Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json)
Hash identifier: I6Hg5SdXggMEX9DYeB5mAT5h555MIf2u2PWehMK3h1c=
Subject key identifier: A6:23:EA:A9:A0:C7:97:BD:F5:B9:6E:25:D5:50:7C:A1:22:DC:3B:4A
Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Certificate serial: 0198D4DFF5682A158E0785CC2B5EC289A687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
Manifest number: 08AC
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: XTwg+V4yi1FgtFynl8MoQUutqIezXtgJzwFlHTKA9wE=)
2: tkNgBbUczBhXw3Q7nsd4bFDL5Ko.roa (hash: 2ZBjCKDVEUumVBdfZIcGHq5+w377C2/RlriHj7O796c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f5:68:2a:15:8e:07:85:cc:2b:5e:c2:89:a6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=a623eaa9a0c797bdf5b96e25d5507ca122dc3b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:d5:43:fb:aa:a6:5f:79:28:4c:04:12:7b:
39:5f:f0:03:c0:7c:90:23:e0:fa:42:7e:b6:79:01:
89:80:7a:65:e3:22:8e:38:04:3d:0c:bc:f1:d3:21:
86:0e:96:8a:6e:48:bd:46:df:71:ea:13:fc:19:ef:
95:8d:29:9c:1e:01:c0:de:f0:0c:b9:81:21:7b:9b:
f8:c4:95:8f:74:7c:a6:62:29:19:a9:6d:41:b7:a0:
69:86:fe:1b:45:48:dd:17:ba:f4:dd:a3:3f:1d:51:
cb:72:77:1d:84:71:f4:db:91:4d:32:6a:45:8a:b8:
8a:ee:56:3f:f7:56:15:52:f2:53:94:69:3d:97:1c:
02:2d:3c:e0:d7:df:92:52:d0:e9:87:7c:ec:34:8d:
c3:56:f5:50:3f:37:9d:2a:c7:f2:4d:19:75:35:41:
7c:46:f7:86:d7:9c:b5:b2:fd:0f:a1:87:3c:14:6e:
13:c3:c0:d9:e6:d2:2e:4d:db:11:0d:15:da:22:6b:
9a:78:f5:15:35:4a:aa:c3:43:9a:7b:6f:65:22:d4:
0e:20:5c:86:89:3e:d7:1a:e4:6d:6b:64:01:2a:2d:
52:81:7d:63:ee:86:dc:31:a5:45:0b:31:06:99:e0:
5e:63:6e:0d:7a:ab:98:ee:f3:d7:34:f1:f6:75:73:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:23:EA:A9:A0:C7:97:BD:F5:B9:6E:25:D5:50:7C:A1:22:DC:3B:4A
X509v3 Authority Key Identifier:
keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:32:f6:f5:71:45:58:1f:30:d2:c6:67:93:ce:19:eb:ec:b6:
c3:04:d3:f4:1c:c3:ff:39:fb:6b:ef:f1:5e:72:e7:40:f1:d3:
22:aa:62:29:d5:d4:39:c8:e2:4d:b9:6a:4c:b0:8e:4d:d2:73:
dd:31:61:a9:8c:9f:46:cf:96:71:df:af:95:91:18:56:fb:ac:
ac:e7:a6:00:cb:f4:f3:96:57:97:69:d8:c3:ba:b6:04:24:16:
70:7a:f4:d4:45:df:58:06:9a:23:c4:14:fa:06:ac:9d:4a:87:
3b:9d:e3:e2:98:eb:7c:1f:12:bb:ed:55:8b:92:fd:2d:9f:e5:
a5:c5:b1:b7:d6:b5:da:c2:25:26:83:33:22:e1:f1:de:79:ed:
b6:04:06:95:40:87:3b:a2:09:3f:44:f6:b8:b8:e0:90:33:ff:
6b:23:7e:d8:82:de:4a:80:b3:19:af:79:dc:d4:e6:a4:7c:6e:
88:af:cb:ce:2b:66:47:54:40:56:d4:78:e7:dd:68:3d:ee:5a:
d2:af:bd:c4:d5:e0:72:61:69:3e:b3:48:96:ea:4c:85:78:dc:
a7:10:8f:97:6c:5e:28:b5:d3:1e:04:3b:0e:b1:2b:4b:34:f4:
16:2b:62:d5:e3:e9:cc:c7:a6:9e:74:0a:51:41:09:25:d5:6d:
11:c4:e7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:37 2025 by rpki-client