:e3:
30:04:88:92:ef:68:59:6c:8a:74:fb:a6:19:4f:7e:
45:09:e7:b1:ee:2d:3f:32:79:5b:00:ee:5a:4f:c6:
b3:89:0f:dd:9c:91:e2:75:46:c2:03:11:2c:d2:8d:
37:a6:2d:aa:67:d8:ad:3c:9c:cb:44:2e:5c:93:6d:
b4:83:56:11:e1:af:e3:bc:db:e1:a5:2e:10:7c:df:
66:ea:6e:15:ea:ec:8e:cf:3c:6d:47:b5:86:19:7d:
c1:64:f5:a3:9d:d3:11:3e:c6:ed:f0:84:73:d4:0c:
11:b5:e8:b3:76:0e:bd:57:03:3c:d9:ac:16:df:20:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:56:01:AE:C4:EB:16:B8:8F:3A:58:93:62:C5:E9:47:6A:D2:D0:11
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:85:1e:e7:ce:31:ec:4b:e6:cd:cd:6b:5a:ba:39:53:d2:73:
51:41:a9:fc:4a:49:71:17:92:b6:9d:fe:87:ca:55:b7:18:c0:
34:8c:10:17:00:a1:8b:0c:2c:1a:f7:63:0f:96:db:ec:ca:ad:
2d:0c:83:33:77:78:45:9a:c5:1e:4a:6d:c9:d2:5d:ad:33:1e:
72:cd:aa:99:c9:fb:80:46:79:e4:42:07:db:a1:a7:43:1c:eb:
b5:47:3d:7b:b1:df:94:69:13:f0:4b:2d:a7:9f:62:f7:af:84:
ba:66:91:7d:f2:3f:2d:e8:78:10:e4:be:17:ca:8a:0d:be:63:
4e:5e:b0:ec:2d:45:41:7f:6a:16:2e:97:1b:27:91:98:eb:e6:
15:40:d0:e4:bb:07:0f:0f:94:79:29:ea:16:a2:94:52:d6:59:
31:d6:87:47:41:f7:d1:61:5e:4e:6c:7a:69:6c:47:e9:46:d0:
c0:4a:8e:84:30:8d:9f:51:16:fd:bb:97:fb:6d:26:ef:85:10:
22:d8:5e:e0:bb:bc:e6:c5:82:0b:8c:39:fd:b5:86:fa:b3:08:
3c:49:3b:1a:19:90:fc:df:cc:7a:c5:f9:82:51:42:de:a5:8e:
8e:e5:64:37:93:f1:7a:b7:77:7a:57:e2:66:9c:34:82:94:b3:
24:d4:83:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:53 2025 by rpki-client