Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File: 0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier: uIaF24xA3ePiDsLOtE67SfIFxjQpGu38ZIbeVJ+NNHE=
Subject key identifier: 8D:22:35:C2:6B:F7:8B:A9:F5:9A:E6:28:16:FC:BB:C2:C8:F3:1D:49
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial: 0198D65FB4E3AB9380DF2F1CDF34E81609E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number: 04E0
Signing time: Sat 23 Aug 2025 10:00:53 +0000
Manifest this update: Sat 23 Aug 2025 10:00:53 +0000
Manifest next update: Sun 24 Aug 2025 10:00:53 +0000
Files and hashes: 1: 00FQiMdjUQle4zFwKcr67i8rD5o.roa (hash: vAwK94aBbQ1WLXSLlow/JuiTreizX+JgqV5lHzwa2Js=)
2: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: KlpErNcmBmm2cbpYsytt5GUop0vnxyObL4Po+d5tJh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b4:e3:ab:93:80:df:2f:1c:df:34:e8:16:09:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Validity
Not Before: Aug 23 10:00:53 2025 GMT
Not After : Aug 24 10:00:53 2025 GMT
Subject: CN=8d2235c26bf78ba9f59ae62816fcbbc2c8f31d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:4b:09:bb:71:87:fd:9e:9f:95:a1:c8:02:
db:b1:29:90:89:86:18:d4:34:81:61:17:bb:a2:f4:
0e:b7:1f:5f:5b:b9:e0:04:c9:1f:6c:7a:93:d1:aa:
3f:64:02:c2:b9:0f:a9:59:26:d4:be:c4:46:bd:2c:
e3:02:1a:fc:5c:f2:3f:4f:ee:a4:75:e2:10:be:6b:
6c:bd:32:e3:b6:5e:b9:c3:6a:6e:fc:ac:4b:40:f6:
78:d2:fb:e8:3f:e6:5e:9a:16:c0:b6:e8:a5:53:61:
95:ea:85:05:4a:78:9c:cc:f9:65:8a:9d:a8:84:be:
65:78:a3:ed:06:49:06:80:3f:e1:09:f9:be:e2:e5:
36:b5:04:ed:36:de:b4:d4:13:2b:c4:a7:46:c7:23:
87:f2:85:7b:9c:e7:d3:97:09:a3:af:07:60:45:44:
71:e7:f0:45:bb:59:26:97:40:ff:dc:36:7d:8f:22:
0d:4a:a2:d4:78:26:a9:1e:1b:2c:8f:51:cd:56:56:
4e:c7:5c:02:05:da:3b:8d:af:1f:10:a1:c9:4f:86:
8a:8d:29:99:56:31:e5:95:57:95:d0:4d:67:dc:85:
9a:f9:ad:56:ce:52:52:f1:d6:e5:98:55:6b:17:3c:
31:b6:f6:9f:da:58:a9:9d:fa:7f:9b:6c:36:d9:d9:
68:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:22:35:C2:6B:F7:8B:A9:F5:9A:E6:28:16:FC:BB:C2:C8:F3:1D:49
X509v3 Authority Key Identifier:
keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:af:61:15:25:bf:ad:e4:bf:78:cf:15:13:a0:ff:93:35:77:
07:1d:ed:58:97:07:24:8e:c1:7f:77:ac:f7:c3:41:e2:64:6c:
d0:93:e3:9e:3e:9d:6f:a1:8a:d8:98:2d:92:bf:b2:38:7b:90:
9c:0e:b5:c6:ed:48:51:b7:67:9e:56:ab:11:f6:f6:1e:33:58:
15:e1:39:7c:ed:4c:8c:5a:c8:32:04:69:47:20:a6:87:59:c1:
00:64:f6:32:df:d3:a7:a4:d0:f8:c2:6f:79:34:5e:9d:fd:79:
d4:fd:c0:6a:9f:1f:b2:47:94:61:7d:6f:6c:14:d8:ec:bb:91:
15:c9:25:08:b1:5f:3a:5a:37:e6:59:d1:10:ec:12:b5:c0:01:
01:d3:35:58:b4:ec:5f:6c:32:34:de:dc:82:a5:3e:be:ea:60:
5f:77:11:22:42:8b:6c:e6:11:9e:4f:cd:c1:f8:6a:02:47:66:
dd:fd:e9:3f:f5:a5:99:3e:6e:7c:ff:c0:c0:fb:35:0f:7d:1c:
6f:4d:ac:78:80:b7:9a:23:c1:74:8d:4d:be:8d:0c:52:5b:d4:
09:c5:8b:03:92:97:57:97:4d:88:3d:17:5a:9c:67:5a:af:91:
da:76:6d:03:3a:4c:ea:6e:08:69:75:27:db:e2:f8:f2:c4:ee:
d3:68:73:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:12 2025 by rpki-client