Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
File: 0Q44sLejPvOhbhVDNAKYfW1njaE.mft (raw, json)
Hash identifier: t5D5+xRqFIeDDEAvsE8jMmdm9mXknocsMaMq9Sj2rVI=
Subject key identifier: A2:93:1A:43:FD:A4:C3:13:B8:42:93:EC:F9:25:E3:8E:06:D2:C3:C0
Authority key identifier: D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
Certificate issuer: /CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Certificate serial: 019888448D5F6717ABC62E8E0E63EE7478A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
Manifest number: 12CC
Signing time: Fri 08 Aug 2025 06:00:50 +0000
Manifest this update: Fri 08 Aug 2025 06:00:50 +0000
Manifest next update: Sat 09 Aug 2025 06:00:50 +0000
Files and hashes: 1: 0Q44sLejPvOhbhVDNAKYfW1njaE.crl (hash: iNNDerV0sfKv8aXMIIEfw7tK5+K7ypvELWorwxfjmYw=)
2: pTXcU1-027t2C2Vu9gFY335XMJc.roa (hash: VazQFR0+HiS2IaElmJ/i9QSFb0To3uFvpZ1ELlNt0rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:8d:5f:67:17:ab:c6:2e:8e:0e:63:ee:74:78:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Validity
Not Before: Aug 8 06:00:50 2025 GMT
Not After : Aug 9 06:00:50 2025 GMT
Subject: CN=a2931a43fda4c313b84293ecf925e38e06d2c3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f9:fe:97:67:02:08:47:76:6c:4a:b3:39:2f:
8d:5b:46:e2:26:96:9f:79:0c:02:52:6d:7d:cb:70:
46:e7:90:32:cc:75:bd:19:c6:11:ab:0d:1d:09:6a:
40:dc:fd:54:e0:97:a7:fa:26:92:ff:f3:a3:7b:65:
4d:43:02:8c:c0:b2:16:f8:53:26:bf:51:59:6f:05:
86:fd:9a:dd:b7:55:dc:e0:39:91:5e:b8:a3:3b:f9:
85:5a:45:12:5d:9d:8f:62:c7:70:6f:b6:a1:b6:92:
6a:f2:6a:57:04:3f:d4:fe:fa:86:17:25:e4:c7:82:
bd:7b:4a:69:e6:0a:3e:c6:21:36:6f:a4:b4:07:30:
ff:0b:34:26:df:cf:4f:88:12:9c:22:0b:63:fb:58:
89:73:51:54:2f:89:a8:17:a8:e0:ea:a2:9c:09:33:
cf:d1:9d:f0:b9:b1:cc:f2:ff:39:17:bb:3a:b6:03:
93:18:7a:8d:5f:c9:8c:1d:87:d1:b5:67:a1:4a:5b:
9d:19:14:fc:fc:43:9a:85:71:79:7b:cc:72:a4:29:
13:e5:57:4e:f4:44:76:4d:11:d2:ea:88:5b:9a:68:
ee:f2:c0:16:3e:77:d5:cd:2c:25:a9:e8:ff:20:c4:
aa:e5:98:09:40:1e:a4:be:8d:7b:7a:c7:61:8f:d0:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:93:1A:43:FD:A4:C3:13:B8:42:93:EC:F9:25:E3:8E:06:D2:C3:C0
X509v3 Authority Key Identifier:
keyid:D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:db:ff:0b:42:50:d3:cc:ed:1d:62:2b:b3:d0:90:6a:88:8a:
33:08:a7:7b:55:ed:bc:c0:64:1e:8b:c8:e5:b7:2b:51:7d:34:
69:14:56:1a:03:f9:30:e4:83:65:92:15:03:9d:01:b7:e7:3b:
bf:65:24:c1:b2:00:b9:ce:76:58:50:e6:d5:16:a3:cf:fb:ca:
89:ec:33:03:17:e9:20:a0:14:d2:52:3e:93:50:79:b3:5f:3e:
71:77:23:d5:64:6d:65:d5:c5:5f:73:34:d5:48:68:cb:fe:f5:
f0:46:ae:b4:a7:b8:5c:d0:bf:46:fd:27:fc:f4:e0:c5:11:d4:
06:cd:80:cb:95:5e:1a:07:1e:e7:3a:0c:f9:c1:89:00:5a:85:
3f:f3:ed:c2:01:26:00:52:e5:e9:c0:a9:8a:53:d0:84:56:b4:
81:f9:83:4d:95:07:dc:86:76:42:b5:6f:c9:ec:c0:5a:10:3e:
4b:b6:d2:ba:85:a8:38:bd:ed:47:5e:06:76:0f:72:39:35:65:
16:e8:d0:10:84:64:1d:46:49:59:39:3d:dd:50:66:66:12:3a:
84:04:38:b4:64:b3:8d:de:f4:bc:e6:c8:d2:b8:f8:cc:af:10:
7b:0b:73:9f:b6:13:3a:87:4f:55:21:e6:99:61:e5:67:05:9b:
87:47:13:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:56:12 2025 by rpki-client