Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier: hKx9aSTh/n8eP5/kW2I7qbOQsMib9KZkEL4buXDbK2A=
Subject key identifier: F7:26:E9:7E:58:B1:CC:A9:B8:F8:BB:6C:8A:A4:DB:13:D6:42:A8:00
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer: /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial: 0198D7A8F6DA3EC2035857DBEA35D2E2E578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number: 1292
Signing time: Sat 23 Aug 2025 16:00:31 +0000
Manifest this update: Sat 23 Aug 2025 16:00:31 +0000
Manifest next update: Sun 24 Aug 2025 16:00:31 +0000
Files and hashes: 1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: nTzPk33rN5sVYoCVUjwCfT+tyXpHykb29BRyjNJzViY=)
2: iA-R6MvKiO2KGX3TDBYr9y6CrrY.roa (hash: 6ESf6+qQijHxJ/aR5LxiBT1mSFdRreQchWcCwlb/jhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:f6:da:3e:c2:03:58:57:db:ea:35:d2:e2:e5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Validity
Not Before: Aug 23 16:00:31 2025 GMT
Not After : Aug 24 16:00:31 2025 GMT
Subject: CN=f726e97e58b1cca9b8f8bb6c8aa4db13d642a800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:71:33:68:ef:75:b0:35:60:1f:08:f9:de:
45:ae:ae:23:59:99:a4:cb:a6:25:b4:70:97:04:89:
a7:9b:c0:33:75:3f:fe:9e:66:ce:4e:16:ef:dc:82:
30:22:0c:af:ab:8b:b9:fd:03:c0:a7:33:16:39:0a:
57:98:68:17:17:23:38:ec:4f:82:95:df:59:39:31:
59:7e:42:68:22:b0:cf:6a:21:a4:5f:1d:be:55:5f:
67:a9:3d:3d:47:7d:d4:a8:44:54:ae:f6:63:82:66:
c0:7b:0b:b2:3b:ae:38:37:b0:32:39:6a:26:6b:4b:
99:d9:69:5c:da:d3:c5:8d:6d:95:02:42:6b:94:b2:
af:11:c5:f4:69:d1:85:11:84:d1:5b:35:c8:9b:6f:
07:c3:b9:c7:05:f9:17:6c:6b:9d:ab:c9:e7:ff:a0:
9e:a1:f5:74:8e:44:3e:2d:e5:f5:d1:5c:a7:57:9e:
2e:26:88:ed:c9:19:ad:5a:cb:5e:18:b8:20:69:50:
a9:1d:24:5e:b8:f0:9d:84:60:d6:02:d3:ab:d4:e8:
d9:34:7d:73:8d:c5:98:f7:35:54:6b:62:04:73:37:
c7:a9:17:8c:8f:1c:68:d6:d5:85:89:12:88:dd:0c:
db:7c:24:5c:96:f1:d6:85:34:a2:75:ce:53:1c:3b:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:26:E9:7E:58:B1:CC:A9:B8:F8:BB:6C:8A:A4:DB:13:D6:42:A8:00
X509v3 Authority Key Identifier:
keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8e:36:cb:68:a4:b3:5a:9c:6c:af:50:8c:59:20:4d:17:9d:
ee:b6:71:5a:ab:2e:51:d4:5d:37:3e:3d:3f:e1:b5:17:11:69:
53:5c:ea:a3:fc:0a:e9:4d:86:29:49:61:e8:a2:91:43:26:1a:
7c:46:b3:30:90:23:31:68:9f:bb:d1:70:71:98:fc:71:92:9b:
d0:6d:f6:8c:98:01:a9:66:db:8c:a3:92:d2:66:6b:7c:61:7d:
79:a0:82:02:3c:e5:0a:6f:68:49:ce:56:88:f1:49:d2:86:33:
b4:2b:e2:ba:fb:b6:b7:30:06:34:38:ed:e0:27:bb:41:08:4d:
d3:c2:50:7f:85:86:0b:8e:e6:17:4a:77:e6:0d:65:2e:07:9e:
7f:db:72:44:71:fd:80:84:27:fc:57:14:23:fe:14:8f:21:de:
b4:2d:0a:a3:71:06:a2:95:5f:df:79:a7:52:25:27:93:0d:4b:
3f:df:50:39:0b:f0:fc:fd:b9:64:6a:99:47:2b:33:d3:bb:87:
83:95:db:f3:47:f6:11:2d:97:73:fb:b3:11:03:4f:c8:fd:8a:
4c:1f:04:de:8d:f4:c0:49:ee:9d:bc:b3:8a:ab:8f:e7:48:26:
c5:1b:d9:81:fc:a4:43:51:97:f0:c8:07:bb:51:92:4e:47:be:
90:1a:5f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:58 2025 by rpki-client