Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier: jTURgnfJQau6QCw7w1xrgFCP28ZL7OKUyz5iy5Ga8As=
Subject key identifier: D3:B4:65:5E:F7:E9:18:DB:1D:38:01:6B:9C:BE:2F:43:B7:39:A6:A8
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer: /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial: 0198D69805FEF5099C662FE6E31E5A4EDB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number: 0616
Signing time: Sat 23 Aug 2025 11:02:23 +0000
Manifest this update: Sat 23 Aug 2025 11:02:23 +0000
Manifest next update: Sun 24 Aug 2025 11:02:23 +0000
Files and hashes: 1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: KMNpORisTxXI5fzStYlW+xPWyPTBurTb5r07nq3ZyG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:05:fe:f5:09:9c:66:2f:e6:e3:1e:5a:4e:db:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Validity
Not Before: Aug 23 11:02:23 2025 GMT
Not After : Aug 24 11:02:23 2025 GMT
Subject: CN=d3b4655ef7e918db1d38016b9cbe2f43b739a6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:ae:f4:85:e0:fb:70:55:12:46:e0:af:6e:
3c:f8:2e:c4:e1:7b:e7:de:3c:ea:bf:f0:aa:3a:56:
10:ee:bb:09:3c:c5:b5:5b:24:e0:5c:93:ce:3d:5f:
ac:cf:c2:81:78:d3:4d:1f:de:3d:5a:ca:96:06:50:
ed:b6:8d:f7:53:3e:73:a4:b4:a3:a7:8b:c0:43:8f:
10:db:04:a2:5f:21:17:5a:ab:fa:43:df:4c:bd:ba:
6b:71:33:63:8a:a7:b7:99:eb:5d:0a:f1:54:c4:4d:
21:af:35:b6:d9:72:15:b8:55:6e:51:d1:5a:ba:19:
dc:e7:9d:32:ca:b4:73:1a:52:df:1b:50:e1:b2:13:
75:2a:91:a2:44:4e:ca:aa:1a:b6:a0:70:8b:f5:50:
3b:10:9e:20:6f:f5:48:b3:01:ce:76:00:e9:8e:bd:
17:51:c7:2a:85:a1:29:77:63:f6:cb:4c:75:29:18:
e2:dd:f9:4b:32:79:cc:d2:b0:ac:00:5c:d2:fe:24:
0b:ba:0f:11:57:ec:ab:f2:3e:90:04:3a:b4:df:34:
e4:d4:ea:14:77:22:89:f2:94:a5:67:1c:67:e7:03:
3d:33:b3:e5:6f:4a:4b:cb:40:2d:71:32:6e:79:84:
e2:24:cf:42:0e:d7:b9:1a:16:0b:4e:9a:51:59:52:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B4:65:5E:F7:E9:18:DB:1D:38:01:6B:9C:BE:2F:43:B7:39:A6:A8
X509v3 Authority Key Identifier:
keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1a:8c:e7:a8:fb:f1:90:33:47:ae:80:1e:99:8a:94:e3:73:
12:2d:3e:0d:61:24:5f:58:ae:22:52:8b:05:49:4d:45:06:11:
c3:74:60:6d:18:bf:1c:f7:e3:f4:3d:9c:8d:49:c5:e9:20:58:
f4:23:6b:1f:e3:e9:a2:3f:0a:b5:e1:2b:1b:a3:2c:48:e0:ca:
d9:ca:27:27:89:94:ff:78:02:73:da:3d:12:49:c9:24:2b:46:
c5:0e:68:fb:54:56:40:76:e1:b6:c8:4e:ae:63:ce:09:36:94:
c7:01:85:9d:e4:59:92:6e:0f:91:33:aa:40:c0:4e:a5:bd:02:
43:cc:54:0c:4e:aa:c7:93:08:df:53:69:4b:87:0e:98:2a:3d:
e1:6d:71:45:c4:d6:7e:3f:ff:00:d5:bb:ac:00:0a:80:3e:b2:
4e:53:14:6b:d1:9a:19:71:5f:8d:cc:30:c0:ed:86:d6:86:61:
1f:22:6f:a7:9d:aa:65:b8:37:7e:75:3e:3b:ae:b7:ae:d8:76:
99:09:6f:9a:d7:67:cb:37:4a:e2:73:b9:b3:c1:ac:d9:8a:7c:
f5:b1:b8:24:4c:9e:35:f5:45:09:67:3c:1d:62:73:18:eb:25:
d4:e1:a5:50:e1:97:e3:57:1b:7b:36:85:9e:8e:cd:ba:52:60:
e9:e0:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:20 2025 by rpki-client