Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier: y0n5upXv6WU43H1X8Epa/qj+o/OCGq4XKzsv+xZf/zs=
Subject key identifier: 6F:45:9E:57:49:EC:99:D7:F3:48:41:90:00:8C:F5:7E:A3:E4:10:56
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 0198D5BB7BB8DAB34FD2E8EFE4D7B39D79C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number: 0BBF
Signing time: Sat 23 Aug 2025 07:01:30 +0000
Manifest this update: Sat 23 Aug 2025 07:01:30 +0000
Manifest next update: Sun 24 Aug 2025 07:01:30 +0000
Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: /8YzMuMK3kocY1+TVNWDzRJZOgy5JtNt/EGvdIzgAgs=)
2: FiLJrOB6VSbXcUW10ayq5u0-45c.roa (hash: SVzm6u7ARr2O1cZhcAUWJuayXj1RRfV/z3YIwyKiXZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7b:b8:da:b3:4f:d2:e8:ef:e4:d7:b3:9d:79:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Aug 23 07:01:30 2025 GMT
Not After : Aug 24 07:01:30 2025 GMT
Subject: CN=6f459e5749ec99d7f3484190008cf57ea3e41056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:72:60:ad:a2:05:28:3f:e1:5d:38:4c:e5:
41:74:35:97:b0:bd:7f:85:d3:9a:6e:be:2a:b3:3d:
40:0f:0f:5f:0d:3e:1d:f2:e8:89:09:9d:11:19:7b:
a1:a8:d8:59:dd:aa:7b:32:1b:0c:48:40:e1:2c:9f:
11:67:0a:a6:87:a3:1a:dc:6b:3c:d8:6d:22:d0:38:
f5:0a:49:a2:b4:4d:20:a1:34:ae:6c:37:5f:6c:65:
0f:b2:65:3e:ba:c8:04:c0:10:97:11:14:b5:48:34:
39:f0:db:20:f1:5a:8c:25:f9:86:e9:7e:8e:45:55:
1b:d8:30:54:10:2f:10:6d:db:28:30:65:2e:49:b5:
f9:58:e2:14:b5:22:9f:9a:45:ad:eb:4f:93:fa:18:
13:66:72:e9:01:95:c9:41:0d:7f:40:4b:f6:58:96:
e3:0f:71:bc:e4:2c:d3:7b:c2:e7:25:6e:48:a3:0a:
57:de:c6:ce:7e:92:75:0f:53:41:96:93:35:1f:b6:
2f:0c:e3:5a:9e:7c:55:fe:30:28:94:7e:3d:57:6f:
a3:3e:f2:95:e7:1d:a5:9b:c3:f4:38:08:a3:41:18:
fc:39:7e:3d:84:bf:e5:61:67:49:15:7c:bb:d0:9d:
09:58:9f:1f:61:74:3b:a2:b8:88:62:64:70:23:96:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:45:9E:57:49:EC:99:D7:F3:48:41:90:00:8C:F5:7E:A3:E4:10:56
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e2:d5:81:55:b8:61:fe:13:82:9e:fe:57:63:7a:d4:cd:6f:
d8:e1:cf:35:87:98:f5:e2:5b:a2:fe:bb:71:bf:57:14:c5:a6:
9a:f7:67:0c:ac:6e:9b:63:cd:83:37:d7:78:12:38:02:2d:c2:
c1:10:2a:ab:dc:18:c1:66:24:45:01:46:7b:ae:9f:75:97:45:
7f:a1:47:1d:8f:2a:86:dd:48:1b:f4:64:4b:58:45:2d:0b:d5:
bf:33:33:c2:b0:2c:70:74:7f:3a:6f:81:59:51:8a:29:7a:70:
cd:8e:c3:89:c5:11:b5:dc:cc:18:67:18:fd:29:e3:20:94:3f:
8c:64:28:c9:6b:82:92:f3:bf:f2:e6:20:9f:13:fd:2d:c2:01:
17:03:5f:69:c6:73:61:f8:f9:de:73:ef:a7:1d:1a:ae:13:fd:
06:94:eb:5d:5f:b1:42:4c:61:48:7e:ee:3d:d5:68:a7:1b:4f:
4c:1d:2e:84:52:fa:ff:53:7f:bc:38:55:dc:7b:0b:5a:08:1e:
9b:9c:51:0e:f7:94:85:55:78:88:8b:7e:72:a8:ed:c4:b4:6a:
ae:25:30:6a:50:91:9e:09:57:93:71:54:6b:39:9b:78:8d:8b:
45:42:ff:23:b0:5a:31:93:21:fe:06:84:8b:b1:f5:c9:a9:3c:
fc:17:92:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:24 2025 by rpki-client