Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: Qe59CMQEiDhSFXtySa1kQ+kMo0B0cbZqLfw8TR0ZI2E=
Subject key identifier: 9B:60:2C:93:AF:B8:29:A7:FC:46:B2:E8:2C:21:BC:C2:F3:8D:2C:22
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 0198726259FA52DB3BDD00EB3079A878611E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 00:01:44 +0000
Manifest this update: Mon 04 Aug 2025 00:01:44 +0000
Manifest next update: Tue 05 Aug 2025 00:01:44 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: HtvXvASps7emne0l2UkBIOTY/Ntj7xc00yTjAaYkdHs=)
2: PUu9JBqT0q_kMegzLpokDy8FZpg.roa (hash: GZSimUwCl58YJS+NoDvHAGPvWk0bb2fLNY1EJxjHl3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:59:fa:52:db:3b:dd:00:eb:30:79:a8:78:61:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Aug 4 00:01:44 2025 GMT
Not After : Aug 5 00:01:44 2025 GMT
Subject: CN=9b602c93afb829a7fc46b2e82c21bcc2f38d2c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:50:f4:1a:e5:1c:e2:85:cd:ca:bc:5b:a4:
df:64:bf:da:1c:c8:6d:fa:e6:e0:ab:f8:df:64:d4:
33:84:bc:a9:31:b0:ff:24:27:4f:6f:00:20:a1:f5:
f9:49:a9:91:39:5b:46:fa:6a:7b:d8:94:8b:9d:7f:
51:d4:5e:74:dd:78:73:ea:26:90:9f:f3:a5:e0:a2:
d2:61:51:72:7c:46:da:34:62:c9:c7:ad:2b:c4:3a:
19:2d:b0:65:35:27:cc:2c:23:97:45:d3:ad:ed:99:
bd:e7:79:a5:2d:5c:f2:7b:6f:b5:42:aa:d2:9b:14:
f2:68:58:bd:9f:49:f5:d6:22:86:e9:50:67:ee:84:
7f:e1:09:92:3a:c1:15:f0:c0:14:36:4a:c1:f9:4c:
fa:f6:42:f0:90:04:ca:10:d3:78:0d:c2:7f:51:7b:
d9:8a:c8:b1:84:de:6b:24:5c:02:28:0d:c2:ab:81:
3c:a7:83:19:4d:07:62:9f:6a:39:0d:16:5e:e5:26:
f5:f0:6e:34:e3:aa:21:5e:3e:8e:63:3f:15:42:05:
e0:6d:59:92:69:88:7b:d4:e5:ad:48:a2:66:59:1c:
d9:c4:c0:b8:43:78:b7:c4:46:d2:ad:28:c4:28:2f:
84:69:d6:b7:d5:a5:f3:c8:50:cc:0d:7a:64:1c:c0:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:60:2C:93:AF:B8:29:A7:FC:46:B2:E8:2C:21:BC:C2:F3:8D:2C:22
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ec:d4:bb:5b:71:16:d1:11:8d:c0:55:4c:6d:f5:3f:aa:eb:
39:ba:94:f1:6a:04:99:fb:3a:8b:8c:6d:b8:6a:07:f5:73:95:
7f:fd:f7:83:1d:33:22:86:9a:5c:f5:2f:b7:d5:c1:c5:a7:bd:
ed:c3:4b:1b:0f:b4:2c:9c:f6:82:83:63:39:1c:d0:68:ec:0b:
67:d5:3e:f8:7d:3c:f2:19:84:c5:54:34:72:7d:69:53:fb:e6:
21:82:83:f6:c8:b7:64:62:e6:2b:3f:b7:a0:52:c2:2a:d9:51:
f6:88:81:71:78:ac:87:4f:98:cd:7e:e4:3e:94:41:19:ca:3d:
b8:cd:37:9c:e7:02:80:91:67:85:fe:43:1b:b0:0d:f3:93:6e:
66:6c:db:85:70:7b:74:f3:c0:2c:b2:c1:23:95:d0:f5:5d:27:
80:0a:49:a6:74:fd:5d:d8:27:f1:e1:38:ac:d5:e1:e5:ad:3d:
a4:e9:c3:eb:3c:2f:f5:a2:19:d5:0e:fb:c4:22:6c:81:d7:0d:
fb:71:75:df:5e:33:53:7b:89:ac:ae:8d:f7:09:79:d5:f8:fe:
8c:ba:8a:cf:d4:de:ad:2c:3c:87:71:62:cf:15:61:94:26:5b:
58:c8:30:4b:5a:95:d2:a1:83:7a:9f:d6:69:ef:8c:b1:c7:c3:
16:b9:0d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:35 2025 by rpki-client