Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: xzgNAVTOot9CSmHJi3YdgdMacb8Fbk2X2FfWmwiWu8Y=
Subject key identifier: CE:86:A1:2C:D3:86:E2:0F:08:CB:53:0C:04:12:A9:5B:A1:22:E5:E3
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 0198D660154975667806D3F94B4D439250DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0A61
Signing time: Sat 23 Aug 2025 10:01:17 +0000
Manifest this update: Sat 23 Aug 2025 10:01:17 +0000
Manifest next update: Sun 24 Aug 2025 10:01:17 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: 9BUXnyancvQhjYwK5mqljVxq1zlfvPZkicM7b14IL84=)
2: Ve2RrvNi_87VDfl21Lq8fKe-sYc.roa (hash: Bwg7wRCqbsHk5Pn4Ah5pnRiyg8rpwcrSFyOQ2YGllyY=)
3: nc0QnNEGuF1kLi9w3egLsBhEL6Y.roa (hash: KWBWDWBG7Sj1CyJ1paoXUYeG29P/pnqgE+4DRW4DIYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:15:49:75:66:78:06:d3:f9:4b:4d:43:92:50:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Aug 23 10:01:17 2025 GMT
Not After : Aug 24 10:01:17 2025 GMT
Subject: CN=ce86a12cd386e20f08cb530c0412a95ba122e5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6e:a8:7f:3d:b7:fc:ac:a3:b4:c4:98:02:82:
b3:9b:26:78:22:fa:b8:64:5e:ba:e6:23:13:44:68:
a8:7b:80:1c:5e:18:30:ca:0e:44:36:02:20:40:c0:
5c:34:74:bd:cb:89:05:c1:35:a6:17:db:c6:0c:09:
eb:42:e3:06:50:04:85:c9:51:66:1c:e5:e4:f4:10:
0e:28:ae:c6:98:b1:f8:25:a4:6b:31:68:ce:66:0c:
d7:6a:8b:31:3b:72:08:a0:ae:d7:65:a2:f4:20:9a:
48:01:5b:85:ed:12:c4:94:c2:99:fb:bd:8c:fa:26:
04:63:a8:a9:6c:e7:70:c3:d1:28:b0:a6:95:b7:87:
90:2f:4b:9e:9a:46:35:64:9d:e5:48:49:f3:cf:c4:
fc:21:5d:67:5a:df:81:58:17:94:be:8d:6c:0a:7c:
8a:fc:50:43:35:c9:98:ed:01:9e:23:52:37:38:ed:
f8:27:e5:94:09:0a:d8:fc:72:bf:15:29:f5:c9:59:
f5:8c:bd:37:31:3e:10:87:fa:85:c3:f1:b9:4c:27:
27:fe:af:10:df:19:59:3e:8c:53:0b:c5:5f:7d:f6:
a8:5e:c1:b2:d1:15:ef:5b:0a:f5:7a:42:6a:12:f3:
9f:5b:11:30:a2:4a:15:02:bf:ca:99:70:61:0e:07:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:86:A1:2C:D3:86:E2:0F:08:CB:53:0C:04:12:A9:5B:A1:22:E5:E3
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0b:4e:5a:a6:9f:39:ec:e2:ee:b0:5d:a0:fa:1c:68:e0:73:
65:17:47:50:3f:fa:fe:c7:ff:53:60:33:ab:be:55:15:24:de:
2f:fd:51:15:b8:0a:6f:53:f5:9c:66:fb:9a:30:f4:6d:8e:9a:
a2:03:a2:5f:b9:47:8d:59:91:79:cf:c0:b2:af:c9:90:9f:00:
f6:8c:43:f1:4e:a2:ba:e1:83:14:d1:e7:2d:c1:d2:37:5b:f1:
70:60:5a:27:51:50:34:21:42:82:20:9d:1a:6c:51:b9:1a:63:
83:d4:85:d5:f2:19:c7:73:c3:19:0a:c2:a8:a4:ca:80:74:0f:
10:13:19:92:1b:c2:cc:ec:3b:47:2c:0f:55:2c:13:e7:ab:4e:
81:7f:13:af:2f:13:01:99:3b:d5:98:8d:6c:f8:0c:9a:68:58:
89:72:8e:ff:a2:ff:64:02:5a:6c:37:a5:ab:4b:e8:89:0a:8b:
16:a9:d7:17:92:98:8f:4d:00:25:50:09:d4:76:24:d3:76:9a:
a1:73:95:0b:eb:88:59:0c:09:6f:47:65:92:fb:d3:16:10:3b:
09:3b:99:c7:39:06:c7:11:71:84:40:c4:be:a8:5e:6c:d6:71:
b1:3e:82:d2:75:a0:27:cf:cd:4d:16:22:54:46:00:4f:ed:8e:
6a:7e:a2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:15 2025 by rpki-client