
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: cH8KpPwfVKRgCR3jFSS+1ZvE4FDwZBtNQTLvZQ2iW7c=
Subject key identifier: 50:3E:F4:CB:4A:19:71:1F:C1:80:09:5B:BB:32:51:59:B4:06:C4:8C
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 019886C415FF228CFBB1A3BE9CB61A7D3F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0CA0
Signing time: Thu 07 Aug 2025 23:00:54 +0000
Manifest this update: Thu 07 Aug 2025 23:00:54 +0000
Manifest next update: Fri 08 Aug 2025 23:00:54 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: 7O1IiMDW7xej0KWXLBrWCjplj0M5TBWTxH6u4r0xKrs=)
2: 1-Mnf3JnGm30D3TVdL8D8i-JJTg.roa (hash: FQArZOtG/iI5+2OZ+rGhEkabMbeYZiFVJ69aFAVvKUM=)
3: ViACi2znHcxjvEoTWJabRySlSug.roa (hash: /lKDXYbMBEGiN9zYRBMEKiyvRO0eOc45ePzpVSUQyuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:c4:15:ff:22:8c:fb:b1:a3:be:9c:b6:1a:7d:3f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Aug 7 23:00:54 2025 GMT
Not After : Aug 8 23:00:54 2025 GMT
Subject: CN=503ef4cb4a19711fc180095bbb325159b406c48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:38:cd:84:35:ab:67:45:26:9f:6a:59:eb:
a0:bb:fd:25:9a:0f:80:2a:7e:79:bc:e0:76:b1:ee:
3d:df:50:79:a3:3c:ce:59:39:78:d2:d7:ca:a0:58:
ee:41:cd:47:88:08:a3:e1:c5:d4:4c:ec:9d:b2:f9:
36:82:e0:81:d9:79:a4:93:1b:e7:6c:5c:69:e7:06:
c4:0a:93:75:2e:20:4a:13:52:28:a6:a5:0c:85:4a:
5f:bc:51:a2:22:75:7e:0d:f3:24:c8:32:08:b1:72:
24:42:68:a8:f5:0d:b4:15:d0:d5:73:fc:ed:6a:49:
ac:cd:81:7a:0f:02:da:ab:76:7a:21:a2:74:08:cc:
ed:f6:71:dd:71:1e:5f:d6:98:ac:41:a5:09:d7:a3:
cd:ba:49:60:4c:66:a6:4b:53:e5:d1:d9:6e:1d:40:
b8:f4:6c:d4:f1:16:5f:24:3a:f8:6f:ad:7e:99:16:
0a:fe:af:83:ed:37:3c:7a:7f:66:f3:ac:93:5c:f1:
bd:69:94:7a:40:33:db:cf:98:f3:22:f3:ee:2b:24:
9a:02:67:a0:30:a9:10:9f:c0:3f:8e:85:2e:41:df:
59:71:76:17:af:8d:b7:e2:f5:5c:a3:f5:58:e2:01:
d3:8b:0d:37:ea:51:8d:91:21:55:67:86:31:db:b7:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3E:F4:CB:4A:19:71:1F:C1:80:09:5B:BB:32:51:59:B4:06:C4:8C
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:44:88:cc:b5:b8:d9:de:58:0e:1c:61:d9:c5:83:ec:76:03:
51:27:74:d4:bf:a1:1e:20:cb:8e:05:d5:99:fe:fa:c3:f4:c4:
41:fb:9d:c1:ac:18:ac:0e:b3:c6:66:80:58:57:ac:49:d1:a9:
4e:d7:5e:2c:b9:7f:12:40:fe:cc:65:b1:28:aa:6a:a9:46:0c:
b0:b9:61:c7:0e:ce:b7:6c:06:50:77:66:dd:99:53:d1:cc:3e:
64:2a:ac:fc:70:ed:f0:f1:19:c2:8a:69:f5:8d:07:2f:41:e4:
0d:ac:04:38:04:20:25:55:1f:1f:6f:da:13:5b:5d:39:e4:60:
cd:5b:c5:a7:69:17:b0:10:55:24:f8:90:b1:64:88:f2:fe:19:
dc:eb:ca:94:45:52:ce:e3:52:ed:91:33:e4:fd:12:f2:84:2a:
43:a1:94:11:91:d5:4b:98:1e:19:bf:93:3b:f9:84:96:46:71:
f2:96:13:8b:19:19:88:55:bb:c7:d0:b2:64:69:00:ce:65:c1:
1b:0b:66:c7:d4:3f:c3:21:3f:30:c8:aa:5a:97:8f:50:0c:c3:
b2:e8:45:33:47:ac:7a:d6:39:90:28:1a:d3:5b:4f:bf:24:98:
89:57:95:05:11:2c:93:97:25:ac:bd:63:54:b8:48:c4:f9:9a:
88:ac:57:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:32:14 2025 by rpki-client