Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: wT9E3zzkum5y9CAy8HeldlcvwaaOfIxiV8RlgSmJY2c=
Subject key identifier: F2:A6:1C:39:D5:07:7E:C2:20:10:66:26:36:A8:2A:BE:0B:D1:7F:18
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 0198D7A8912307711DB3C065F0C32627CABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 0305
Signing time: Sat 23 Aug 2025 16:00:05 +0000
Manifest this update: Sat 23 Aug 2025 16:00:05 +0000
Manifest next update: Sun 24 Aug 2025 16:00:05 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: 1LC602YjYrGl9B8zbTFsGAByaafCGG+PeXi3vUSf5VM=)
2: GqXg2NC5IUxRI1mWcJNsyZxesng.roa (hash: wIFPJcYLl1DLySOyYumJerZ6TcbUU8g29XL5Yzwhz2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:91:23:07:71:1d:b3:c0:65:f0:c3:26:27:ca:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Aug 23 16:00:05 2025 GMT
Not After : Aug 24 16:00:05 2025 GMT
Subject: CN=f2a61c39d5077ec22010662636a82abe0bd17f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:d0:ff:31:e7:66:ee:71:34:e2:b1:95:35:
3d:c3:dd:82:96:80:20:2f:d9:3d:4d:49:8f:be:72:
3f:a4:48:48:c8:1a:af:d3:67:38:fd:aa:01:a0:af:
46:50:2d:2e:4b:6a:80:e7:41:40:75:4b:1a:47:63:
96:11:aa:24:5e:af:75:19:cd:aa:0d:9c:17:f1:46:
2f:73:ad:35:a0:e4:83:d2:5b:66:b3:fc:ec:ee:41:
d6:29:12:fa:13:90:6a:78:c2:8e:cf:d5:08:d1:cf:
43:98:73:eb:3c:d2:dd:97:7b:02:37:66:4f:ab:ce:
9d:0e:4d:dc:de:6c:cf:7f:4e:ad:d4:82:64:31:bf:
e1:f4:eb:b8:da:eb:5c:21:26:e0:73:02:b0:0e:de:
92:e5:36:2e:94:cf:d7:c2:22:61:41:d7:62:64:48:
cf:ef:e5:09:25:e9:5b:68:12:1e:92:c8:83:9d:56:
ee:fd:7c:28:7f:a1:f6:aa:5b:da:55:cf:d7:d6:8b:
b9:05:d8:c8:ed:22:88:7d:dc:63:82:50:6e:32:7f:
9e:cb:66:1a:d7:0f:44:23:e3:c5:65:bc:84:69:f4:
cc:f6:49:9d:42:e6:b1:0c:08:2f:5b:80:9b:d7:1c:
c5:ee:a5:a9:46:c0:d0:06:d3:91:37:e6:b6:78:68:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A6:1C:39:D5:07:7E:C2:20:10:66:26:36:A8:2A:BE:0B:D1:7F:18
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:96:86:2e:c8:42:57:58:fc:87:0b:bd:b1:b1:59:0c:84:5c:
8f:3b:63:6c:9c:56:4b:4e:b9:e4:4d:c4:3d:84:ef:e7:c8:11:
d5:0f:54:e5:52:16:eb:17:6a:e8:15:09:d7:97:0b:64:f8:2f:
8d:b6:8f:d0:44:f6:1d:10:f0:15:45:5c:b7:13:d2:b9:9e:0f:
e9:79:fe:2b:ee:43:8b:24:74:21:d1:14:0f:6e:14:0d:3e:07:
dc:6e:91:1c:34:0f:c6:f1:db:d6:00:70:ab:f1:8e:22:42:58:
21:ec:9e:8b:5d:f9:1c:fa:7f:67:f5:75:41:6b:6e:64:24:92:
6f:af:0d:b0:b8:fe:89:72:35:dc:76:9f:36:67:d7:bf:9e:83:
96:3e:88:a9:5e:1c:5e:9f:d0:58:1d:28:00:4d:25:93:50:7f:
4e:49:8e:74:7b:06:65:35:68:e3:29:bb:69:3a:0e:26:ab:41:
f6:83:39:a6:da:13:38:7d:dc:eb:27:59:a9:5f:bd:01:b5:4f:
c2:c1:bd:76:8b:5c:9c:0b:21:54:03:57:e8:86:3f:01:74:b6:
5a:53:55:cb:82:47:48:d6:8d:97:27:64:51:1e:9f:30:21:33:
20:b8:1f:96:cc:70:09:fe:de:a3:79:62:fc:2e:a2:2f:9a:8a:
9f:0c:e0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:27:38 2025 by rpki-client