Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: ZfT6sxQn1fignnuj4EjLNzpT/uCXURRAL8VKRSjkkqo=
Subject key identifier: 7B:26:0B:E6:01:F1:AA:4D:6F:0F:76:AD:71:28:A8:05:2D:3D:97:B2
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 0198726214A8DAC36EBF2E8BB5055CC8A1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 15A7
Signing time: Mon 04 Aug 2025 00:01:27 +0000
Manifest this update: Mon 04 Aug 2025 00:01:27 +0000
Manifest next update: Tue 05 Aug 2025 00:01:27 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: g/G6V2KzRoFDDW85Wz6j8FvGMsdq/thX2YFADX64nyk=)
2: cednPNYKxfRsr4W4osQ0UxWr_xg.roa (hash: bAnClABodJAGvw6mOL61pHv3A1a0Gmryz3vjrqAKOxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:14:a8:da:c3:6e:bf:2e:8b:b5:05:5c:c8:a1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Aug 4 00:01:27 2025 GMT
Not After : Aug 5 00:01:27 2025 GMT
Subject: CN=7b260be601f1aa4d6f0f76ad7128a8052d3d97b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:b1:e6:55:82:3c:64:cd:df:eb:79:04:da:
b2:0c:da:0f:96:bb:80:90:1a:26:f1:a8:8d:52:b3:
85:86:06:58:51:9d:d1:61:cc:79:45:2e:b9:17:7c:
dd:7c:4c:f1:d1:53:a1:13:5e:6d:1e:f2:e0:bf:25:
d1:b2:bb:1b:45:0b:4c:90:79:d9:d4:d6:c9:1f:19:
24:8f:87:b9:9c:fb:d1:21:76:76:6c:80:5d:3c:2b:
0a:f5:91:ee:7c:17:74:b6:80:df:61:66:c7:59:48:
f0:2d:ea:eb:aa:dc:c6:f7:69:b0:3d:7d:b7:ac:d0:
bd:fa:ee:88:8c:fd:f2:1d:20:21:32:6d:8b:f5:d3:
ae:a1:8f:5c:9d:58:1e:00:f5:cc:6b:41:0c:92:92:
e1:99:55:95:30:f0:e7:15:b9:73:37:ee:98:7f:52:
6f:00:fc:75:49:07:2c:80:5f:a9:f6:9d:f3:e0:9c:
1f:55:fe:41:20:6e:a2:08:10:ce:7c:87:a3:70:42:
fb:18:62:64:22:0d:a2:21:8c:1b:cb:2a:6b:77:75:
4c:af:80:43:6f:c4:a2:d6:3a:88:b5:6e:ab:2f:2f:
8e:3a:32:16:d5:ec:0b:07:12:7d:aa:fb:a7:8e:51:
02:ef:0b:bf:f3:9a:99:a0:50:a4:83:e4:64:26:10:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:26:0B:E6:01:F1:AA:4D:6F:0F:76:AD:71:28:A8:05:2D:3D:97:B2
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:26:99:47:9e:2a:3d:22:d1:8f:cc:99:13:dc:2d:f0:42:40:
b6:1c:ad:f9:ef:97:1c:5b:82:f9:08:32:45:06:d5:f9:3c:f0:
c5:eb:4f:ed:a5:d2:fa:f6:50:fc:1d:9b:6d:62:11:11:61:30:
15:21:3a:fa:84:1f:97:4f:77:b0:12:59:3b:25:51:44:f1:3d:
94:af:37:95:96:23:8b:53:f2:ba:85:14:fe:48:90:d3:51:4e:
b1:4d:c9:e4:ef:f1:aa:d6:7d:99:34:20:53:fc:55:3d:03:ee:
78:d2:5a:25:22:51:69:e5:93:6f:ad:f9:a2:dc:f7:ae:c9:f5:
39:1a:1e:f3:ad:f5:ea:5a:ae:18:ca:ee:42:ac:e4:75:d5:f3:
b7:6d:c3:b9:df:98:e4:5f:da:be:0b:1a:ad:30:90:0b:ec:9e:
3d:ba:72:df:ce:80:47:a2:7f:28:6b:f8:3c:24:9f:d8:83:2b:
d1:ef:2d:e7:50:2f:89:7b:fb:19:49:3a:a8:ac:0d:98:3c:42:
d0:7c:55:0b:38:06:dd:d9:68:78:49:4b:44:a7:6f:6a:d3:0b:
77:5a:60:8b:54:e3:82:1d:95:bc:cb:3f:da:69:d6:50:57:86:
1c:40:d5:b2:82:bc:b8:6c:02:e0:b6:a1:3f:1a:86:af:88:ec:
ba:72:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:01 2025 by rpki-client