
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: qDky2AejUYOH2kj6ul5enGy/rX+Q+pTPC4S+VP3E6pQ=
Subject key identifier: 2A:63:E9:3A:46:BE:FF:F2:D6:36:51:B2:DC:39:3C:0C:AC:0F:1D:70
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 01988B0F50261E77221DB59F8A226EC0374D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 12BB
Signing time: Fri 08 Aug 2025 19:01:33 +0000
Manifest this update: Fri 08 Aug 2025 19:01:33 +0000
Manifest next update: Sat 09 Aug 2025 19:01:33 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: dv9LjrMMLhtWNSNFdAp/pQeTbsqCyvE+qWkKVdw7Omk=)
2: KrQvju8wsP_1pgegWQDfP_dBbsE.roa (hash: 41ILiMyCbiBXLBStCWRCt8ZnN2evNZdt0aku7rFi6gM=)
3: MT4hr9PSkUajZkci1pWS9v2orok.roa (hash: qezGbt2cfl90iVziKgXNGmy2fO9q+dUTbPbEn9xA5FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:50:26:1e:77:22:1d:b5:9f:8a:22:6e:c0:37:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Aug 8 19:01:33 2025 GMT
Not After : Aug 9 19:01:33 2025 GMT
Subject: CN=2a63e93a46befff2d63651b2dc393c0cac0f1d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:5b:c0:6f:f0:16:9a:ab:9a:d1:97:26:ce:
de:c5:4f:37:f6:82:ff:ae:7d:d7:ef:d6:57:db:2a:
e7:cb:5b:9c:c4:6a:d9:48:b3:b5:35:0d:f2:63:88:
59:08:af:00:17:07:9c:b2:85:dd:da:a1:e7:d6:69:
0d:cd:7c:53:ce:f4:57:f3:db:90:54:17:2d:33:e4:
1f:15:3e:a7:e4:f3:06:e4:3f:71:dc:38:0f:05:24:
e8:fe:7c:95:e7:bf:7c:97:54:b6:04:52:0f:f3:18:
3e:b1:10:17:d2:27:ba:41:b1:d9:60:56:f3:db:cf:
07:95:4f:1e:8d:c6:15:56:99:24:92:2d:7c:18:cc:
2a:99:22:0b:21:1e:5d:c8:dd:89:ca:cc:4d:39:4c:
72:d0:9b:df:49:66:52:42:8e:af:6a:07:a8:58:42:
a6:97:d4:59:b9:35:cf:c7:f5:9f:ea:c3:5d:af:40:
b4:ec:00:63:85:84:69:83:3e:2f:fa:59:72:7e:32:
69:6f:9a:75:f0:1c:c9:e7:a2:88:7f:8f:56:05:a9:
eb:56:fd:43:7c:e7:b0:c8:dc:a2:b6:c3:ee:13:32:
75:15:29:87:b2:c2:42:32:61:2a:a0:98:41:22:4a:
ad:8f:a5:ea:e0:1f:ba:e8:8e:db:7c:e4:5f:97:89:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:63:E9:3A:46:BE:FF:F2:D6:36:51:B2:DC:39:3C:0C:AC:0F:1D:70
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cb:b8:37:76:37:ee:d9:ba:5f:61:e1:7b:43:9a:22:3f:f9:
05:58:c7:fe:52:06:6e:d5:78:4d:1a:40:da:a8:47:28:2a:ba:
01:72:4d:fd:63:65:b1:d7:df:b3:ef:1c:4b:1e:74:22:e4:da:
ed:78:8f:25:ff:a0:9d:61:e8:ed:d0:86:54:01:fa:0b:11:1e:
8b:0e:d0:a8:42:84:fa:d8:a9:2f:0a:85:c1:3c:d4:55:c8:af:
e4:03:f2:70:ef:20:bf:ee:70:27:2a:25:c4:4c:ef:7c:2c:16:
b5:ba:7f:d9:88:dc:d0:07:f5:ba:06:8a:08:3b:2c:cc:2a:9d:
0e:19:83:a7:cd:f3:03:78:dd:56:2c:04:4c:f0:71:b4:18:22:
f5:ac:0f:db:dc:a7:63:e0:5d:76:41:15:f0:3d:14:c6:55:85:
30:42:69:a8:ca:90:72:21:64:05:61:36:87:78:f0:67:cf:1a:
55:e3:3d:9e:00:1e:ad:2b:70:dd:7c:c8:3e:ec:51:1f:9d:38:
63:94:61:53:4c:d0:fd:e6:04:8d:e6:55:35:86:c3:46:7c:00:
a8:75:e5:2c:27:bd:e0:3a:4b:d3:4b:c3:71:58:f9:10:42:29:
9e:eb:31:10:77:d4:8f:de:69:ab:9e:15:a1:12:15:25:64:06:
8e:8e:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:48 2025 by rpki-client