Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
File: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft (raw, json)
Hash identifier: JToU9jD9+2PNueCiqRiGWjztIYOXZlFSRSrMplk2RbQ=
Subject key identifier: 9C:9F:79:1F:C3:68:B8:20:77:81:61:A3:9D:7C:7F:D0:AA:C6:A5:DD
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 0198752C279D5A228538202E41D28D95ADAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
Manifest number: 1201
Signing time: Mon 04 Aug 2025 13:01:24 +0000
Manifest this update: Mon 04 Aug 2025 13:01:24 +0000
Manifest next update: Tue 05 Aug 2025 13:01:24 +0000
Files and hashes: 1: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl (hash: LPaUHwlzDzWIOrI4M/mjKHIJnNRQswkWerzDNIRP1OY=)
2: f3ZAgsX9I3hAxsDfGccuc4frEIc.roa (hash: 4M3tVBuY11wpuTelZy7jmaALqx1HzWsWmiuVNlUHSTM=)
3: m2ywJd2kQJYTADIv61wmJdARYH0.roa (hash: ZTRMQxv3ksCR8s54WLYLbJtFtPpGkhVtVd7EKUXjlqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:27:9d:5a:22:85:38:20:2e:41:d2:8d:95:ad:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: Aug 4 13:01:24 2025 GMT
Not After : Aug 5 13:01:24 2025 GMT
Subject: CN=9c9f791fc368b820778161a39d7c7fd0aac6a5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:58:1e:13:1d:d4:3f:01:72:6b:b9:a2:32:
81:b4:f3:7e:e4:94:69:6f:9d:87:a2:a0:4c:50:2e:
de:ea:5d:57:53:a6:06:c6:8d:12:bc:b2:cd:a9:b8:
a4:79:fa:23:f4:9e:b8:03:dd:73:44:34:59:55:9f:
33:9d:dc:61:88:2a:89:6e:6d:f6:cf:f2:55:32:f1:
aa:fd:98:79:af:75:17:ed:af:f1:4e:67:a2:5f:ec:
f6:f1:82:12:9c:22:04:c3:dd:56:d6:e0:b8:6e:e6:
2c:b3:8a:98:a4:93:7d:34:86:80:e0:d2:2a:82:f8:
d7:af:2a:63:a8:99:48:fb:e8:6a:9c:11:64:a1:00:
fa:1e:44:88:f6:a0:33:89:95:1a:96:d8:ad:e7:98:
b1:b4:98:d1:9e:b1:50:9f:e2:e2:42:04:27:4a:3c:
60:71:2b:8b:fa:91:e6:41:b6:19:76:98:58:53:e9:
e2:18:42:7f:e2:75:b6:dd:1b:f9:8f:42:24:a5:bf:
3e:49:06:d1:53:ed:17:55:a6:8f:ff:48:0e:b4:17:
5f:5e:fe:fa:9d:7b:52:b6:44:12:ad:c0:21:1e:05:
32:4e:22:5b:a1:cb:4d:eb:6e:8c:0a:e8:b8:c3:e6:
cd:35:d9:6a:e9:71:13:d4:59:72:69:6d:ea:76:7f:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9F:79:1F:C3:68:B8:20:77:81:61:A3:9D:7C:7F:D0:AA:C6:A5:DD
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4f:41:07:14:0f:2f:a6:69:7e:a0:75:82:23:50:4b:9a:30:
1a:ca:b8:0a:7e:0a:5f:d8:24:e6:c9:1c:9b:e8:1a:34:6e:b3:
eb:e2:8b:b8:07:f0:b0:44:8b:38:2b:6f:93:d9:da:66:45:a6:
1d:cb:49:09:bc:c3:3d:fb:ff:9c:9f:6c:d4:2d:11:89:86:5b:
af:1d:56:aa:7a:f5:14:af:d8:d2:79:df:6a:34:5b:fd:a0:1b:
95:a1:d7:7c:6e:e1:d4:88:33:5a:3b:1f:f4:63:bb:6d:0b:69:
15:c1:08:2f:f9:b1:a2:52:73:e4:16:e5:3c:e4:ca:26:e9:b0:
c6:93:0d:24:b2:b6:43:3e:9e:ad:18:05:4d:50:58:ad:4d:3f:
eb:4a:5a:2a:32:f0:67:13:f3:30:8f:82:35:fb:0a:31:d9:70:
bb:d4:97:49:97:4a:1b:ce:a6:09:c0:18:4c:f8:e0:ae:ba:8e:
32:5e:ef:ca:dd:a1:bd:38:c1:6f:28:82:24:04:3f:84:0c:fb:
a3:e4:a6:05:c4:e5:04:27:ee:4f:87:ec:b4:c0:42:79:1e:71:
6a:7d:06:5c:e7:58:92:da:04:b1:6b:a9:cf:34:29:aa:b7:3b:
a2:09:7a:a6:a4:cf:48:3b:0d:60:98:fc:47:fc:26:3f:1e:95:
a5:3e:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:41 2025 by rpki-client