Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier: W9CRCQs2L07rQUeiiLA5Kl6m41yAU0wtI4pmAxPx7Bo=
Subject key identifier: AD:8D:07:52:73:D1:98:43:2E:3F:E7:4A:B7:62:58:50:45:0F:E4:6C
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial: 0198744FAD72E0C1AAB6CEE24F73AD99C467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number: 0EEF
Signing time: Mon 04 Aug 2025 09:00:35 +0000
Manifest this update: Mon 04 Aug 2025 09:00:35 +0000
Manifest next update: Tue 05 Aug 2025 09:00:35 +0000
Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: 0MKfWUmNBiCJ/S5NZ1v25G/SK4Q0B40EmmPQyN6XTw8=)
2: H6uSFDtLoI4YQD04FkS4VSFpIhw.roa (hash: hv1JnxHOhWB0hv+54xUCZyY9gAEBPU8rdk2117x7KVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ad:72:e0:c1:aa:b6:ce:e2:4f:73:ad:99:c4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
Validity
Not Before: Aug 4 09:00:35 2025 GMT
Not After : Aug 5 09:00:35 2025 GMT
Subject: CN=ad8d075273d198432e3fe74ab7625850450fe46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:ab:5c:a4:61:a1:5a:87:b5:11:cd:c9:2b:
79:32:5b:0c:5e:e2:02:ee:be:13:50:79:28:86:95:
c7:f2:6f:24:60:4a:35:10:04:0f:a3:09:f7:04:8a:
5f:a4:7b:cb:89:54:e3:bb:d4:8e:ff:e9:32:d5:f2:
32:54:d6:b7:11:a2:22:84:01:8a:d9:35:4e:f3:21:
8e:37:68:99:ad:85:22:c8:6a:d0:6b:05:2e:ca:83:
5f:1d:97:d0:ed:16:5c:cc:01:5e:c5:f9:c3:ea:65:
85:b3:64:c0:ca:1f:89:fa:7b:f3:1e:98:9b:42:f5:
f8:c2:82:2e:4f:7d:17:f7:cf:c8:47:b0:05:cf:66:
2b:13:84:dc:57:13:26:bf:a2:cd:53:c7:09:72:a2:
94:e0:cc:e4:42:05:69:57:4f:e9:10:dd:1a:5a:0b:
20:65:2b:dc:6f:59:45:56:34:d8:31:bd:0b:59:b8:
91:40:9b:3a:a3:a3:14:cb:66:81:18:47:0f:08:91:
25:eb:b5:1e:10:80:f4:22:26:70:36:cf:d0:51:85:
59:72:57:4f:65:a6:96:c8:da:0d:83:2e:f0:d8:19:
4b:04:56:e4:1d:34:dd:5b:4d:44:6f:cd:6b:be:2c:
2f:4d:5f:96:be:36:3d:94:25:4e:b4:ac:b8:f0:03:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8D:07:52:73:D1:98:43:2E:3F:E7:4A:B7:62:58:50:45:0F:E4:6C
X509v3 Authority Key Identifier:
keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3c:0d:86:d6:e5:72:1b:e1:ee:67:22:99:45:c9:24:ad:1a:
7a:c9:4d:dd:f5:b2:0b:eb:a3:c2:47:97:1d:a5:e1:b1:f7:5a:
ad:d3:a2:52:b1:67:50:89:3e:d6:e3:7e:ad:ec:23:f0:43:b5:
2a:92:9b:0e:c8:3c:e3:9d:7f:a7:f9:fa:51:3e:c9:41:74:1d:
c8:ec:e4:56:a7:05:e1:9b:45:76:47:b6:58:12:c0:5a:d9:73:
1d:c6:80:d0:75:89:7a:8e:85:7d:9d:7d:2f:11:a8:8b:45:93:
91:ac:8d:2c:b3:1f:76:13:cd:b1:44:2d:73:a3:3f:2c:67:8d:
f7:ce:0c:05:ab:16:f6:09:43:5f:09:1a:f1:a5:cd:77:6c:a0:
c5:6c:47:f2:24:6b:f5:ac:1e:49:2f:f3:02:0e:f9:93:d1:f0:
00:6c:c8:30:7a:cd:d4:99:7d:b5:77:c5:2e:f6:cd:33:f4:2b:
aa:f4:e9:cc:95:0b:00:4c:c9:8d:80:87:6a:2b:27:26:74:10:
a4:fd:7a:f3:93:d8:0d:7e:98:31:3c:af:73:65:2d:b6:f6:71:
71:0f:0d:75:71:2a:56:ed:21:9c:d5:0b:35:83:b0:b5:43:80:
70:4d:ac:b0:33:aa:d0:bd:8b:52:90:76:e4:e6:d2:19:b3:74:
3d:34:ad:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:06 2025 by rpki-client