Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: gNTjnDsRuajOuPhnczq5TyfjdUG/spDA+MB8t7XZpKI=
Subject key identifier: 2D:AF:B6:A1:CA:1C:E6:D2:80:63:6A:F1:5B:F1:8C:82:B5:A7:6C:0F
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 01987B2E18F04E912557DA873936D38947A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0CFF
Signing time: Tue 05 Aug 2025 17:01:15 +0000
Manifest this update: Tue 05 Aug 2025 17:01:15 +0000
Manifest next update: Wed 06 Aug 2025 17:01:15 +0000
Files and hashes: 1: WiIPyXHByzAssjj4VKSqXNq3hNo.roa (hash: zCz09ISW2vqCRWl6+kt0e/gaUd26cQmDKkxwLzxkeJQ=)
2: XLNp588BlhjTzq9wL8KooDNiDfQ.roa (hash: yqzj3pa+xK6sQ61wkjeNUDLd0sOcE9ePSDM9S9DIM0g=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: u7v4+YdFoB39n8oggLj19UgUir0iCUk7EcqJM6tG0p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2e:18:f0:4e:91:25:57:da:87:39:36:d3:89:47:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Aug 5 17:01:15 2025 GMT
Not After : Aug 6 17:01:15 2025 GMT
Subject: CN=2dafb6a1ca1ce6d280636af15bf18c82b5a76c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:9f:13:c2:17:58:24:f6:c7:6f:5a:17:7c:
45:6c:74:b9:20:7b:20:ac:36:b5:bc:e2:6c:ba:c6:
01:c9:21:58:c6:31:5a:ea:e4:f6:11:dc:4a:5a:f9:
58:41:eb:fa:2f:6a:36:d7:f5:49:c3:b9:16:c5:47:
90:dc:26:70:7f:83:26:f0:a6:21:37:27:f3:85:2e:
07:a4:3d:4b:34:12:f2:8b:5f:5f:5f:94:db:7b:59:
10:6a:08:92:c9:a1:b2:dd:26:f6:b3:60:b1:bd:21:
7f:1e:a1:73:87:cd:3d:67:48:a1:66:b0:5e:cf:81:
24:0e:e4:58:f3:6d:ef:a7:9d:a7:a3:6e:09:04:b0:
30:dd:17:33:e7:04:ce:6a:7e:03:51:58:d4:bc:80:
f9:d7:dd:74:92:fb:02:b0:4e:b7:7e:9d:d1:da:7a:
21:3f:f2:11:b2:24:b7:f1:a0:9b:6c:3f:c4:7e:07:
81:0d:2a:83:d6:0b:43:82:fd:93:1e:b2:b4:d2:44:
2e:8c:d8:d0:44:71:40:88:17:15:63:d7:01:19:2f:
09:00:33:c7:37:cf:c0:2b:21:0a:a4:de:c6:47:c8:
43:a7:25:da:8f:1d:c2:88:22:46:83:f3:6d:93:a9:
11:7e:e5:fd:e3:cc:5e:45:32:8d:bf:92:64:fa:60:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AF:B6:A1:CA:1C:E6:D2:80:63:6A:F1:5B:F1:8C:82:B5:A7:6C:0F
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c8:69:10:9f:0a:ea:45:d0:01:6d:04:15:e5:7a:e2:11:8f:
14:b6:3b:9f:d4:ff:cf:98:7e:13:23:20:a1:ac:91:d0:2d:bd:
4b:f8:de:ae:3e:e8:cd:24:79:ac:8e:8a:f3:b7:6d:e4:1d:13:
24:a4:a1:60:de:1b:af:e9:53:8b:68:5e:b5:2d:94:ec:9e:8a:
51:05:6d:4a:23:ba:9e:91:44:fc:bb:63:18:0e:61:f6:ab:95:
89:7d:98:07:f0:99:ff:10:f8:9d:86:cc:c8:96:3b:ee:86:07:
54:2b:7e:3f:7d:5d:1f:6e:44:32:65:6b:30:b4:da:d8:b3:ba:
11:8a:97:d4:5e:cb:38:9b:04:dd:b2:4f:37:f3:a4:c8:2b:0f:
dc:17:bf:f2:9a:99:ff:71:f5:12:17:86:63:8d:a1:02:6c:cc:
4e:db:cb:11:54:b9:6b:9c:fa:53:97:aa:69:14:f4:38:b4:93:
30:31:05:40:49:59:ee:75:e0:b6:95:55:28:79:b5:1c:94:51:
72:16:64:a9:7e:f9:0c:e6:65:fa:05:79:45:0f:aa:90:61:38:
12:06:80:0b:1a:85:1e:f8:01:43:f0:ec:50:36:52:59:1c:67:
12:be:3b:35:02:7b:01:83:9e:75:04:86:02:cc:82:fe:a9:e6:
d3:9f:dd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:57:35 2025 by rpki-client