Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: uXCwFaNnYVHvUQAbtaoesTisFNFYvqbpra1B59zGrvY=
Subject key identifier: 3A:E8:2C:38:67:43:69:61:48:58:AE:22:6E:1C:33:0F:13:4C:C3:A7
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 0198D66144EF243E4AB375DD9A1D286987DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 0FBB
Signing time: Sat 23 Aug 2025 10:02:35 +0000
Manifest this update: Sat 23 Aug 2025 10:02:35 +0000
Manifest next update: Sun 24 Aug 2025 10:02:35 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: aYb6J6vLzqdv3yTBXlcl0VThI4lwDGWYFov6MqZGuAk=)
2: Ns-TL5URBIXkWjSrsIX0f-jA8r8.roa (hash: rkMxs94A3zqfZql4p2TlDjcRtvwJLskmzewtRu09cI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:44:ef:24:3e:4a:b3:75:dd:9a:1d:28:69:87:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Aug 23 10:02:35 2025 GMT
Not After : Aug 24 10:02:35 2025 GMT
Subject: CN=3ae82c38674369614858ae226e1c330f134cc3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:1c:60:4b:6c:11:28:58:72:17:85:46:40:
c6:2f:90:78:8f:b3:36:29:95:33:ed:0a:9e:b5:e5:
ee:9d:a9:2e:6e:73:50:a0:57:9f:fa:24:64:d8:12:
33:45:63:11:8a:60:08:65:ac:25:43:51:c9:51:ba:
92:75:9d:b7:c3:4d:4c:bb:27:da:56:84:08:54:61:
07:0c:17:20:70:ee:95:56:62:76:ba:a9:0e:db:84:
e7:15:49:92:42:45:31:ff:6c:e2:07:5c:6d:15:44:
7a:85:08:0e:fb:3f:d9:f8:a5:00:65:ae:37:ae:73:
f5:46:18:f5:9e:04:f6:d6:da:c6:b7:ca:e9:34:d2:
cc:4e:7c:f2:bb:c6:8a:d3:7c:8a:e9:f4:64:78:9b:
b2:84:b8:71:ce:27:eb:c3:2f:d7:0e:82:7a:27:30:
21:62:ea:b4:49:e0:59:56:80:67:3d:0d:ae:92:c6:
ad:3a:d9:9b:e5:de:ae:4c:21:dd:6f:40:19:05:76:
71:55:9e:5a:3f:54:0a:a6:d5:1b:4c:12:1f:d3:ea:
44:de:8a:d6:d5:a6:fb:47:db:cd:e7:81:52:f9:09:
93:cb:5a:7f:b3:f5:69:b6:e1:eb:c5:74:81:26:75:
df:f1:2d:11:b2:48:d0:f1:99:90:ee:24:bc:ad:6c:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:2C:38:67:43:69:61:48:58:AE:22:6E:1C:33:0F:13:4C:C3:A7
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c3:90:20:0f:31:01:d0:d6:7e:03:f4:2d:3b:39:5f:58:23:
2f:4b:41:34:4d:a1:a4:f9:63:b8:4b:14:33:a5:04:80:15:17:
4e:c5:66:ea:01:3d:64:86:e4:58:56:ce:5a:2d:8d:77:c7:19:
9f:19:ad:b8:6b:4c:89:7f:37:1f:66:12:69:56:05:b8:1c:9a:
8f:61:22:be:83:f7:ac:57:62:05:15:1f:7d:fb:09:11:60:d5:
7d:ce:7a:49:bd:ce:c5:e2:13:f0:1f:7d:e0:68:4b:26:f0:56:
cf:42:cd:cd:aa:da:f9:1e:19:fc:81:66:51:36:1a:f1:88:70:
d6:d2:e1:cf:f3:01:be:02:fd:c4:53:5a:ea:85:2a:b2:cb:d4:
a6:01:b2:06:d0:ab:59:68:d0:96:92:34:ed:c6:4b:01:10:69:
94:ac:b4:71:d8:86:76:53:c3:08:e7:e2:b8:bd:80:4d:12:8f:
26:cb:54:f3:13:2d:87:f1:42:80:ab:30:cd:93:49:ed:e6:9e:
dd:36:fb:5e:81:73:4b:dc:da:c9:f4:52:96:68:48:3c:37:22:
ca:60:bf:07:70:7a:c9:65:ee:0f:ca:d0:b4:39:44:81:1d:93:
75:66:6e:39:28:c2:e7:e0:3c:7d:3e:11:b5:7a:71:f9:87:d7:
53:0f:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:18 2025 by rpki-client