Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: KHCirtWzQIKqKDiSZzWNWtiqBYI05Nc1j2ask0vvRTQ=
Subject key identifier: B4:E5:5E:45:9B:56:F6:D4:7A:D4:34:65:4B:B9:39:F0:EC:2B:92:47
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 01987CAE58C8A90E6EE2950F77E9EEFF2636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 0D97
Signing time: Wed 06 Aug 2025 00:00:57 +0000
Manifest this update: Wed 06 Aug 2025 00:00:57 +0000
Manifest next update: Thu 07 Aug 2025 00:00:57 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: w2edjKhF7aJ2u/zmAw/5lPvc/HR+qP9Hs+3XGhyTE2Y=)
2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:58:c8:a9:0e:6e:e2:95:0f:77:e9:ee:ff:26:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Aug 6 00:00:57 2025 GMT
Not After : Aug 7 00:00:57 2025 GMT
Subject: CN=b4e55e459b56f6d47ad434654bb939f0ec2b9247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:e0:79:b8:5c:a3:59:69:69:8d:7e:a2:9e:
78:98:84:d8:cd:34:1e:8e:ed:12:75:d1:ed:d9:55:
1a:b5:ec:98:c1:55:39:f7:a5:a5:26:4a:bf:97:e8:
cc:25:84:ff:a0:0f:cc:65:b4:f3:3c:40:07:85:f2:
cf:c1:6c:37:72:39:10:a7:03:35:33:bf:de:16:04:
fe:7c:33:ae:ae:14:34:ed:4d:04:35:0d:5f:66:58:
4e:60:bd:b3:d3:5e:f4:ef:d5:04:8d:15:56:d5:d9:
76:55:3e:8a:1e:87:38:70:54:71:8b:8e:99:18:c5:
cf:35:e0:49:1d:98:99:ec:44:88:b3:db:c6:8b:95:
e1:ea:f9:73:4b:06:3d:b4:be:50:be:9a:e5:88:59:
80:92:c8:3a:3d:5a:61:bd:31:dd:b5:fa:62:d4:ce:
b9:5c:49:ab:2a:b2:52:fd:14:9f:e7:cd:d9:2a:1d:
7c:c4:cd:b1:00:5d:48:9b:ba:b6:81:9e:b0:22:70:
e7:7c:42:37:d2:0d:73:28:4d:21:f1:f1:d9:1d:5d:
d7:7a:45:bc:ee:08:1c:e9:9a:52:f1:20:af:c7:f8:
d7:e7:7b:e2:c5:44:0c:47:9f:0c:fd:8e:01:6b:b4:
3b:4c:5a:dd:fa:a2:1f:90:e5:92:ca:bd:1f:52:75:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E5:5E:45:9B:56:F6:D4:7A:D4:34:65:4B:B9:39:F0:EC:2B:92:47
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d3:14:a5:d8:7d:3e:3e:69:40:f0:ed:2a:e7:ee:c4:67:54:
e7:d8:ea:39:39:63:b6:08:55:b8:59:3c:f8:e4:da:aa:9c:3f:
72:09:23:63:e8:0d:16:e8:5a:f3:db:6f:41:1c:99:42:10:cb:
37:58:13:c4:db:24:a0:2b:73:73:a8:ac:2b:cd:fc:7f:d4:66:
19:68:59:68:7d:be:cd:8c:ce:c5:b9:73:be:c8:fb:b8:d4:83:
d7:0e:69:6e:fc:a5:13:24:e5:66:52:11:03:c5:d7:fa:95:65:
c6:e7:21:92:c1:bc:ae:cc:58:a5:7d:a6:f4:47:a4:e5:4b:c2:
46:29:18:13:d7:2b:9b:10:44:fd:5f:7b:2a:c2:42:d4:df:ae:
7a:dc:1f:36:04:69:44:8a:7c:4f:a1:de:c5:30:87:5a:bb:7d:
1d:81:33:58:a9:94:ba:69:55:d9:f2:5d:5f:b7:bb:39:02:5d:
47:5d:66:7c:1c:d1:63:25:52:14:1c:86:19:6b:c6:23:93:99:
25:ed:c6:25:8c:b8:4e:57:c3:dd:b6:11:3d:f5:78:0d:21:4f:
02:68:c7:ba:72:ef:a9:7b:c5:99:66:59:2c:83:4b:ed:58:86:
d8:ee:33:ac:4a:39:b3:f1:58:79:79:26:35:a0:4b:4a:f4:18:
36:a4:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:24:08 2025 by rpki-client