Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
File: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft (raw, json)
Hash identifier: 3Y4dMWBYAOXmYlxoEk0AqzGNxwOSK4fzUbXF8mt5iwE=
Subject key identifier: 7F:CF:A3:35:3E:30:BD:7C:AC:AB:9F:05:B5:5E:1E:08:B0:49:AA:E9
Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
Certificate issuer: /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Certificate serial: 0198D65FF0039F409F69E4910E54077EA85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:08 +0000
Manifest this update: Sat 23 Aug 2025 10:01:08 +0000
Manifest next update: Sun 24 Aug 2025 10:01:08 +0000
Files and hashes: 1: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl (hash: eM59sapCusF3aQX9c+10bOaDnYvPvYubQX8WDfoyMtM=)
2: 4RiMrm8aaExTJ5NxhFCCQc-LTfQ.roa (hash: xT77mBm76fvxQ/4syBVoQsoquUiDMD7RefgDewlMNII=)
3: O84I_LAanBtJYvSSTZhnAsP3iQA.roa (hash: 6ivMoGITrJjRBuEurkZGNP+0M6whX3cvNI3NRDFJ7b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f0:03:9f:40:9f:69:e4:91:0e:54:07:7e:a8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Validity
Not Before: Aug 23 10:01:08 2025 GMT
Not After : Aug 24 10:01:08 2025 GMT
Subject: CN=7fcfa3353e30bd7cacab9f05b55e1e08b049aae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:b2:10:6c:26:66:de:89:40:51:d8:91:dd:
36:2f:61:53:5b:7d:24:20:a1:46:c2:86:82:a7:f6:
61:89:0c:05:b4:81:ad:67:82:97:5d:75:b9:db:72:
ef:02:b8:99:b9:03:01:86:00:4e:44:20:d5:90:80:
ac:01:ce:ef:67:99:f4:cd:a5:c3:91:f8:bd:7b:f0:
70:34:f2:9a:38:48:bb:13:5b:4c:0d:c0:6c:05:24:
7c:4a:56:d9:8d:a1:f6:75:51:16:75:d9:91:c8:e4:
74:2c:94:98:6a:6c:3e:64:8b:89:f7:a7:88:0a:ff:
68:9f:71:eb:71:59:c9:2e:70:48:b1:de:ea:73:21:
e3:99:e6:2e:1c:b1:fd:06:f7:93:b5:1a:cf:61:64:
d9:9a:54:11:ed:b6:c7:5c:fb:dc:61:cb:13:89:99:
e5:65:e7:02:72:04:f9:c7:4c:45:80:99:5b:6e:f0:
4d:a0:42:0d:e7:9d:5d:d3:f2:03:8e:57:2f:5c:2d:
31:9b:9a:03:4d:b6:5a:7f:a2:54:be:38:a9:a4:b3:
2b:7a:92:bc:09:05:84:95:a0:bb:5b:90:7a:25:ee:
30:b9:fe:96:37:2e:25:cc:b2:7d:f9:20:77:d9:d2:
84:9d:48:cb:e7:2c:44:e2:31:3d:75:a2:f4:76:d2:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CF:A3:35:3E:30:BD:7C:AC:AB:9F:05:B5:5E:1E:08:B0:49:AA:E9
X509v3 Authority Key Identifier:
keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:50:8a:4a:e7:aa:a4:b1:8d:f6:ba:6c:4c:fe:a1:d8:72:3c:
12:6b:9d:9c:35:6f:d0:0a:3b:aa:f2:dd:2b:e5:a0:ea:80:89:
ed:60:89:6e:47:98:d4:d8:0c:99:83:62:f5:83:25:c6:cd:32:
89:dc:29:cf:12:b2:27:14:0f:a3:f6:4c:77:e9:75:52:dd:bc:
bd:da:5f:7b:a3:db:10:a1:a9:8c:34:af:44:69:d3:8f:33:5e:
62:9a:47:d9:8f:dd:67:13:f4:13:31:40:91:b6:61:05:b9:fb:
6c:24:26:0f:ec:96:2f:1c:6c:64:9c:2c:77:d0:07:be:74:2d:
47:43:78:5b:65:5e:5f:b3:13:a0:68:e7:b1:c8:39:4e:cc:c6:
3d:5c:4a:59:4d:ee:38:ef:a1:84:5a:75:cb:84:7e:31:43:a4:
31:cd:a0:74:ca:f5:ae:2d:51:47:74:8d:b6:0b:48:5a:0b:0c:
00:f0:1a:7c:83:c2:84:09:39:d2:cc:bb:73:63:e3:cf:94:63:
65:ad:89:eb:56:72:a6:6f:d7:62:c5:c6:00:74:c2:0e:ea:a2:
67:d2:9b:50:a0:63:14:71:fe:b0:98:1b:8c:f6:7c:ae:8a:58:
48:ae:5d:24:48:01:8e:80:bc:5f:c6:48:b1:d4:fb:9e:61:95:
12:55:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:01:19 2025 by rpki-client