Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File: 0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier: 6WfBwtwarp22Z4TvC+9+G18ZPxsS4Fi3ZCIhVW2xgts=
Subject key identifier: 15:EF:32:F0:63:95:BD:CA:B0:DD:95:1F:28:93:EE:55:8D:25:13:1E
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial: 0198D5BB7FCE12F25E1BFCD383993802CCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number: 0BC1
Signing time: Sat 23 Aug 2025 07:01:31 +0000
Manifest this update: Sat 23 Aug 2025 07:01:31 +0000
Manifest next update: Sun 24 Aug 2025 07:01:31 +0000
Files and hashes: 1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: z2urUNCOrt22+HxjAu2kycKDqOVCIsq2X3MjSKTOrW4=)
2: 2Bx_ZuBj3ywzIO5mlvk2Okv22hQ.roa (hash: guPg5C9izx8vPW7Ld4+sGxeIZUZPSLOzjQE1liVIecw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7f:ce:12:f2:5e:1b:fc:d3:83:99:38:02:cc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Validity
Not Before: Aug 23 07:01:31 2025 GMT
Not After : Aug 24 07:01:31 2025 GMT
Subject: CN=15ef32f06395bdcab0dd951f2893ee558d25131e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:10:4a:bc:c7:e3:cc:68:cb:92:0d:a7:3a:
1e:d7:70:51:e7:37:77:01:60:30:25:13:23:b9:c2:
2d:0d:9b:97:a7:3d:cd:b6:10:44:75:6a:36:9b:50:
5a:9a:53:5a:17:19:01:27:98:66:ce:c4:b3:fd:06:
0f:92:f4:c5:83:c9:b8:b4:dc:a7:3c:e1:f9:57:64:
53:5f:4d:97:7c:92:92:aa:f4:f1:9d:29:fd:b2:0f:
74:21:65:13:07:b0:e1:39:83:f8:92:0d:da:6d:c6:
6c:89:c0:af:71:9f:4c:0e:05:a6:f0:7a:33:3d:4a:
71:3c:b5:ad:6f:c1:cd:d3:39:97:9d:90:da:95:42:
54:2e:35:ff:8f:a4:75:ce:c5:c8:22:4a:b3:90:57:
17:b3:0e:43:a4:37:cc:a4:6e:20:08:c2:9d:a4:91:
57:0d:d0:d2:10:01:cc:6d:90:64:74:99:0f:ec:f7:
ff:02:1e:74:dc:4f:51:97:d5:5e:6b:9f:45:24:7b:
26:cf:a7:f3:3a:57:f8:81:49:7f:2a:d8:05:d3:e0:
48:52:d0:10:59:c8:7f:17:53:24:e5:42:05:98:e5:
33:80:30:30:94:c8:f7:b3:0d:79:14:a2:68:de:18:
09:70:b6:55:a9:2d:b7:64:75:70:da:10:2b:59:c7:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EF:32:F0:63:95:BD:CA:B0:DD:95:1F:28:93:EE:55:8D:25:13:1E
X509v3 Authority Key Identifier:
keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:51:37:26:df:4c:d4:45:c6:5f:21:5f:b9:65:bc:cf:29:f3:
f7:48:b9:80:6f:16:2b:fb:64:48:e7:14:53:96:1a:ee:ea:e5:
a6:50:48:ae:62:65:b9:d1:09:bc:9a:f9:f1:be:aa:69:9f:25:
04:05:d8:1d:c5:db:f4:c8:c3:1f:20:80:39:d7:13:a5:7e:0e:
33:58:44:69:a8:0e:49:37:96:4b:40:50:e4:ce:41:c6:84:af:
0b:7d:a7:8c:88:b4:4c:86:43:df:03:af:eb:ec:c0:2e:fb:0d:
fb:5a:f6:66:f2:6c:85:2b:82:fc:40:c7:a2:7d:39:35:04:c5:
87:21:f0:f4:19:a1:1f:cd:c9:69:0c:68:46:eb:c8:2d:af:fa:
3d:bf:a6:91:54:cc:ba:b3:46:e2:7c:2e:33:1f:ae:15:e1:61:
4a:e9:fb:84:90:16:b8:81:7b:a6:7a:4d:d2:23:94:d6:c0:cb:
c7:88:d3:ee:76:47:21:c0:f8:8c:b0:4a:82:7d:41:59:65:8b:
7a:3e:26:65:b4:00:c0:8e:f5:52:59:62:9a:ab:2b:dd:b9:75:
d3:15:50:fb:4d:33:8f:9c:8a:60:71:b6:1d:c8:3a:20:9e:a4:
52:ba:9f:a7:20:f1:ed:2b:9b:bd:e2:02:ea:30:a2:b1:03:58:
ea:31:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:54 2025 by rpki-client