Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: HzIE3oXPSVFZGrbSYaxfEe4MoPkgJUfGsSz4TklEDqw=
Subject key identifier: 58:F2:D2:4E:5D:72:5D:81:38:4F:DF:5D:02:48:24:18:D0:1D:DB:06
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 0198D583E57980A9B24B9A4109E7C61AC34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 0BA1
Signing time: Sat 23 Aug 2025 06:00:47 +0000
Manifest this update: Sat 23 Aug 2025 06:00:47 +0000
Manifest next update: Sun 24 Aug 2025 06:00:47 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: QMxyl+l/YHqztL4R/3ma8+Y2WqUguVfBPaoga9sdC4U=)
2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e5:79:80:a9:b2:4b:9a:41:09:e7:c6:1a:c3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Aug 23 06:00:47 2025 GMT
Not After : Aug 24 06:00:47 2025 GMT
Subject: CN=58f2d24e5d725d81384fdf5d02482418d01ddb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:68:78:0c:98:b8:c8:71:2c:a0:97:23:de:
2e:f3:0c:47:80:fe:1d:e9:74:de:d5:43:dc:ff:a6:
08:cb:1d:09:a5:7b:8e:65:7b:7a:ca:43:ca:19:61:
a5:3a:7c:dd:4a:f8:a4:fa:69:5f:3f:41:ec:50:0f:
33:75:42:a3:12:5b:dc:9f:f2:d9:f0:24:0a:8f:0c:
08:0a:e0:f1:0d:e5:25:f0:d3:20:b2:d4:9f:3d:60:
09:3a:dd:8f:a7:2f:b8:0e:61:fb:db:7f:5f:64:93:
56:b5:5c:9f:67:05:38:72:9f:86:8e:24:76:33:06:
ea:f6:42:1c:22:d2:04:66:d8:4f:a1:c7:29:37:d8:
bc:e9:1c:6e:68:45:52:a7:6b:9a:f6:e3:4c:b2:0a:
7d:5f:72:3c:b3:c9:c3:bd:a2:c7:6d:f1:41:c0:cf:
9d:68:4f:8b:c7:06:51:98:26:1d:d4:a4:85:e1:a2:
62:77:67:5c:b4:02:d0:39:8a:ce:e7:f9:f5:79:ce:
5f:85:dd:20:f2:76:72:93:1d:e0:b9:8e:04:9b:62:
10:42:37:e8:3d:17:49:ac:61:f9:85:18:6a:9a:70:
88:54:1a:d4:b0:78:91:ae:ba:c1:9a:7f:82:95:7f:
19:81:be:e9:14:e1:0a:d9:9b:cb:c5:cb:42:e8:00:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F2:D2:4E:5D:72:5D:81:38:4F:DF:5D:02:48:24:18:D0:1D:DB:06
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f6:a4:f0:bc:5d:9d:97:ae:57:af:ff:f8:40:9b:b6:da:9a:
b2:69:f8:f7:93:28:e1:b9:21:a4:cd:66:cb:b4:d2:4a:9a:fa:
e5:23:85:ae:68:c0:c1:c7:dd:38:5e:6a:73:6b:04:e9:8c:9e:
2c:cc:9b:02:dd:83:5c:48:10:49:4f:05:46:e2:ba:e7:ba:aa:
7d:65:a1:ab:67:3c:22:52:49:a9:a7:2e:3c:26:77:6d:81:a9:
d2:5c:18:77:cc:fe:a7:5e:93:2a:a5:ec:57:3b:67:bc:90:02:
cb:05:46:b4:67:0b:f7:db:7e:73:c5:b0:1e:2a:c1:eb:9a:8c:
df:a0:b9:fc:ba:84:3f:59:1b:84:c1:a0:f4:ec:a3:34:19:03:
1e:42:e3:8c:60:f5:86:6a:5f:48:24:b8:cb:f9:5a:df:d5:b0:
04:68:d2:b1:bd:12:bf:13:a7:d1:d8:b9:d6:5e:0e:ec:d6:3e:
38:df:10:db:ea:34:2d:6e:99:a8:62:e2:93:5a:a6:06:28:7f:
e5:5f:3f:24:12:08:77:de:00:e4:e9:da:f4:95:2f:77:e0:aa:
06:f3:f0:fe:46:22:e5:28:53:5f:88:31:9d:9a:37:72:9e:e3:
5a:f1:08:69:6d:a5:37:c3:d2:15:09:30:7f:5a:f0:01:d4:2b:
1d:d8:8f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:20 2025 by rpki-client