Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: r+yRsXfkLncB74dJgrGorIG9OOLKoyDG3+MDpyt8Zow=
Subject key identifier: A0:77:CD:37:92:C1:88:45:40:71:0D:7C:83:4B:FC:BE:B3:59:80:03
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 01987B2DA8152814B0A1E4A1990A9FF854D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 0369
Signing time: Tue 05 Aug 2025 17:00:46 +0000
Manifest this update: Tue 05 Aug 2025 17:00:46 +0000
Manifest next update: Wed 06 Aug 2025 17:00:46 +0000
Files and hashes: 1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=)
2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: rzxrOemuGcp+OVv5I/plC0YQNtNZZjkzSgcZg/9AMdY=)
3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:a8:15:28:14:b0:a1:e4:a1:99:0a:9f:f8:54:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: Aug 5 17:00:46 2025 GMT
Not After : Aug 6 17:00:46 2025 GMT
Subject: CN=a077cd3792c1884540710d7c834bfcbeb3598003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:4a:31:38:c3:22:ef:13:ca:64:18:10:42:
b5:ca:f6:f1:95:ac:4a:dc:1c:69:68:51:96:79:33:
82:bd:5f:98:7f:93:48:56:82:c0:19:79:e5:34:fc:
5d:8b:9a:52:1d:72:3d:38:3c:bf:b8:75:f9:1f:02:
cb:ba:41:27:7f:82:7b:d3:e0:99:62:d8:2f:c6:9f:
b3:a0:bf:37:ca:de:46:f0:b1:ed:59:89:bf:de:c5:
f9:2d:3c:13:a7:f5:00:53:7a:d1:f3:d3:7d:35:a0:
77:87:f2:a9:4b:ce:a8:13:87:d3:63:b8:43:c3:27:
95:c3:01:5d:97:30:0c:ce:33:67:db:37:1a:32:08:
f8:7f:0f:a4:be:f8:a2:1a:a9:35:ad:bc:e4:ac:54:
49:0c:18:0f:b3:41:8d:8e:9f:23:ea:55:92:0b:35:
34:5b:7f:86:e2:e4:81:cb:89:da:d2:8e:1a:66:e0:
7f:ab:e5:7a:f0:b8:67:95:ec:d8:5f:d8:cd:da:6e:
0e:7f:64:91:23:05:f8:25:18:9a:df:4e:ec:6c:64:
71:2e:6d:d1:29:82:66:a5:ac:b8:7d:7d:06:0f:78:
3e:55:d8:6f:78:db:fa:32:85:ba:a1:a7:c5:c6:98:
e9:7a:bb:ff:ae:65:47:4c:8a:dc:07:15:76:3e:71:
52:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:77:CD:37:92:C1:88:45:40:71:0D:7C:83:4B:FC:BE:B3:59:80:03
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:68:e7:c7:d0:8a:d2:ea:6e:62:29:27:cb:47:5c:ba:b3:58:
1c:bf:63:08:66:c1:68:6e:5a:c3:b2:de:4b:dd:81:42:a9:28:
9e:42:f5:dc:18:5b:88:42:0d:24:8a:5d:f9:00:ef:f8:4d:f6:
3b:c9:a3:e2:98:37:12:3d:e6:4d:bc:39:0e:59:d4:d4:4b:3f:
c0:13:b1:f8:42:49:ff:b3:71:6d:66:c0:87:4a:e0:83:10:e3:
d2:ed:fb:31:d5:c4:04:8d:3a:29:99:4c:48:6c:ca:f4:94:fb:
39:d0:1b:c1:4d:b5:ee:36:99:17:ba:32:4a:d9:af:b4:b4:3b:
50:e6:68:1a:4a:d6:3e:ea:62:f7:6a:55:9f:96:b9:7f:98:75:
4d:b6:56:5b:b5:2a:0a:00:26:70:03:bd:ec:e8:bd:20:8b:68:
84:20:0b:7b:89:12:43:26:88:c2:e0:90:03:53:77:ca:b3:c3:
9f:b1:db:07:52:70:bf:02:77:d2:6b:28:e5:8d:ec:68:6e:e9:
8d:15:d1:cd:58:79:94:5d:38:66:69:41:24:ab:14:b0:db:1a:
44:94:79:b4:b2:d9:91:67:51:a5:58:6d:0d:67:5f:28:35:63:
80:b4:2c:20:23:d5:ea:f3:03:ff:66:2c:80:60:c7:59:3c:98:
b0:8b:e4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:59:23 2025 by rpki-client