Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
File: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json)
Hash identifier: hrqdc1nN3jiloGXQkcCqDK/L3FBzrY+Yzineu4m2WyA=
Subject key identifier: 46:58:04:FB:24:0A:04:C4:C6:16:2A:33:DE:62:B4:5A:84:7F:B5:AA
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial: 0198D4A7E42053C236DF4145AFC7517CBFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
Manifest number: 0F8A
Signing time: Sat 23 Aug 2025 02:00:29 +0000
Manifest this update: Sat 23 Aug 2025 02:00:29 +0000
Manifest next update: Sun 24 Aug 2025 02:00:29 +0000
Files and hashes: 1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: 0BteB6V2sxOEjBOh3n9eRtOmzhDsoN7P49MT+y7Za/I=)
2: gbK6DHiZq7AYAmJhGhegTd1JJGM.roa (hash: 3ZhInyD7W5kRDFPCm7P1BZAvCR0mhPTykPk/poLoSao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e4:20:53:c2:36:df:41:45:af:c7:51:7c:bf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3277a239664d245becf4214dde15923042a142f
Validity
Not Before: Aug 23 02:00:29 2025 GMT
Not After : Aug 24 02:00:29 2025 GMT
Subject: CN=465804fb240a04c4c6162a33de62b45a847fb5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:06:33:55:5a:f7:79:89:a7:35:7c:eb:06:
e1:2a:37:e5:30:dc:f9:4a:72:2b:fe:7b:05:e8:78:
ed:ef:c8:46:2b:77:cf:51:0d:74:cd:58:9c:dd:73:
8d:3d:f0:0b:79:b0:8b:c9:cd:0f:da:de:6b:55:83:
b9:bb:fe:53:3b:33:ac:f4:23:47:06:c1:f6:2d:c0:
c7:cd:e0:81:e0:e2:ae:be:43:2c:3a:9f:7a:34:f6:
80:04:d7:0b:43:26:e5:13:96:56:c6:35:67:f7:71:
46:47:1d:fb:6d:ec:b3:71:75:bb:16:19:d2:8c:cb:
dc:99:51:9d:90:3c:d8:49:17:78:e3:b1:5b:a7:4b:
a4:5d:9c:70:47:ad:03:89:af:ba:59:71:b3:58:8b:
94:8c:22:18:fa:b6:5c:ed:2f:1a:9b:1c:fc:3b:d0:
0c:25:a8:02:08:3c:fc:ec:e1:74:a9:33:8f:fd:6c:
45:55:67:55:a6:3e:f8:28:74:e4:25:94:8f:17:78:
d0:1e:b4:17:be:e2:14:fd:68:85:8d:7f:bd:64:96:
7f:8f:44:07:b1:d0:53:5c:c7:f9:49:11:b7:4f:e4:
77:4c:01:21:55:56:ec:22:6a:7e:73:5b:47:6f:1b:
b5:de:94:d0:fd:68:a5:d2:bf:de:8b:6f:2b:d7:29:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:58:04:FB:24:0A:04:C4:C6:16:2A:33:DE:62:B4:5A:84:7F:B5:AA
X509v3 Authority Key Identifier:
keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0b:42:b2:fb:f3:a0:b8:fc:21:1b:52:86:47:c0:23:5e:9e:
82:66:29:19:4b:aa:70:02:70:cb:61:57:36:72:56:ab:78:07:
86:95:6b:95:b3:32:bc:5d:47:11:98:ba:1d:c2:02:44:25:fd:
d4:eb:14:e1:18:11:aa:30:d4:50:31:c8:36:f9:04:b5:cd:38:
53:16:b2:9b:2f:62:1c:72:00:16:b5:4c:2c:c0:a2:2a:57:7c:
23:d0:34:91:a3:6e:17:7a:a9:57:c6:54:df:63:1e:f9:3d:f0:
41:17:8a:5b:b0:10:62:38:6b:92:b6:e4:bf:f1:fe:c8:6c:d1:
4e:24:6b:5d:3b:60:7d:13:d9:55:ab:cb:c5:8c:7d:d1:6b:ab:
f3:6a:b9:61:dd:5c:ed:a1:39:8f:93:de:06:e5:88:00:54:9e:
e7:36:6f:e3:90:dc:d1:ee:d8:07:cb:ab:c7:b2:6f:04:9b:19:
c5:9b:76:23:6e:23:84:d8:a5:9a:99:8b:69:51:ad:2b:ce:a9:
fe:d0:10:7a:64:e2:9c:f0:e8:c5:1a:2b:6f:4e:6a:c5:1c:60:
bc:eb:cf:e5:7d:58:18:30:c4:26:83:ee:c5:c7:c3:69:88:e6:
ff:39:50:ea:82:a1:9e:0b:13:7a:18:b5:e3:ec:7a:9a:74:93:
5a:9a:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:17 2025 by rpki-client