
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier: rOkKY7t6uisBrHPT2H/E1xG+zzIe07OemwC5tw0DSvA=
Subject key identifier: ED:A9:98:BD:9A:31:A6:51:2E:51:C2:C9:B1:4E:12:F4:48:63:7F:56
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 01989592D1AF440D899B30E1E343975CAC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number: 0A36
Signing time: Sun 10 Aug 2025 20:01:23 +0000
Manifest this update: Sun 10 Aug 2025 20:01:23 +0000
Manifest next update: Mon 11 Aug 2025 20:01:23 +0000
Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: BrRFnaIji3RVjfeHccIoogGABiA2y8Ger3m7wksoAcU=)
2: X1JkS3uwHtAkqyPH5ViWJPHV9Uc.roa (hash: txiqMZuBc/HjQ/EutSSi10aRPrL/flvGPy+EKHQ4msY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:d1:af:44:0d:89:9b:30:e1:e3:43:97:5c:ac:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: Aug 10 20:01:23 2025 GMT
Not After : Aug 11 20:01:23 2025 GMT
Subject: CN=eda998bd9a31a6512e51c2c9b14e12f448637f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:2d:a0:c5:0b:07:d3:fb:c5:6f:24:47:ac:
ea:39:29:63:fd:30:5f:70:94:23:7a:b1:10:2d:fc:
c1:65:64:b1:7c:a9:0e:92:2c:ca:c1:91:e7:6a:05:
a9:25:d0:32:88:f6:ad:6f:51:67:2c:b9:e9:a4:8e:
70:2b:c6:ec:e1:37:50:4e:28:7b:e9:4d:a2:ef:fd:
e1:18:3d:f0:f5:52:c3:d8:d7:9a:98:93:45:f7:ef:
52:a8:6f:c6:be:bc:7f:a4:02:c1:ec:f0:c7:aa:eb:
c6:c9:44:13:cf:48:ef:3e:14:e9:67:90:e9:b9:57:
71:e1:16:11:0a:d6:46:31:e1:1e:02:3a:ab:71:4c:
0c:31:3d:06:cf:11:73:5b:eb:fe:28:8e:0d:e6:62:
be:df:76:df:0f:5f:9f:32:d4:d7:4a:19:79:a1:08:
fb:10:d3:58:a6:8a:7c:4c:44:b4:05:f5:a2:a2:8c:
0d:00:0c:8e:66:84:ee:1a:60:20:38:3f:cd:cf:2c:
6c:ad:d0:5d:99:ba:54:c4:01:11:7e:cb:21:ae:78:
02:a7:d2:1c:30:92:cf:62:c5:82:80:f8:c8:1d:23:
70:29:a4:f4:50:34:68:74:c0:45:8e:9d:ef:d2:46:
f0:60:ea:06:63:ff:a5:f5:20:d6:11:b5:61:f8:77:
62:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:98:BD:9A:31:A6:51:2E:51:C2:C9:B1:4E:12:F4:48:63:7F:56
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:44:9d:f1:18:6e:4f:3f:6e:d7:92:20:7e:e4:66:d8:e8:93:
49:84:3d:b0:57:84:1f:0e:4e:b4:2f:a1:a0:fd:e1:e7:1c:da:
9d:ff:33:3a:c3:fd:8e:24:23:5e:42:86:87:4e:69:84:fe:1f:
ed:9c:b9:ae:a3:1b:50:35:c8:c4:06:5d:e3:4c:c7:be:c6:d3:
45:21:07:c0:b7:6b:13:1a:a9:62:ac:8b:4a:84:89:fc:c2:a7:
ae:43:a9:8c:4f:f5:9d:45:a8:f5:66:05:d5:e5:17:b3:91:38:
d0:9a:cd:6f:d7:e2:5c:6e:ac:e2:72:74:a2:f9:ad:36:4c:f3:
48:14:d2:74:53:08:29:2f:06:d3:c3:07:5d:4b:a3:2f:d0:ff:
0f:a6:b2:20:30:d4:42:a7:24:44:c5:98:23:36:29:5a:65:18:
81:30:1d:54:75:82:b9:bc:cb:19:65:e4:1c:9c:83:45:53:d8:
53:da:e4:12:f3:be:d6:c8:44:34:80:0f:1a:37:c0:ea:62:12:
d9:94:84:d9:bc:f5:6f:98:1f:59:27:d2:3b:db:f4:2c:8f:c0:
dd:eb:7b:a0:61:3b:e1:81:b5:b5:47:17:c0:3e:0d:db:86:34:
68:a7:ef:68:ab:1f:c7:74:bc:7a:f6:fc:dd:26:21:c0:8b:85:
84:29:8e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:06:50 2025 by rpki-client