Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier: hQZ/jE96l3xZG48Q202LQGMjEz4tU0plmPFwFIDlP34=
Subject key identifier: F5:71:02:50:A0:CF:F8:CC:E4:CE:7C:64:7A:C3:B2:55:63:ED:08:E5
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial: 0198D8F252A47849B07A11427E725117D446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number: 0F59
Signing time: Sat 23 Aug 2025 22:00:16 +0000
Manifest this update: Sat 23 Aug 2025 22:00:16 +0000
Manifest next update: Sun 24 Aug 2025 22:00:16 +0000
Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: 8KkNJ0UNQzvnnysDZ4iC/urVGdqWsGLKoJvH6/1IrnU=)
2: b-VOh1iyKHVcDysv8XYced0xnLo.roa (hash: 0b/hMsK4rsISxKd+Kzt0DOFihl9RrwFHAkmEpylmN4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:52:a4:78:49:b0:7a:11:42:7e:72:51:17:d4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Validity
Not Before: Aug 23 22:00:16 2025 GMT
Not After : Aug 24 22:00:16 2025 GMT
Subject: CN=f5710250a0cff8cce4ce7c647ac3b25563ed08e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:8e:e7:82:98:0b:c7:ed:2c:f3:9e:85:0e:
01:a3:0d:4c:53:11:0a:ca:67:0a:c2:fb:68:f7:63:
c3:84:e4:cf:14:29:7e:b5:a6:d1:5e:b4:31:af:6f:
6b:ef:be:06:dd:a2:d1:64:48:05:af:da:c9:51:be:
60:3a:7d:70:4a:6e:b5:a0:2e:0e:f9:d1:99:67:e4:
5e:ef:e4:68:b7:8d:57:e4:54:bc:ab:31:ae:47:af:
ca:64:af:ae:cc:fd:9b:5f:12:c6:55:60:e9:d6:92:
ab:eb:d3:75:5f:71:10:09:5d:71:3e:92:16:c4:a8:
11:21:9f:e7:58:03:86:07:28:10:62:91:9d:f5:2a:
8d:ef:40:9e:17:25:fd:5b:ab:56:d5:64:53:79:60:
e6:5f:2c:f6:b2:fa:4a:35:b8:d5:8b:b8:6e:bf:db:
4d:5e:31:63:2b:45:44:b8:22:b3:a4:d5:b3:a7:24:
4b:0f:98:66:0c:c2:ed:51:cf:44:fc:8b:ea:51:92:
18:67:be:be:ca:b1:f9:72:25:a6:d2:0d:6d:fb:ce:
00:37:c5:1b:15:50:77:4f:27:7f:6a:a8:7f:74:2e:
36:f0:ef:b7:c3:92:b0:80:b9:9d:c0:b6:eb:8b:66:
d2:09:cf:fd:17:d7:f6:cf:24:06:b3:75:cb:dc:6f:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:71:02:50:A0:CF:F8:CC:E4:CE:7C:64:7A:C3:B2:55:63:ED:08:E5
X509v3 Authority Key Identifier:
keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9b:8e:77:60:32:89:74:14:26:c0:2b:36:99:06:26:3a:d3:
70:7a:b8:f7:b2:93:b5:bc:91:8b:10:df:d8:ef:32:0c:0a:6c:
4c:94:02:d1:23:59:3a:95:b6:d2:95:a7:ef:69:be:ec:c8:9b:
0a:0e:c8:25:cd:4f:5b:6d:0f:0d:b8:41:91:18:b3:09:29:2f:
a7:6d:78:05:26:55:c4:76:45:f8:c8:c9:28:f9:97:e1:0e:72:
57:5d:fd:06:ba:8d:ed:cc:02:08:83:cf:78:76:4a:a1:4f:48:
1d:22:fb:f1:95:0d:c4:ad:f7:d0:3d:21:57:a1:48:58:7b:4d:
94:ed:37:2b:36:5d:49:ea:0f:c2:fc:67:1a:d7:fd:34:a5:72:
d4:19:ff:d2:d9:46:92:98:6c:87:cf:98:b7:bd:2a:a3:51:b9:
44:02:1d:bd:37:14:3c:96:e6:71:01:d6:66:9b:4c:c5:22:47:
3e:01:2e:25:e3:65:f1:48:4b:98:05:e6:07:e8:2e:dc:32:fd:
a8:d0:f6:e4:09:b8:a9:2f:cb:d7:af:1a:60:15:28:2a:7a:74:
74:31:b2:b3:8b:45:24:08:df:b2:fc:82:52:e2:0a:49:d5:73:
0a:f9:1c:68:89:e0:b8:05:aa:96:f6:90:87:01:f8:70:6c:40:
08:c1:43:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:50:38 2025 by rpki-client