Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier: V/3ck6tzseV53Vyrso9tfowFIBAB+TPtkXgMtncLbWk=
Subject key identifier: 91:03:04:21:45:FD:EB:CE:E0:DC:BE:13:8F:DD:DD:CA:AF:F5:D2:1F
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 0198D54EA9B33BF1418F7114DC5CD1BDE16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number: 03D0
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: 6BzrArwu58N5sBVvJVBthqND_N4.roa (hash: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=)
2: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: DPwCiMjtZR+MoUXzc+DGNlNtbG4OOI7yx8ZnJYundIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a9:b3:3b:f1:41:8f:71:14:dc:5c:d1:bd:e1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=9103042145fdebcee0dcbe138fddddcaaff5d21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:cf:be:cf:3f:cd:47:a0:8d:6f:e8:e0:f2:
8f:df:78:f0:e2:f0:74:68:00:48:8b:f0:7a:19:73:
71:6b:8a:59:04:34:53:6e:29:e3:e1:82:ce:11:78:
02:56:24:f1:85:2a:9b:d6:88:11:67:56:4a:c1:22:
dc:96:27:0c:9f:62:4c:0a:b1:1c:6d:a1:17:f3:9c:
84:ce:6b:1a:c6:4f:2c:e9:bd:58:05:0d:d0:dc:e7:
63:d9:06:c2:84:1d:3f:ee:54:0a:84:dd:65:49:12:
9e:23:be:47:8f:7f:5d:3d:44:0c:d2:d0:de:73:16:
4e:d4:20:97:d7:ac:6e:96:c4:32:89:82:a2:3f:2b:
ed:18:ab:ef:c3:04:2b:33:b1:9d:1a:1a:df:d6:73:
4e:5d:ff:e0:84:b8:fa:6d:3e:d0:36:34:f4:dd:aa:
3d:40:4f:49:36:d1:a8:d3:eb:e1:b9:38:80:50:b4:
88:96:fa:73:e7:da:87:e0:22:29:67:c0:2f:64:58:
8f:fa:94:aa:2e:93:e3:77:b4:1d:de:90:7d:86:c3:
28:ab:12:df:a9:8d:86:1b:08:12:69:e1:e4:db:43:
d4:34:5f:29:eb:f2:c3:5d:8f:fd:b2:d4:aa:5f:78:
37:14:0c:6c:5f:e0:b5:b0:bb:0f:4a:4e:dc:f4:cf:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:03:04:21:45:FD:EB:CE:E0:DC:BE:13:8F:DD:DD:CA:AF:F5:D2:1F
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0b:fb:12:08:7c:44:1f:1b:e9:74:28:ba:bc:f6:a6:4c:51:
c0:0b:04:32:6a:37:0f:0b:74:06:34:4b:0d:bf:26:df:b0:6b:
47:09:0d:b7:71:04:7d:77:49:96:fd:e3:80:5e:b5:75:7a:a7:
d4:68:18:79:75:82:56:50:10:76:fb:d6:c4:53:5e:ad:c9:e0:
62:fe:8c:11:dd:a1:c4:7f:ec:50:28:11:c6:1a:9e:01:9a:62:
95:68:9d:83:0b:06:65:f6:54:ce:5b:c2:1d:b5:cb:87:d9:47:
9d:12:d8:3d:71:f9:05:20:06:42:dc:36:7c:ef:7c:89:1e:9c:
99:42:38:7c:13:b1:f9:66:32:6a:45:9d:30:23:5b:35:ab:44:
a3:76:06:1a:7f:84:23:e0:15:8f:d2:b0:70:28:02:50:40:39:
c3:64:00:e4:e7:d8:31:45:5f:b6:fd:0f:bc:c0:52:06:bf:ca:
c9:fa:49:ca:ee:42:01:72:c8:bb:8a:01:f4:89:fe:38:fc:3b:
56:e1:94:85:3d:13:05:7f:e0:88:a1:56:58:05:82:bf:13:40:
ca:a9:30:b8:8f:41:bb:b7:93:27:bb:a5:99:af:af:58:a1:00:
2d:c0:a3:21:4c:a4:80:ec:ac:e2:98:0f:db:01:a7:80:77:d9:
18:55:f6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:55 2025 by rpki-client