Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: IunCzSKcKNA3dEb4IlvOqiyVi0CtUTTd72FjRAhG22s=
Subject key identifier: F6:38:05:60:53:01:0B:62:03:FD:51:3A:77:F9:B7:5B:A6:24:90:C4
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 019872987F5F3487ED98DB9F1E64F11A5474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 029B
Signing time: Mon 04 Aug 2025 01:00:53 +0000
Manifest this update: Mon 04 Aug 2025 01:00:53 +0000
Manifest next update: Tue 05 Aug 2025 01:00:53 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: Y2F67e1tecxcrVE3yLSIsUz/WQ6oC6i2+YZP6Z1I+fc=)
2: vwZ3qyY8j7AihfGsWYtA6mwINxQ.roa (hash: VBbCuPYUO8ASQ+6MrnY57WOdr+3+R3PhClJszE/T/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:7f:5f:34:87:ed:98:db:9f:1e:64:f1:1a:54:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Aug 4 01:00:53 2025 GMT
Not After : Aug 5 01:00:53 2025 GMT
Subject: CN=f638056053010b6203fd513a77f9b75ba62490c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:92:9b:dd:27:a2:1a:e5:ae:4f:ad:04:a0:e4:
df:bd:45:24:71:6c:88:71:46:ac:ab:77:5c:41:79:
3a:31:2d:e7:90:0a:31:d3:03:1a:ac:91:ee:56:55:
c3:67:cb:ef:a5:87:58:d9:04:80:6f:5d:0c:23:bb:
bd:25:fb:0f:df:e1:23:75:dc:a0:cd:de:87:00:7b:
d3:30:1c:ab:1f:2e:fa:fd:d9:0a:ab:3c:38:66:e4:
19:c6:a0:cf:57:35:d6:5a:e7:2d:62:87:fb:60:65:
3d:32:d7:bb:70:f7:09:e4:45:54:ec:96:84:cd:da:
73:6e:b2:64:b7:69:10:e9:a5:6a:9e:19:af:72:0a:
21:a7:ae:fa:24:e2:cf:eb:a9:8f:fd:b7:33:50:91:
c8:cf:d4:eb:98:a6:e3:fb:da:a0:4d:d8:fc:ae:b0:
1e:4a:cf:71:96:bd:b4:a7:16:57:9d:3a:1c:48:2c:
05:bb:f1:b5:e7:58:6c:8c:b4:24:d7:c0:86:c8:7c:
04:63:15:3c:ed:49:c2:6b:f6:2c:46:d1:ae:e3:f1:
5f:29:58:24:b3:ba:e0:17:46:ec:e0:b9:f8:3e:bc:
6e:68:3e:a3:84:bd:82:00:83:66:ad:75:61:44:f1:
fc:8e:75:69:54:ad:e5:9e:6b:e9:8f:3e:3c:f0:52:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:38:05:60:53:01:0B:62:03:FD:51:3A:77:F9:B7:5B:A6:24:90:C4
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fb:21:6f:40:9f:43:dd:ac:e1:eb:9a:04:59:12:35:6a:4e:
03:20:80:7a:07:9e:7f:0e:05:42:72:41:01:cf:66:4f:93:92:
7a:f2:95:e7:32:f5:fc:1a:b1:48:3b:60:c4:50:fd:6a:7e:71:
29:ba:34:4f:8d:fd:23:ea:df:68:37:bc:e3:fa:2b:f0:50:2e:
82:3a:3d:4c:f1:ba:65:48:f6:46:8c:ab:f7:c0:a3:02:13:36:
22:73:57:dd:1a:1b:4e:6f:8f:99:66:9c:06:0a:9d:c0:1d:9d:
51:64:78:8e:79:e7:c9:70:87:54:ad:0c:63:b9:26:0e:a7:5f:
7d:3a:9d:2e:76:f6:ee:68:14:db:c5:25:93:50:85:15:a1:e8:
3f:0f:7e:80:71:82:7a:b4:0b:e8:5c:20:59:b8:51:9d:95:9a:
61:be:ea:da:e9:9d:9e:12:03:e7:6e:c4:b9:5f:5c:17:5a:fb:
f9:49:83:d9:b8:f7:a5:54:46:f8:e2:98:a7:24:24:1a:2b:19:
2a:6d:f0:e8:43:ce:30:6c:69:49:b0:df:85:30:b8:90:6c:67:
b2:0d:dc:f0:18:38:71:fc:9e:19:60:02:02:04:c3:f6:3c:b9:
9e:29:1c:ee:db:ee:fb:ca:3e:18:5f:c5:28:f0:19:75:b2:4e:
8e:c0:a8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:44 2025 by rpki-client