Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: HwCHoX+dY1c/PhOBgJMBiLz5Gc53ZgoO4UxKY7HLDMA=
Subject key identifier: 4D:BA:AF:3F:3C:28:88:15:5A:DF:76:42:6D:DE:4B:A0:58:7E:94:F6
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 0198D6CD8E8BD906AA400CC8B6E6A5FEEE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:00:52 +0000
Manifest this update: Sat 23 Aug 2025 12:00:52 +0000
Manifest next update: Sun 24 Aug 2025 12:00:52 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: esgLaQY+GloPccoMgKz4il9dYzP/EiQuDVzo34h8jIY=)
2: PUu9JBqT0q_kMegzLpokDy8FZpg.roa (hash: GZSimUwCl58YJS+NoDvHAGPvWk0bb2fLNY1EJxjHl3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:8e:8b:d9:06:aa:40:0c:c8:b6:e6:a5:fe:ee:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Aug 23 12:00:52 2025 GMT
Not After : Aug 24 12:00:52 2025 GMT
Subject: CN=4dbaaf3f3c2888155adf76426dde4ba0587e94f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:b4:df:26:ee:eb:e6:5b:9b:9f:a0:7b:e2:
79:c3:37:1f:fe:94:c4:5a:0c:38:81:0d:01:cc:e8:
38:48:10:87:2f:ff:6f:8d:86:d5:e4:68:d8:7b:f9:
a3:4b:27:90:1e:50:0f:fd:df:d2:a1:4f:8c:e0:74:
5f:bc:9d:17:36:7f:b4:4b:9a:1e:cb:82:25:3c:84:
fb:02:43:56:cb:cc:59:97:16:e5:76:dd:39:49:7e:
7f:5f:47:f1:0a:50:d7:42:ef:42:1e:e5:39:92:e7:
cc:d3:30:6e:de:99:33:db:f6:e7:d3:97:c4:90:87:
ed:f7:a6:57:80:d8:89:5d:ef:c9:e7:74:72:2c:44:
6a:98:59:8c:4e:d0:cc:b4:e3:f0:0c:44:b1:27:fb:
69:28:83:56:d1:19:50:64:60:c1:28:e5:92:78:f1:
58:61:4c:54:84:5d:b5:17:6d:5e:2a:a0:16:be:c4:
a7:36:ee:f7:1f:0e:e3:c8:dc:aa:74:01:01:6c:bb:
b9:db:a7:d8:0d:1d:5f:5e:0d:07:21:76:47:a3:c7:
14:51:78:eb:33:ab:a2:98:08:68:68:14:48:8c:1a:
61:44:ee:9d:33:1b:0a:94:3e:cb:1b:ce:80:e9:19:
33:0c:b1:42:5e:a8:85:21:a3:df:51:e2:a4:1f:67:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BA:AF:3F:3C:28:88:15:5A:DF:76:42:6D:DE:4B:A0:58:7E:94:F6
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:aa:3e:39:4a:f7:72:b6:75:a3:c8:50:5e:44:52:98:55:dc:
5f:21:67:36:94:fb:97:3c:c3:d4:c1:9d:01:0a:6d:59:69:2f:
2c:46:6c:bb:1d:b0:ae:ef:35:3f:b2:93:c3:87:6c:0f:79:dd:
73:a1:c2:66:99:98:93:0a:11:9d:a5:ce:49:0c:30:62:0a:8c:
5a:7c:d9:97:56:5e:70:b6:7b:84:e5:a8:18:fd:6a:ee:6e:00:
5a:9a:85:bc:81:fc:7c:e6:8c:9e:74:37:d2:25:8f:67:b7:c4:
cb:6f:12:d5:6f:fb:61:33:85:a0:62:37:ce:36:44:ca:0f:5c:
b0:3a:20:c7:62:9e:8a:73:34:a4:e5:9d:90:39:c3:f7:58:b2:
88:d8:4e:eb:95:53:bc:1d:c1:d2:db:f5:7a:f9:55:fa:4d:cb:
40:d4:a7:6b:fd:e4:86:d9:59:74:ee:19:50:86:72:f2:29:bf:
6b:70:b1:06:7f:7d:f0:87:2e:27:f5:94:50:a5:10:1b:c5:9e:
3a:24:dd:98:09:2d:e5:db:a1:18:2a:de:b6:c3:b8:54:7d:50:
f3:05:37:0a:ae:4f:f9:44:5b:e5:ef:0f:36:53:03:8e:45:d9:
9d:e8:16:cf:cb:84:21:b9:b8:78:96:84:7e:bb:95:1a:7d:93:
16:c9:70:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:48:05 2025 by rpki-client