Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier: FEtJ/5o7QaWF9WHh2/33KDLUGCQXw46zyIG1NFe93Pg=
Subject key identifier: 02:7E:00:01:CE:FA:CD:DD:40:1C:A8:4C:27:FB:AC:E3:46:2E:4C:24
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 0198D515F8DFA65C1D3BAACD4F7ECD3586D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number: 0D43
Signing time: Sat 23 Aug 2025 04:00:43 +0000
Manifest this update: Sat 23 Aug 2025 04:00:43 +0000
Manifest next update: Sun 24 Aug 2025 04:00:43 +0000
Files and hashes: 1: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: vr/83GaE4b6PgNiAV88V7M4q5BO52pKncH0dPYYo45M=)
2: Qfno-jAugdwOIbQTtdk6Qt14vp0.roa (hash: K+5ZvY56wsKUyUpWT9EX8Ty0xGLLwMy0SXranx21Z8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f8:df:a6:5c:1d:3b:aa:cd:4f:7e:cd:35:86:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Aug 23 04:00:43 2025 GMT
Not After : Aug 24 04:00:43 2025 GMT
Subject: CN=027e0001cefacddd401ca84c27fbace3462e4c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:c2:99:75:a2:dd:ca:2b:cf:56:3c:37:8b:
08:0a:2f:a2:d7:b4:d9:43:4f:56:a1:44:81:04:14:
e1:9b:c8:17:2e:e1:1d:4a:a6:88:79:2b:42:be:89:
17:3c:27:e3:5f:b5:57:05:83:65:d7:f3:d1:60:90:
bf:86:7a:6d:0a:17:19:d7:fe:f0:15:d4:83:a9:c5:
ef:8b:0b:6f:52:3e:6d:18:3e:2f:29:7d:87:3e:ae:
aa:06:57:f2:50:44:27:4d:70:74:e3:59:d8:da:aa:
8e:a6:f0:df:59:0b:95:bd:92:96:97:f8:cf:1c:1c:
c3:9a:a5:67:fe:f9:5a:6c:1c:39:ab:3a:e0:2a:4e:
46:35:5d:78:c5:38:4b:35:f8:7f:2c:3b:ca:e7:ac:
a5:93:49:70:db:01:22:b6:52:a6:0a:4a:c2:d3:47:
b1:bf:fd:4b:58:3d:18:c2:56:cf:67:44:e9:16:fb:
30:ef:61:d2:a6:90:dc:ac:a1:19:87:11:dc:69:3b:
6d:37:78:cd:de:14:8a:26:01:41:cb:d1:f3:35:fb:
11:e9:40:94:db:66:1f:ac:45:7e:a4:82:8c:3c:ca:
d4:33:aa:15:b8:a2:62:ea:cd:30:b3:a2:30:84:78:
9d:e9:6b:a3:3d:f6:02:d3:1d:65:5a:30:b2:04:d2:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7E:00:01:CE:FA:CD:DD:40:1C:A8:4C:27:FB:AC:E3:46:2E:4C:24
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:19:08:bd:cc:42:d5:51:0d:f7:95:e6:60:7c:dc:61:2a:db:
a0:76:be:16:27:51:84:a1:53:28:c6:41:fb:94:54:2d:99:25:
c7:ff:3d:8b:1e:ce:d8:6b:df:a6:2c:29:b2:16:ba:5e:f3:be:
46:9a:bf:f2:e6:fe:7c:0e:8d:f9:fe:fe:8d:dc:6d:0d:0a:26:
75:36:2f:be:91:16:2f:b3:24:95:c6:84:ae:62:55:cc:fa:8a:
08:56:26:c3:bd:d2:9e:71:f6:a0:d6:6b:64:50:be:65:9a:d1:
7d:88:34:ac:0e:6d:83:0b:5a:f8:e7:90:7e:e6:f1:47:bf:6d:
e2:04:e6:de:93:e6:73:0c:ea:8a:4a:38:df:5c:cb:a0:07:c7:
6a:e8:5b:ea:e2:bb:98:f9:8f:5c:7c:6b:eb:b7:ee:0a:30:22:
32:37:67:ee:0f:3d:7e:96:07:8b:5e:3d:6f:85:31:74:fd:a3:
3e:d2:c0:89:f8:ab:4a:68:4d:40:1d:08:bb:83:42:33:65:0d:
85:b0:89:3d:d1:62:8b:95:ac:20:d7:5b:97:94:86:da:7b:e1:
01:9b:4f:a0:df:af:51:19:e3:88:8a:f6:13:49:a0:b9:73:46:
e0:ea:07:35:1b:af:d4:d6:45:7b:68:05:a6:98:2c:e9:a5:8f:
84:23:d1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:25 2025 by rpki-client