Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
File: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft (raw, json)
Hash identifier: TnAcfVNUjVr3BSYfWFIVQwf/r7XycqOYPm+m3P2Zd+8=
Subject key identifier: B0:DA:BC:CB:7F:25:F9:E2:A4:BD:76:6E:65:9D:A9:7C:0A:09:BA:2F
Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
Certificate issuer: /CN=d09da99a73ba7202418f73718932dc8d7c153e32
Certificate serial: 0198D73B8BFB1F5A35640EA34633196F9FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 14:01:00 +0000
Manifest this update: Sat 23 Aug 2025 14:01:00 +0000
Manifest next update: Sun 24 Aug 2025 14:01:00 +0000
Files and hashes: 1: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl (hash: Xrn26mjSmI6vs+mtEJvrM/6EBhh7mlJ66w0wnk5dfkE=)
2: nJUcoCNc07cyfYEUlMwbz1g_DaE.roa (hash: Ib/IQqjAiE9xz41/z9I1UMYPE1ywAN0ig2dufXZbgBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:8b:fb:1f:5a:35:64:0e:a3:46:33:19:6f:9f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32
Validity
Not Before: Aug 23 14:01:00 2025 GMT
Not After : Aug 24 14:01:00 2025 GMT
Subject: CN=b0dabccb7f25f9e2a4bd766e659da97c0a09ba2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:1f:30:06:2e:48:8f:28:6f:ec:74:e8:fc:
c7:06:fd:28:88:53:27:ad:c1:e9:28:b0:3d:4c:05:
3d:1f:8f:f9:d3:12:7d:bb:3a:88:89:16:a9:73:23:
98:20:51:03:03:0d:1a:65:b9:a5:e6:d8:da:bc:2a:
3d:a2:d1:a4:65:9b:28:5f:b0:8f:18:58:47:14:dd:
1e:81:b4:a8:2c:d3:51:4f:81:61:0f:e9:88:40:fd:
b4:c6:ac:51:e9:fd:3e:7c:1e:1d:a0:7e:10:c4:58:
bd:26:ef:f1:7a:aa:04:f5:b2:38:b6:e4:3b:ee:7c:
82:6c:22:a2:dd:40:6c:95:96:20:f2:fc:b1:c4:2c:
32:1e:66:c9:b6:cc:ee:42:88:8e:28:a3:e2:e9:64:
bf:e7:d0:67:bb:dd:e7:ce:13:3d:76:27:cf:87:64:
c4:02:34:f4:53:55:37:1e:d8:eb:1e:eb:0e:71:ab:
f4:a4:4e:f7:e6:12:60:79:53:48:69:48:5a:fb:83:
52:20:cc:7d:f4:06:f3:9f:9e:4b:e9:d8:77:53:a6:
fc:fd:f5:f8:75:de:53:75:47:72:84:f8:13:39:de:
9a:34:4e:77:00:98:f9:13:b0:d3:b3:b8:8f:45:3c:
f5:54:14:1c:e2:82:ad:bf:04:54:05:75:c5:54:ba:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DA:BC:CB:7F:25:F9:E2:A4:BD:76:6E:65:9D:A9:7C:0A:09:BA:2F
X509v3 Authority Key Identifier:
keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b3:b1:8a:cb:0a:64:84:e9:24:1f:14:f0:41:2f:28:d7:b1:
fe:a4:04:91:e8:2b:fd:5e:f7:f7:19:8a:f1:01:68:bf:28:11:
a7:9d:f0:aa:d3:54:da:0f:b8:91:cf:e5:22:1e:bf:22:d5:39:
9d:ce:5e:b8:34:88:d6:7b:f0:77:b9:0a:94:cd:de:54:0b:00:
c9:87:60:16:ea:4e:66:13:65:ad:69:02:54:d2:38:ad:24:47:
a6:d1:b4:72:a8:9c:a4:2d:bb:8a:28:58:b7:d6:9b:ea:55:0d:
47:48:14:20:b3:0e:03:48:1b:08:67:bb:83:81:9b:c1:ce:b7:
dd:a7:c8:54:cf:f5:9b:d8:8b:b8:bd:22:4c:f1:a1:8b:48:57:
93:fc:19:0f:76:eb:dd:d0:25:76:7d:07:13:c1:15:6b:ba:01:
f0:d7:25:5e:3c:64:9f:72:dc:a0:09:a3:b0:ab:ba:c0:87:16:
50:07:69:36:96:e4:8e:5f:86:89:64:ad:74:85:f0:83:8f:7c:
ce:6c:87:26:ee:24:19:fc:bc:86:50:fa:9c:24:c5:37:98:70:
44:04:68:f0:b6:ab:90:e0:90:01:71:60:fb:34:35:75:44:a3:
8f:21:c8:a4:a1:ed:34:b1:ae:e9:6a:4a:6f:3c:7d:e5:30:8a:
a2:1c:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:27 2025 by rpki-client