Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: KeA9Eh2chvcvftx+qM68O6DzWLrfgK4b5yBoXhgFmJI=
Subject key identifier: FC:E4:AC:47:C6:F1:50:E0:0E:5E:11:C4:DC:2D:22:D0:2F:BA:31:D7
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 01987B9D8E403EAEEF24E9A16F00C8BDA648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 0A08
Signing time: Tue 05 Aug 2025 19:02:59 +0000
Manifest this update: Tue 05 Aug 2025 19:02:59 +0000
Manifest next update: Wed 06 Aug 2025 19:02:59 +0000
Files and hashes: 1: 7XdSGfevcJJsevy7fOceWvja7nc.roa (hash: 738FMMf7Atyvq/JMYg2GIhaCbgWHQKUbxrDxkyANCA8=)
2: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: I2Dp9lAINBsX4q5gX2rBVzSIdvims6cLRxoRwgLPSxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:8e:40:3e:ae:ef:24:e9:a1:6f:00:c8:bd:a6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Aug 5 19:02:59 2025 GMT
Not After : Aug 6 19:02:59 2025 GMT
Subject: CN=fce4ac47c6f150e00e5e11c4dc2d22d02fba31d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fb:3b:9f:cd:b3:3c:92:ab:fe:34:af:17:3d:
48:12:de:4d:57:64:23:75:a4:a5:a0:fb:11:c2:38:
e3:3b:48:24:ad:e6:c7:26:e2:50:8b:e0:1f:3a:92:
da:4b:b8:ca:dd:f6:7e:7f:8a:78:4f:9c:2e:5b:2c:
7e:65:02:be:99:b7:ab:05:0b:9e:2d:35:71:8a:85:
f4:0f:f4:09:fc:4f:04:6f:13:63:77:57:1c:ae:b0:
8c:79:94:13:45:0d:45:cb:08:9f:83:ea:91:0e:3d:
11:67:02:3a:f8:bd:0c:59:58:60:b3:0c:62:5a:7a:
0b:31:55:c3:58:c3:d1:b3:80:b4:78:1a:9f:68:32:
b5:49:c9:3e:f4:26:25:e4:54:ca:55:bd:53:fc:bb:
38:ae:44:40:56:a4:b4:66:42:d5:df:fd:07:fa:fd:
18:c4:ab:8b:55:0b:1b:fb:45:b3:68:c7:63:32:3c:
49:8f:bf:b5:0f:16:8d:33:23:f5:a3:74:84:c1:fa:
8d:e5:ec:df:8c:d3:74:6e:f8:b4:45:30:0c:51:59:
ac:bf:18:d9:1c:df:f8:c7:76:02:f7:fd:fa:dd:f5:
f9:c7:ba:4e:3f:aa:67:ef:e8:90:2c:14:f5:a2:53:
d3:0a:79:02:e4:cc:cb:19:b1:b3:15:11:e3:a1:08:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E4:AC:47:C6:F1:50:E0:0E:5E:11:C4:DC:2D:22:D0:2F:BA:31:D7
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c7:78:ca:47:1f:09:79:d4:f1:a6:68:60:e0:8f:50:7f:48:
c6:a7:61:db:14:27:75:91:2a:df:b7:e9:f8:d9:6d:9d:16:1d:
d6:d8:1f:b8:ac:ed:2e:1c:22:94:c8:79:db:0f:47:ee:77:5b:
fa:e1:d8:ab:bc:89:84:bf:77:51:83:51:c0:ad:66:da:31:41:
2d:32:63:c1:32:e1:27:df:b0:26:8b:65:9c:48:4d:71:2f:2f:
e7:61:b5:a6:f3:be:49:89:4b:72:d1:0b:27:c4:29:5d:b0:4d:
1d:bc:99:49:f0:16:09:62:4b:04:ec:9a:8d:12:6a:0b:bd:7d:
c8:02:83:c0:bd:0d:a6:96:2e:da:92:95:9b:73:8e:cd:09:47:
bf:a8:27:48:d3:15:46:53:bd:35:e2:4e:50:d6:10:47:82:53:
42:46:bb:1c:1d:6f:7b:5c:c3:ca:dd:db:bb:9d:48:67:e4:e7:
35:9a:68:75:5b:7b:48:39:7e:7e:61:89:7c:77:bc:73:cf:2e:
24:a3:56:98:92:a4:86:9b:fa:3b:80:5d:ee:ae:9a:99:38:43:
0f:d8:e7:dd:46:4a:b6:47:86:49:37:ab:db:40:42:e1:59:f0:
4c:22:7b:7a:c4:dd:a3:68:31:4f:53:a3:0f:a1:6b:77:5e:21:
58:2a:5a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:57:37 2025 by rpki-client