Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: frF21H0xgYOx60yzAkC4PcBzINTOdatUVwG/t83WuCo=
Subject key identifier: AE:6E:F8:C8:87:EC:DC:76:99:12:16:A4:92:1C:A4:5F:13:9B:17:6C
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 0198D473C434FE0CB7CDFA46B956C24DC4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0C36
Signing time: Sat 23 Aug 2025 01:03:33 +0000
Manifest this update: Sat 23 Aug 2025 01:03:33 +0000
Manifest next update: Sun 24 Aug 2025 01:03:33 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: 6ICdTuwub9VJZ4D0WFta7aJw+CSOuCzZPQuAgV3rhnM=)
2: IakaUVIwolxABf_iFG6RX8yq8dc.roa (hash: 7jt2eahvNjy4JlonD7RGKwXoWtuGwCznkksLfkvVUZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c4:34:fe:0c:b7:cd:fa:46:b9:56:c2:4d:c4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Aug 23 01:03:33 2025 GMT
Not After : Aug 24 01:03:33 2025 GMT
Subject: CN=ae6ef8c887ecdc76991216a4921ca45f139b176c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:43:a0:9b:40:df:74:22:f4:4b:f3:6d:cd:
34:05:f3:0b:51:47:d8:0c:9d:70:98:0a:ed:00:d6:
a3:4c:78:12:5f:cf:dd:df:73:d0:d8:9c:98:89:c7:
ae:8c:21:e7:e0:a1:de:91:e6:61:9b:94:de:49:39:
ea:bb:2f:ba:05:d9:a8:75:73:8c:60:aa:bf:bb:69:
ce:72:01:da:40:6e:08:91:33:93:50:7d:8f:93:1a:
cc:39:a9:4c:3a:14:49:5e:0e:74:41:72:d5:f3:b4:
c1:f8:c3:a7:a3:8b:3c:5a:2e:be:a5:eb:ab:b2:22:
ec:ba:c5:3b:8b:f8:dc:d8:d3:be:f1:8b:13:13:a4:
18:bd:18:c0:b5:1c:2d:f8:05:a1:f2:51:9c:b1:cf:
a3:6e:12:7f:26:3d:0f:4a:b9:9b:44:1c:c6:4a:46:
45:a6:0d:19:38:a9:11:33:3b:80:88:de:0a:1b:fd:
27:86:cf:92:eb:0a:50:58:a4:2a:03:60:c1:21:e8:
c6:70:4d:bd:07:8d:22:d8:54:29:c6:52:1d:52:18:
38:92:ba:a2:27:34:76:76:bf:e5:ab:9e:f7:eb:a2:
6c:95:79:ad:45:92:d6:5a:3a:ea:42:1a:e7:47:8f:
89:41:d0:a3:9e:d9:c7:6e:52:d2:01:92:a2:b6:9b:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6E:F8:C8:87:EC:DC:76:99:12:16:A4:92:1C:A4:5F:13:9B:17:6C
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ba:4b:87:66:c0:87:8f:92:08:9a:62:51:eb:22:18:b4:e6:
b1:a1:94:2d:be:82:27:03:75:90:a1:1c:c6:9a:43:f5:d8:59:
e6:e7:09:0a:31:dc:c4:5b:2e:ab:cd:de:9e:a8:ab:67:df:1b:
98:13:81:1c:91:17:6e:cc:d0:07:39:0d:ee:23:b7:55:ec:e5:
04:16:77:e0:77:f3:51:f3:32:f0:3c:c2:89:6a:64:96:8f:77:
93:60:44:e6:af:2d:4a:55:a7:06:6a:c8:1b:a4:a2:9d:1c:0d:
b4:66:dc:b0:ad:39:63:4f:c2:74:9c:37:7b:71:72:63:ab:ec:
bf:9b:e4:21:04:04:17:24:5b:de:85:24:e3:de:11:e6:b6:fc:
0b:91:55:d5:a2:55:54:6a:20:4d:71:3d:8a:0f:39:4d:42:8a:
45:ac:f7:9b:0f:2d:e4:71:5e:2a:a9:33:8a:13:ad:a3:4d:81:
59:23:bf:e1:ab:6d:2b:4c:d9:0e:c5:f5:9c:18:f8:58:1a:7b:
61:09:8f:63:9f:2c:5f:38:bd:21:de:e7:57:f7:fc:f8:6d:7f:
f3:4a:1a:bf:2b:e2:b7:06:97:c8:9e:3d:ea:6f:36:6c:eb:9e:
62:c5:18:1f:8a:e6:99:2b:df:a6:6d:a9:b4:ca:04:ed:7c:d1:
4d:b3:d6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:07 2025 by rpki-client