Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier: Z1QhDxTdfK8KGa6Ql85T4WC6kgwaSR9YMsjBVnXiMpA=
Subject key identifier: B1:7B:C6:F0:C7:E2:55:52:E1:05:AE:A8:FD:79:EE:58:0E:48:D4:64
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial: 0198D660C7D33A36B231B1514BFD33433BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number: 0DE7
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: +AzxCNZFvvGr0kRKjrJT4mdc8YcAjbwOjjm6GHSRNYs=)
2: ldAiZGhEA6PQQSWSUu13vFbKCqU.roa (hash: sA9s3rJXQHu5BKgisYTJyKuldiob4VBrcuXc+pLot6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c7:d3:3a:36:b2:31:b1:51:4b:fd:33:43:3b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=b17bc6f0c7e25552e105aea8fd79ee580e48d464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:b6:18:d7:0a:af:03:2e:c2:ee:0f:32:a3:
7a:cf:27:ef:fb:82:68:f4:21:33:ac:0a:a0:dd:30:
83:20:3b:40:ed:0d:ca:ec:57:9a:bc:14:2f:70:d0:
6f:b8:c6:45:3d:7c:c5:d0:72:1a:53:f1:b5:31:a1:
9a:cf:b0:7a:7f:9d:8f:3d:70:57:4a:34:0a:6b:93:
23:28:49:4e:43:ef:a4:1e:e8:ae:71:10:1e:72:75:
f4:9b:c3:31:9e:8e:dd:66:7f:29:a5:a7:da:82:76:
59:e2:e7:dc:65:6f:61:7c:8b:b9:59:15:7d:51:84:
95:99:fc:a5:a6:6e:76:20:ac:34:c9:d0:8c:61:3f:
b5:7e:c7:1f:ed:15:26:d8:d4:2d:ff:17:8d:49:33:
3d:57:83:26:e0:5d:07:23:fa:bc:60:01:66:41:56:
33:80:49:99:4d:56:da:4c:9c:9a:4f:1f:da:26:8b:
75:f2:a1:bb:41:16:bf:db:81:30:45:e6:d3:67:3c:
02:3a:6b:f0:1e:68:61:d4:73:b0:6e:56:d6:7d:1a:
ee:02:de:08:97:d1:9e:5c:e3:77:f3:6d:e0:4d:29:
ba:97:36:8e:df:34:d3:14:5a:94:d0:40:dd:cb:80:
fd:ef:8f:56:f8:e9:d8:58:13:72:0a:5d:00:6d:7e:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7B:C6:F0:C7:E2:55:52:E1:05:AE:A8:FD:79:EE:58:0E:48:D4:64
X509v3 Authority Key Identifier:
keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bc:f0:d7:71:79:49:cb:07:bf:25:27:7f:c2:12:6c:73:03:
f4:36:c1:35:8c:8c:80:c8:23:39:f9:53:4a:ff:88:08:21:01:
ef:88:0f:ff:b7:35:45:ae:86:57:71:70:b2:98:98:40:d9:6c:
61:a4:bc:2b:e5:23:df:34:9d:d2:0b:4a:87:fb:f3:bf:8b:ce:
31:ea:cd:c3:7c:3f:b9:eb:36:3d:cc:a1:9b:8e:42:75:3d:fe:
90:59:34:6e:56:5d:7a:8d:f7:8e:77:e8:ef:af:96:77:5c:61:
1f:1d:fc:d9:cb:df:20:7d:1e:cf:08:7d:76:6c:43:fd:6d:75:
4a:02:ab:b5:6e:10:0a:08:8b:9a:72:dc:a5:46:3b:df:06:08:
ed:e0:b5:db:ea:f6:9d:17:58:b7:48:25:5c:a1:f0:ae:67:b0:
7d:97:05:3e:3f:9a:96:e2:c8:1e:30:b9:ff:f1:93:a4:30:92:
ca:7a:90:d2:b4:cd:b7:5a:c8:63:74:bb:0b:36:8e:a4:8f:36:
46:c2:10:94:0e:c8:42:6d:dd:c8:aa:17:07:c5:63:02:30:00:
3f:70:0f:13:c6:6e:3d:bd:43:3a:a0:74:db:15:bb:0f:de:71:
74:40:94:5e:d4:52:b4:8c:f2:5f:2e:4b:2d:ed:b2:ea:41:10:
c2:f1:49:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:19 2025 by rpki-client