Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: OSMqhs5lzPchGQy98XbxvdIxdfFFkBwZjuCcst2jWAw=
Subject key identifier: E5:17:7D:20:A5:48:42:04:FA:C7:9E:77:98:81:0C:46:87:75:4F:87
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 01989FDF48B0C3F0BF8349346BA425F46641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 1630
Signing time: Tue 12 Aug 2025 20:01:07 +0000
Manifest this update: Tue 12 Aug 2025 20:01:07 +0000
Manifest next update: Wed 13 Aug 2025 20:01:07 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: tCz1Zoz9ZyrjFmhdJbVie9ucjoLfr7nVUeTjuGNhBe8=)
2: ye296n7TFw2U7qCSerBkbo7SsH0.roa (hash: m5pP+tHttyj1Oj+JBIbSiGDkTJLLn21rUnR9Ptw/3e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:df:48:b0:c3:f0:bf:83:49:34:6b:a4:25:f4:66:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Aug 12 20:01:07 2025 GMT
Not After : Aug 13 20:01:07 2025 GMT
Subject: CN=e5177d20a5484204fac79e7798810c4687754f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:26:a6:b5:1b:e3:78:3c:7d:78:a8:8f:3b:
d1:3a:f4:25:ba:f2:b1:ce:16:f8:2e:65:f8:fc:97:
9d:89:bf:bf:7a:54:ca:32:ab:2d:36:f9:dd:2d:15:
c3:27:b6:9c:57:bb:2c:de:ab:c5:82:d1:f9:53:bf:
dd:3f:62:db:98:95:09:6b:cc:27:41:b3:f0:32:ba:
2d:9f:65:2a:e9:37:70:b1:c0:43:3d:1c:73:6b:b0:
2c:73:2a:8f:f4:d3:9d:d3:cf:cd:d5:98:08:2d:d3:
f4:cd:f8:7a:52:1d:07:7c:08:b4:26:50:57:20:16:
d5:a9:37:92:04:ef:95:41:7d:bc:97:7c:10:90:7c:
69:4f:a9:f1:f3:93:06:71:e5:cd:f9:bb:da:a2:ac:
0b:6c:f9:8a:7c:45:0a:38:b2:0f:4b:32:85:9f:9f:
35:f5:d2:e9:a2:26:94:99:50:ca:01:61:cc:39:36:
25:65:89:76:fd:eb:06:24:df:fa:ee:7c:3c:b0:33:
fe:35:40:1a:2e:64:9d:5c:08:11:4c:ee:dd:c5:de:
22:e1:b8:f4:42:c3:68:35:7c:1e:fc:e6:09:47:6d:
28:d1:c9:a1:b0:c8:62:92:56:bb:36:fa:a4:2f:9e:
c1:7f:aa:80:66:c0:7f:c1:4b:60:8f:ac:39:2c:d3:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:17:7D:20:A5:48:42:04:FA:C7:9E:77:98:81:0C:46:87:75:4F:87
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:22:12:21:a4:f7:66:3c:71:8e:17:45:2e:75:d1:96:ea:fd:
f2:47:44:12:aa:11:1a:05:2a:d9:5d:fd:70:e3:43:50:a5:44:
b2:5e:c1:e3:b6:f2:e0:dc:bf:60:e0:06:1b:9f:64:a6:c5:73:
39:59:38:3e:88:2a:18:65:86:ee:02:5e:21:c0:ba:08:a5:b9:
08:32:4f:cf:00:e8:15:4c:3e:7d:bb:cc:eb:8e:32:a8:37:b0:
69:62:bc:c3:15:a5:7b:6b:55:1f:22:77:ea:f3:5c:34:57:f7:
13:a5:be:db:f7:7e:9e:e4:57:a0:8f:f2:9c:9e:f6:af:6c:3e:
0d:a3:9a:8e:85:84:b1:6b:1f:03:2b:ad:8e:ca:3f:1f:33:67:
ff:53:00:14:e9:d2:6b:bc:12:78:b8:d0:af:51:75:4d:c4:a2:
dc:91:02:03:06:43:c0:c5:2f:50:1b:70:78:1c:6c:d8:cb:85:
30:56:75:89:9e:81:cf:a7:15:d0:ab:6b:ce:be:45:b8:1a:8f:
81:31:9d:b5:d9:81:bf:2e:65:3d:f0:a9:92:cf:d1:80:7b:97:
9e:3e:ce:b7:d4:bf:ba:78:d1:4f:a4:2c:3f:80:4f:fc:40:07:
a1:a2:bc:c3:7c:f0:e0:c4:79:63:98:6c:83:2d:eb:b5:4e:e0:
8b:38:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:59 2025 by rpki-client