Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json)
Hash identifier: iPWA3IcOAXKuFYQXYU6PMfSOaeAtboOHhPVXaGwmqBI=
Subject key identifier: 25:55:E0:00:FE:0C:A0:33:F8:E3:7A:C7:A8:A0:4B:5D:DE:18:F1:39
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial: 01987306F8FE50B63914682C16BB3F8B3263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
Manifest number: 14D7
Signing time: Mon 04 Aug 2025 03:01:33 +0000
Manifest this update: Mon 04 Aug 2025 03:01:33 +0000
Manifest next update: Tue 05 Aug 2025 03:01:33 +0000
Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: B4q6CWYnsddJbFjjWEXjYqKc+OlXZt5jbj+Q/wAlayw=)
2: Eoa2DgYKZQhIPrEs2BVXe4pbre4.roa (hash: Lzu15VnANjg8WWEayf+Lga5VSNyXHu7NEi9f0IPI47U=)
3: N1PB4wkghMthA8l4GP9N1SzOEWE.roa (hash: 8LPlkWhxVtJM+jMtTkRPToXaYbmZ6b57zhGOgt0FEmU=)
4: V7B5ePYrHsO0XNRkMFSzpgb0L6o.roa (hash: mqOCLJjTNfcn+4Yc3m3WAArsC6xNXAO5dY/bAJctVR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:f8:fe:50:b6:39:14:68:2c:16:bb:3f:8b:32:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Validity
Not Before: Aug 4 03:01:33 2025 GMT
Not After : Aug 5 03:01:33 2025 GMT
Subject: CN=2555e000fe0ca033f8e37ac7a8a04b5dde18f139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:55:c0:11:82:f2:b1:a5:66:19:e9:11:b6:2b:
d6:e0:26:12:07:02:25:93:fb:b1:20:67:ef:28:a4:
13:08:19:1a:f0:cc:32:e0:e5:27:f5:97:a7:0a:00:
5f:0f:f3:0b:6b:07:fb:0f:d5:e4:40:a3:5b:dc:22:
78:c8:dd:d1:fb:66:36:84:06:db:f6:4a:ad:4e:9a:
e2:b0:a5:d8:df:8b:81:af:53:46:03:58:e4:fa:a9:
83:b1:ff:9d:87:bb:cd:23:db:73:4e:1c:47:d5:64:
2b:ce:5f:a8:d3:e4:32:9d:62:d5:bd:b7:89:c2:3c:
38:e0:4a:69:ca:e3:7d:7d:19:59:e0:23:a0:e5:ab:
b7:06:e7:b9:32:b4:a9:5c:4f:9e:b6:aa:e8:d9:b2:
58:34:9d:27:99:c8:5a:a5:93:e3:ae:6b:b1:5c:f1:
c1:7e:33:00:2c:59:dc:9d:d4:58:56:54:41:84:c4:
2d:3f:f5:4c:4d:1b:29:d8:64:20:95:0a:cb:01:04:
63:3f:da:6c:b6:0f:f3:37:e4:ea:e3:c1:44:f6:ed:
c8:79:10:61:fd:43:e2:e7:01:c4:f2:cd:d1:2c:7f:
12:f9:8f:01:92:da:94:b7:13:33:a4:8b:da:7f:90:
82:b6:89:8c:89:27:5e:ce:79:9a:3f:d5:af:96:96:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:55:E0:00:FE:0C:A0:33:F8:E3:7A:C7:A8:A0:4B:5D:DE:18:F1:39
X509v3 Authority Key Identifier:
keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:97:26:7d:33:5d:37:77:da:31:7f:c4:91:90:d8:5e:bb:23:
01:c3:65:24:ad:71:a6:25:7d:31:c8:c3:0c:a2:8e:9d:1c:f3:
22:2f:56:dd:9f:9a:3f:d0:51:af:f9:74:a5:95:fa:20:41:1a:
8e:e7:37:be:cc:b2:48:c0:39:58:82:ac:26:f9:d3:91:30:81:
23:34:a1:c0:8b:25:e6:bf:b9:97:59:39:f1:22:ea:4f:d8:ae:
96:f1:bf:aa:38:a3:cf:e2:d4:d9:26:f9:57:12:5a:aa:71:8a:
25:0f:2b:85:ca:7b:b8:d7:5c:41:3b:c0:62:84:04:03:b8:b4:
87:7e:e2:9c:da:d3:60:7d:eb:0e:7f:49:ef:f5:95:d1:6e:68:
d3:de:78:da:c5:8e:cf:f0:89:db:88:b0:fd:69:8d:91:18:5c:
ae:ac:29:a4:7f:ea:03:86:9d:cb:a3:d3:fe:0e:c9:e4:3b:14:
f3:b6:60:af:04:d3:4b:ea:8d:6e:9d:83:16:73:09:57:de:a6:
dd:04:69:87:e9:08:b7:6c:80:02:a8:98:b6:dc:a8:05:72:8a:
8f:7b:1a:a4:18:bb:e2:01:c2:3b:f1:dc:d5:bf:5d:23:65:70:
27:c2:a2:75:73:b1:9f:c5:2c:1f:9b:8d:6a:0f:30:e4:31:9e:
f2:c5:a1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:39 2025 by rpki-client