Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json)
Hash identifier: t2JSUqCxRvjuNkce2GQDFShCpYi5076yW2XVHh+QEX8=
Subject key identifier: E1:28:18:67:33:34:E9:96:C8:A3:EC:E9:94:90:25:CA:AB:67:2F:20
Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Certificate serial: 0198D850A3E99C8240A2D878EC2144C72B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 19:03:40 +0000
Manifest this update: Sat 23 Aug 2025 19:03:40 +0000
Manifest next update: Sun 24 Aug 2025 19:03:40 +0000
Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: baeLMEHPwG5AwjtgV02A73f7NKOmTVGhLAGb7206QDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:a3:e9:9c:82:40:a2:d8:78:ec:21:44:c7:2b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Validity
Not Before: Aug 23 19:03:40 2025 GMT
Not After : Aug 24 19:03:40 2025 GMT
Subject: CN=e12818673334e996c8a3ece9949025caab672f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:85:ed:ec:30:29:5d:92:ab:1f:1f:11:d4:
a0:b5:80:02:ec:a8:f5:c9:1f:05:0a:c5:12:7e:50:
76:ba:1e:b2:17:f3:36:1c:74:7e:19:e6:46:98:51:
5b:b3:b2:40:2c:1b:a4:5e:34:71:57:44:e2:19:da:
bd:4e:91:a1:5d:60:8c:34:64:4a:3e:7f:78:f8:66:
d8:39:67:08:ab:28:d6:dd:0b:36:d4:92:f2:19:8c:
6a:92:ea:ab:9c:b0:44:c0:75:09:f9:2a:cd:54:35:
cc:79:0c:40:d1:6d:04:7e:1d:24:5d:39:d9:a2:d2:
16:da:e8:55:e3:a2:80:45:f7:7b:a6:63:14:b7:09:
1e:9c:fe:47:7d:d0:04:53:94:9b:58:e5:60:70:2c:
88:2e:fa:76:cd:cf:48:f6:6f:dc:ac:38:ba:f1:8f:
3d:a9:56:7c:ef:e9:b2:ab:61:81:88:b7:f9:8b:94:
e8:51:3d:fb:4b:65:76:34:d7:8b:8e:89:13:5c:ac:
98:07:92:74:fb:4e:3f:a8:fb:37:00:40:dd:27:86:
15:b1:cd:bc:39:62:96:0d:a1:66:fc:19:20:16:36:
26:76:d4:59:2d:64:b1:7d:1b:cf:25:1e:9f:7b:4f:
5a:30:0b:d7:38:be:35:fd:55:70:ed:78:71:68:cf:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:28:18:67:33:34:E9:96:C8:A3:EC:E9:94:90:25:CA:AB:67:2F:20
X509v3 Authority Key Identifier:
keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a7:7c:44:72:a8:4e:2b:f6:7f:e3:21:76:cf:4e:b1:3c:82:
0c:5a:bb:1a:e2:0d:b0:7b:bd:5f:13:c9:32:e9:15:8c:05:17:
3b:8d:07:47:57:cd:5c:72:fe:ee:dc:6d:e3:85:85:6a:f3:f8:
68:e9:03:d6:bd:68:db:f3:a3:ac:7d:ae:49:4d:04:95:be:9c:
bc:41:78:7b:89:9a:07:be:87:5d:07:4c:a6:f2:69:2c:98:5c:
51:44:22:4b:0f:3a:5c:13:13:e2:18:df:a7:3b:f6:41:ac:ab:
8c:80:c7:7e:37:f8:85:0d:b0:03:b5:e3:72:d3:61:0f:96:2f:
85:47:00:5f:f8:ee:95:c0:82:19:6c:4e:f1:bd:56:e2:01:41:
9e:47:de:db:a0:71:24:a6:3b:97:f3:f2:ca:45:cd:c3:44:52:
87:09:20:19:8c:62:a2:a6:9f:43:4a:56:2b:be:2d:33:d2:58:
a0:d9:2e:fa:aa:67:5d:ae:13:66:ed:fa:35:4b:fe:cf:87:de:
1a:48:28:5b:20:a6:e5:58:b3:40:53:45:09:6e:04:07:08:f7:
82:3b:94:ea:f2:2d:ad:aa:b0:0b:2c:b0:a7:db:16:9c:00:58:
55:eb:e0:78:e9:09:58:18:04:1f:db:99:03:de:92:32:14:e5:
c2:be:4c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:03 2025 by rpki-client