Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
File: 00QDowsxN1mvliav2NPSOAX8yA4.mft (raw, json)
Hash identifier: DtxgXU25ly+KZoUQ2opbSdNk3/YJ+0PvJozR7rCnA1c=
Subject key identifier: 0C:39:9A:5A:C4:06:89:D4:D8:60:51:5C:E5:DB:1C:AF:DD:4C:FF:13
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 0198D473FCD7D3FDDF97E70873909EEEAF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
Manifest number: 14A9
Signing time: Sat 23 Aug 2025 01:03:47 +0000
Manifest this update: Sat 23 Aug 2025 01:03:47 +0000
Manifest next update: Sun 24 Aug 2025 01:03:47 +0000
Files and hashes: 1: 00QDowsxN1mvliav2NPSOAX8yA4.crl (hash: i2+alerMYmlNpsa/HkkBZZJyVW//1RnUxlUMu+vRu7U=)
2: cVpmuHdAZzlijHGAjGSKkGw9RjA.roa (hash: qNHNU4vOIkFIe1aGqstJlXjPN0jdP5RduNW12cDiCyg=)
3: yay3nN2FWSrpjXKo77YZUaENbjA.roa (hash: 3dd/DLtrx7aUgl5CmfhFn/D7OtLGGdM5Nn2M37wMGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:fc:d7:d3:fd:df:97:e7:08:73:90:9e:ee:af:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: Aug 23 01:03:47 2025 GMT
Not After : Aug 24 01:03:47 2025 GMT
Subject: CN=0c399a5ac40689d4d860515ce5db1cafdd4cff13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:03:87:c7:2a:c0:41:24:f4:d9:78:1d:f7:
2c:63:48:51:54:74:45:6b:a3:82:7b:14:10:2a:d2:
ef:99:41:4e:4d:c5:38:e6:e7:42:1b:00:83:67:53:
29:1c:3a:11:13:d7:59:ce:48:b7:26:08:0b:cf:9b:
d3:ad:ed:b5:42:34:17:f9:04:0e:63:e3:78:1e:ba:
63:3e:4c:b1:f0:aa:81:88:ed:0c:d9:0f:62:ff:bd:
ee:cc:e0:fd:c0:ae:66:13:9d:bd:14:6d:2d:bf:9a:
6b:26:6c:e4:52:33:8a:36:8e:16:6d:33:c9:a6:0a:
b3:eb:64:75:42:8d:c1:84:35:59:96:44:79:40:d5:
11:45:c3:6f:60:53:75:08:4a:df:e7:01:06:cb:04:
df:7d:b2:7e:0e:49:e6:99:45:77:f6:3e:8d:4a:19:
ea:91:65:ab:d3:b5:b1:64:c3:c4:23:63:54:4c:38:
e5:5a:f8:ad:37:a7:ca:b2:1a:5f:37:d0:33:3a:14:
f2:7f:f9:d8:f0:9b:b9:78:68:77:49:55:c6:53:8c:
a3:89:a2:08:69:3c:f1:85:3d:78:25:5d:3d:df:03:
45:ef:22:2b:6a:d4:e0:5c:33:2a:50:f8:a2:67:c0:
ea:ef:33:dc:da:9d:f1:66:f7:42:15:90:42:ec:71:
b3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:39:9A:5A:C4:06:89:D4:D8:60:51:5C:E5:DB:1C:AF:DD:4C:FF:13
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9c:ca:d5:d7:cd:d4:b4:46:a4:b2:c0:14:c0:8f:af:b7:37:
ae:aa:e7:94:d0:d7:23:b7:8c:0b:78:9b:77:92:b7:53:ce:0f:
8b:b2:be:40:3d:e8:1c:a3:9f:a7:6f:52:3f:31:60:9d:d9:77:
fd:db:39:59:a0:3d:ab:ea:6f:ce:c7:31:28:7f:6c:61:80:86:
4f:f0:0e:96:e6:41:5a:21:52:c3:2c:a5:44:25:2b:d3:91:c3:
df:1c:c6:a1:5a:c2:1a:e2:1d:4e:c1:ab:a8:5b:78:44:ad:cd:
68:cb:0e:24:e8:9d:d7:bf:05:45:dc:33:e9:8d:f1:3f:63:06:
bc:d8:8a:b7:a7:87:ff:49:64:7a:70:fb:e0:8d:22:e7:85:f6:
7b:fb:bb:5a:2f:74:63:ef:b1:1b:44:9e:42:4c:12:03:9e:f7:
46:33:81:a0:75:9c:1b:ad:c6:f0:c4:1c:5a:f0:82:7d:5f:bb:
56:43:45:01:e1:02:63:58:d5:64:75:c4:5a:c3:73:53:26:82:
aa:fa:89:41:33:22:1c:02:70:b0:4b:8f:38:18:a9:a3:ed:b8:
2a:39:d5:2e:54:f8:ac:1e:2e:93:de:76:c5:93:26:0a:07:12:
04:b5:0d:96:9d:a8:cf:2b:8a:4c:7a:ca:12:de:30:6b:16:df:
e3:e4:7e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:12 2025 by rpki-client