Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: WyljYJRfQUmUnqtMSmWV6AaWije2USmXw+jMtUZzdoE=
Subject key identifier: EC:74:DA:2B:FE:C4:E6:A8:E7:22:8A:7B:6F:AC:C9:BD:AC:C3:FA:F1
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 0198D4DFF03533CB204B2545935AF1CDB570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0A4D
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: wIyUs3RpMEJRUMo3pO1A9lt93Gtwrb8PHIX0pDZIMO8=)
2: lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa (hash: iBeGuJYtICJBlFiRT2Vx63Td8Xc0QnYIl7/YBwzr0yk=)
3: nse16AXrwM95FOL9jR_rmw-FBUU.roa (hash: CGc2Mm01WTMfgJYYXJTw2QH6yfxtC7+nYMl9iTzeZeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f0:35:33:cb:20:4b:25:45:93:5a:f1:cd:b5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=ec74da2bfec4e6a8e7228a7b6facc9bdacc3faf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:fc:93:c6:cf:65:3a:47:bf:c9:77:37:b8:
4b:64:b0:68:d8:0c:52:c8:c0:25:d3:61:1b:a2:13:
62:71:4b:76:ff:08:51:c3:93:03:94:47:54:3a:e2:
5b:44:e4:da:55:cb:91:cf:7e:7b:22:cf:94:34:90:
10:fd:c8:e1:04:f4:d2:c6:d1:be:4e:65:0e:9f:47:
c2:ba:93:13:80:77:1c:65:9a:39:3f:1b:9c:36:5f:
fd:b2:5b:cb:e5:87:12:bd:ca:5c:54:fa:de:45:a4:
40:95:5e:4c:da:80:d1:cd:49:8a:33:d6:c9:f7:7f:
7b:e2:63:52:a0:4c:e7:30:d2:3e:ae:73:bd:ec:ee:
35:4b:ad:97:9d:36:d0:64:7b:9e:13:5e:83:ec:b1:
1e:0b:a4:c7:38:b6:88:0a:98:c8:53:9c:3b:6d:df:
2e:3e:8f:44:e1:67:15:e7:0b:66:f9:e6:d3:de:34:
18:a1:c0:1b:f6:c9:d3:03:01:b3:f7:d2:2c:ba:a5:
22:fb:09:d4:a7:16:82:e9:29:cb:1b:ba:cd:d5:ee:
2d:e1:20:94:8b:bd:79:8e:cf:8e:60:75:f0:fe:fb:
02:72:d7:4b:d2:93:fb:0b:f0:d0:ef:84:45:50:de:
5a:c8:c6:ab:63:3a:84:b8:68:c2:f6:35:df:46:a0:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:74:DA:2B:FE:C4:E6:A8:E7:22:8A:7B:6F:AC:C9:BD:AC:C3:FA:F1
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2d:4e:e1:df:24:9b:26:54:a9:bc:21:1f:af:a5:0f:49:59:
79:8b:bc:12:a7:ff:46:13:31:ce:de:66:24:a2:22:52:45:83:
3c:9d:fd:c9:f0:47:91:1d:ed:55:8e:5a:9c:be:00:e5:11:98:
27:1e:53:b8:4e:28:d8:4f:46:b3:41:4e:5d:ed:ad:fc:f5:1b:
27:6f:24:cf:a7:d3:ee:13:25:1f:e8:aa:e2:88:f6:a0:43:7a:
a1:16:01:bb:e9:9c:e5:35:75:10:3a:db:20:c1:2b:f3:45:03:
7d:b1:fa:01:e0:0d:fe:38:3f:30:18:3d:43:8d:f2:de:12:3c:
c3:c9:01:73:7d:58:f0:f9:22:32:55:13:b0:21:5a:a0:37:c4:
66:36:54:f9:55:f9:6f:55:39:87:9f:74:cc:10:f8:6e:80:46:
a7:c8:b3:c4:51:a2:71:8d:0f:76:dd:9c:f1:a3:c2:30:95:8a:
77:c5:f7:96:ce:03:93:c9:27:8f:6c:5a:fb:5b:88:b5:fb:08:
d1:56:75:a3:93:49:9e:28:56:c7:43:55:2c:10:57:b0:42:1b:
db:2d:1f:2c:39:d6:50:fa:8d:38:a5:27:61:d0:9d:5d:a1:ea:
5e:ef:08:f6:65:f5:2e:c2:c2:d5:f5:32:e2:19:33:dd:54:0e:
46:7f:b4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:53 2025 by rpki-client