Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
File: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft (raw, json)
Hash identifier: Fqn3B/RLNuVVcMs4zM+oLLSP6BOLVlbOaXhgSRFObQs=
Subject key identifier: 45:0E:09:CA:03:6A:62:42:F0:FC:66:3C:2F:B9:AA:B7:4F:7A:39:9E
Authority key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
Certificate issuer: /CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Certificate serial: 0198D7A97AD0E0DE19800B70A3ACBFF9A9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 16:01:04 +0000
Manifest this update: Sat 23 Aug 2025 16:01:04 +0000
Manifest next update: Sun 24 Aug 2025 16:01:04 +0000
Files and hashes: 1: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl (hash: 9oPyrXEFyfJRq9JREtfSR+G+x8X3N0fnqJZs6FfAG4I=)
2: OCcJDhB4OQ1X-MIeEHbwYqPSbys.roa (hash: bYb4Alf329H7/hgxf3+yXtwxwALKiQ1xJi7nvHZupTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:7a:d0:e0:de:19:80:0b:70:a3:ac:bf:f9:a9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Validity
Not Before: Aug 23 16:01:04 2025 GMT
Not After : Aug 24 16:01:04 2025 GMT
Subject: CN=450e09ca036a6242f0fc663c2fb9aab74f7a399e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:1d:b5:e5:12:ca:48:6e:c5:68:34:58:6a:
30:9a:1e:8e:f7:02:a4:9d:3d:78:24:70:36:ff:79:
83:48:19:5f:86:ce:c1:77:1f:09:78:f3:5a:72:0b:
28:c7:ba:b9:d8:ac:da:93:29:b7:c7:24:5f:a0:76:
5e:55:b5:15:cc:07:0e:48:63:93:9e:a0:a9:39:d6:
4f:40:49:bc:2e:1e:cd:db:b9:50:95:26:84:4d:76:
c0:bf:2f:61:17:8d:4a:d5:08:3e:ec:24:65:5a:61:
f0:92:ea:2f:04:fc:6a:55:c4:c0:7c:0c:0c:87:17:
57:5f:fe:03:8d:fe:78:5d:2f:29:9b:bd:6f:0c:3b:
7d:ad:e2:74:3f:0e:32:d0:0f:d2:8c:82:d1:59:dc:
6d:9c:3d:d2:95:d4:6f:9d:09:1f:07:32:6d:1e:69:
42:05:fb:1c:ec:e6:21:63:ed:09:66:de:69:f6:6c:
51:03:88:5b:0a:8c:34:39:c4:06:c0:7e:ff:33:40:
d7:2e:74:5c:b0:fc:8f:a8:d3:4d:7b:40:c3:6f:49:
50:1b:d0:37:78:ea:d7:6b:51:0d:fa:81:9d:c1:26:
97:c5:ce:4f:04:bb:78:af:e4:c4:52:c9:6d:77:7a:
0d:37:d7:8d:be:60:25:a1:ac:f5:cd:88:bf:29:71:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0E:09:CA:03:6A:62:42:F0:FC:66:3C:2F:B9:AA:B7:4F:7A:39:9E
X509v3 Authority Key Identifier:
keyid:D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4f:49:4a:b0:aa:c7:19:d2:56:4c:ef:33:64:f6:17:ac:8f:
51:03:c5:dc:82:de:82:49:73:e4:e9:4e:db:73:43:65:63:f8:
97:1a:0e:ce:12:11:fe:11:38:6e:80:42:11:b4:8b:f1:e9:2b:
07:ba:19:7c:0b:cb:cf:a2:48:0d:56:c8:0a:b5:9a:57:fb:e0:
2f:9b:17:4e:ca:82:5c:88:5f:ca:30:33:e5:8f:d7:ab:20:37:
de:29:af:d3:2d:b6:bc:c2:90:8d:5f:7d:62:03:90:9e:79:26:
4e:04:6e:c9:5b:03:4b:db:dd:2e:54:f0:01:61:51:bb:08:14:
0a:47:f5:39:ff:30:94:16:b3:dc:d1:95:6c:d6:19:ad:02:00:
bd:8b:2f:1b:3c:a0:97:6c:b0:9d:79:d0:b0:26:1b:cb:bd:da:
84:2a:85:68:f0:12:b5:e8:b5:14:4a:31:49:4b:88:1a:dc:9f:
39:c0:9d:7c:12:d3:d1:88:5e:3c:38:8a:26:94:7b:b3:c5:87:
81:84:93:1b:8a:06:9e:34:39:ba:43:92:40:5a:69:f5:68:da:
a6:34:6a:e5:93:83:f5:36:a4:7b:7c:f8:86:29:1a:63:ea:59:
41:a5:e1:07:bf:7a:30:03:5c:2d:4f:eb:bf:40:15:72:2f:fb:
90:5d:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:30 2025 by rpki-client