Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier: Z1P2lesSSB/sds0h0ZVfnLxAlNrle5qPPMRI/55og3U=
Subject key identifier: B3:20:99:FB:80:61:7A:58:7B:38:9C:30:61:68:62:D4:47:1E:0D:CE
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 0198D5BB7ABCC7D1E684A6531784ACE847C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number: 2F
Signing time: Sat 23 Aug 2025 07:01:30 +0000
Manifest this update: Sat 23 Aug 2025 07:01:30 +0000
Manifest next update: Sun 24 Aug 2025 07:01:30 +0000
Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: nLDBqQLinKhJY0sPxMWfdMo5x58PhmIQDAwFYZ30n60=)
2: 1-7rqPeApfWB5OeXme1R2dxaURkI.roa (hash: G1AfCo2TRIj0s8Iv4o94YSbEJ+sCCm2M5yCwI2QU6Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7a:bc:c7:d1:e6:84:a6:53:17:84:ac:e8:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: Aug 23 07:01:30 2025 GMT
Not After : Aug 24 07:01:30 2025 GMT
Subject: CN=b32099fb80617a587b389c30616862d4471e0dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:8b:6b:38:68:e6:6f:fb:65:35:1e:39:1b:
93:ed:7e:02:37:b6:d9:57:82:5a:fc:5b:59:95:36:
08:46:6a:c8:c8:8c:b6:71:93:a4:b1:00:4b:d0:da:
9e:2a:83:00:79:5d:96:81:89:28:c8:1d:9f:e4:b3:
8d:ab:3c:12:39:b5:af:c3:fb:2d:6b:5b:8e:0a:ad:
a1:0c:84:94:69:dd:9c:c0:24:9c:a7:a2:2f:2c:0a:
f7:9b:d5:67:14:02:56:e3:b5:32:72:3a:04:c1:0a:
49:fe:61:9d:84:3e:02:f4:ac:8c:37:9c:9f:6c:ba:
a7:aa:11:d7:d8:9a:68:22:e7:5c:05:c3:ca:6d:b0:
fd:1b:02:c8:96:c8:92:2e:ba:40:18:7e:23:af:a5:
e8:8e:f9:07:c1:6a:7e:12:cf:b5:26:6c:33:b1:25:
49:97:0e:ac:2c:3c:a3:0e:cf:e9:62:10:6c:21:d4:
25:d4:ac:fa:be:ed:f4:0a:82:b3:64:dc:56:53:00:
ea:b1:b0:3e:9a:b8:59:09:18:57:35:4b:6d:c4:58:
c7:b2:67:db:b5:1e:b5:0f:e7:a3:cc:ea:59:17:a1:
d4:bb:9d:2b:8f:03:dc:6c:1e:37:de:33:4b:f5:ff:
03:e9:c3:b2:f2:a0:43:aa:bf:9b:30:58:d1:34:6c:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:20:99:FB:80:61:7A:58:7B:38:9C:30:61:68:62:D4:47:1E:0D:CE
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:03:1c:69:a4:49:86:36:3f:3a:a2:a8:10:e7:8e:4b:c2:f0:
cd:ab:a1:3c:b0:45:99:18:e7:b4:83:a5:d3:09:69:1e:f7:26:
3e:e1:ae:ba:ea:39:c3:5e:94:f2:7f:74:6b:ec:82:ec:e1:b0:
9d:c5:46:64:67:8a:bf:79:f9:ad:59:a7:4b:09:e2:26:0a:80:
e1:16:11:ae:65:2a:7f:22:de:a3:33:5e:a6:de:27:c1:e6:44:
89:5b:08:bc:4e:39:95:e6:c2:60:50:35:9a:39:52:69:9b:ac:
6f:2a:ea:2d:d4:1e:17:38:79:7c:a0:7d:70:d2:69:3c:91:87:
c9:e4:4a:2d:37:cc:0a:69:f3:8a:e9:16:0b:ed:0b:80:9e:75:
e8:28:bd:47:f5:bc:59:df:43:ba:b3:92:3b:48:ef:2c:1e:1a:
b7:18:ae:1f:0d:36:a3:57:0f:6a:0b:a9:e8:d0:15:86:84:4a:
c2:94:a4:a2:71:6c:ae:d5:ee:6d:02:20:60:16:e2:f1:57:0d:
b8:84:9c:84:75:8a:df:9d:87:50:46:61:2b:a2:9c:db:c5:52:
02:5c:d1:2e:d9:ba:f5:a8:66:59:25:30:93:68:2a:3c:db:db:
e1:5a:66:7c:0e:53:95:55:5f:03:59:f4:8e:b1:79:7f:72:85:
08:fa:fb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:30:15 2025 by rpki-client