
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
File: 0dI-JBGcupM36DRmSFv7EGsuJLY.mft (raw, json)
Hash identifier: WH7JefmdViD8rYnEQA+3qSfiNo0UApj1j3TGA/VdyfE=
Subject key identifier: 96:A0:19:7B:4E:EB:AB:E3:D1:12:61:05:C5:78:35:6A:F9:8A:CA:7E
Authority key identifier: D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6
Certificate issuer: /CN=d1d23e24119cba9337e83466485bfb106b2e24b6
Certificate serial: 0198D70614FBE541A6EE7600CDCDD5795E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
Manifest number: 92
Signing time: Sat 23 Aug 2025 13:02:36 +0000
Manifest this update: Sat 23 Aug 2025 13:02:36 +0000
Manifest next update: Sun 24 Aug 2025 13:02:36 +0000
Files and hashes: 1: 0dI-JBGcupM36DRmSFv7EGsuJLY.crl (hash: IEV0Lvy06I71JJwG6JzA500Qm5mAqZ2djVRm9KgQjOE=)
2: M-IfQdJ5pbgcbSVbmMmO8aaPrAY.roa (hash: XwGRnAxf2Tdx5V01T06WDZvLLVmv2uRnErY5moi+5Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:14:fb:e5:41:a6:ee:76:00:cd:cd:d5:79:5e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d23e24119cba9337e83466485bfb106b2e24b6
Validity
Not Before: Aug 23 13:02:36 2025 GMT
Not After : Aug 24 13:02:36 2025 GMT
Subject: CN=96a0197b4eebabe3d1126105c578356af98aca7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:23:a3:88:34:3b:b0:c1:e7:3a:5c:75:e9:b3:
fc:5b:e8:1c:2b:0d:55:09:c9:46:c4:eb:4e:31:e4:
cb:c1:71:39:84:06:95:eb:22:52:72:b1:7b:d6:1e:
e6:79:ac:4b:0d:ad:49:e2:50:75:d1:70:5f:9c:8e:
1f:02:a1:c2:05:c2:28:77:4c:45:3f:70:15:05:fc:
af:f4:c4:d1:47:e9:ac:12:1e:cf:e4:1e:40:4a:d1:
b5:7a:46:a2:06:de:da:1d:71:bd:11:54:4b:ca:17:
9a:59:e5:39:f4:73:5e:ba:30:20:72:bf:f3:10:a7:
99:76:c1:f5:3b:ca:68:dd:7b:57:c1:ef:50:c8:3c:
97:3c:34:23:c9:69:61:8a:e5:11:64:a3:bb:cc:50:
5b:1a:4b:9a:08:49:d4:a0:0c:ac:57:bb:c4:55:b7:
eb:e4:12:62:9b:a0:24:2a:be:7c:e7:5d:c5:90:d7:
cd:77:91:5d:d0:93:34:6e:0f:ee:80:75:4c:28:1e:
a5:ae:93:b4:22:f3:f8:40:c1:7e:1d:e6:e5:59:d2:
b7:3e:d0:b9:73:f8:00:b8:a1:45:30:07:ae:4a:07:
c6:be:53:78:4f:9a:e3:3e:7c:93:2b:04:74:65:8a:
46:20:dc:e3:88:7d:cd:62:7b:4b:f4:4a:bb:ba:c8:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A0:19:7B:4E:EB:AB:E3:D1:12:61:05:C5:78:35:6A:F9:8A:CA:7E
X509v3 Authority Key Identifier:
keyid:D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:e2:6a:3c:2a:9b:8e:28:97:47:4b:0c:42:e1:a2:cc:4a:
30:1f:4c:54:03:1d:c9:ac:fb:74:13:ae:1d:5b:de:23:33:4a:
a8:10:c7:ad:6f:91:3e:1d:f5:7b:d6:f0:6e:c9:18:c8:11:dd:
59:19:5c:01:f0:3b:27:12:20:b0:f0:a5:1e:c7:9e:50:66:11:
53:19:99:47:dd:f1:29:d8:c3:81:be:ec:7d:41:97:43:57:d8:
40:69:a9:48:cd:7b:e8:ec:c2:21:dd:33:c0:64:22:da:05:44:
b4:47:91:77:5c:e0:0a:06:54:f9:7f:ab:c0:9b:4b:69:3f:ea:
3a:d3:e5:ae:13:3c:4f:88:7b:b8:e3:cf:30:87:94:39:e2:fb:
1f:de:5b:e3:4d:89:78:4a:2b:0a:72:a9:1b:8a:92:e6:ff:55:
23:af:eb:d2:61:33:a7:18:eb:73:5f:da:75:ec:01:7b:1e:a0:
09:86:d9:00:ac:08:13:0f:35:40:b6:2e:31:43:05:61:90:53:
b1:e0:26:fc:ad:b0:a9:c0:66:c2:11:75:e9:2c:68:9c:22:c0:
87:6a:45:34:a9:44:5c:e8:ec:f7:26:cb:fe:85:db:f9:ef:d5:
d4:c5:2a:78:b4:1e:d7:95:39:97:d7:c4:b8:f7:74:e5:e7:4c:
3d:cb:63:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:58 2025 by rpki-client