Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: RGGMKyt3F7B99Beq87H1ZuCFzHK27wYIbah2mwXsq+0=
Subject key identifier: 45:05:5F:8A:71:05:85:A8:3F:9C:D5:51:40:C7:7B:90:D4:78:E2:A0
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 0198D515CA628A184F57EF3BC4A3BCC4220D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0251
Signing time: Sat 23 Aug 2025 04:00:31 +0000
Manifest this update: Sat 23 Aug 2025 04:00:31 +0000
Manifest next update: Sun 24 Aug 2025 04:00:31 +0000
Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: 2wxgth57rE57Zm5H0ZqwCF10ZajVlVMUjcz5aVFjoz4=)
2: tCQKTUl91gUF9YCakBjVvOmahA8.roa (hash: +o4wlq7VWOUaSft8SFBzstGqOiur0Xr8ur6qt9Ob1Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ca:62:8a:18:4f:57:ef:3b:c4:a3:bc:c4:22:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Aug 23 04:00:31 2025 GMT
Not After : Aug 24 04:00:31 2025 GMT
Subject: CN=45055f8a710585a83f9cd55140c77b90d478e2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bd:7a:ad:a1:ab:11:38:0e:93:1c:13:a4:9a:
d7:2a:34:09:92:11:e8:e6:00:44:2a:86:50:80:58:
fe:be:32:f2:6d:6c:7f:fe:3b:7d:10:d2:cd:be:5e:
81:82:5f:da:90:c4:4d:58:65:47:ad:5f:86:e8:68:
a9:02:3e:f3:c7:15:08:97:02:66:19:2c:cd:bd:47:
2a:20:65:6b:82:65:59:3b:b6:04:d1:70:4d:75:91:
e9:07:6c:27:85:b2:37:6d:85:ca:41:aa:3b:0b:a5:
f5:73:a7:1d:1c:ac:fb:9c:33:e0:10:0f:fb:5d:1b:
7b:fa:ae:af:ed:4f:30:aa:43:6d:62:f7:1d:56:e4:
18:e6:1b:3c:62:f1:38:37:87:4c:1a:13:be:74:a4:
82:c4:89:67:e5:1f:d5:88:1d:d0:8f:a5:a4:a5:8c:
37:77:60:a7:03:b5:16:8c:31:85:f3:09:ad:98:ec:
06:1b:17:a9:04:18:d1:08:ab:83:fd:19:1f:f3:24:
46:19:00:a2:07:af:3a:66:95:6c:c8:f4:0d:64:e5:
2e:35:2d:1e:3f:90:d8:71:50:4e:bb:23:a3:18:28:
b3:8c:a3:87:70:fe:c7:33:ab:37:29:33:1b:41:6d:
17:74:51:52:95:76:5c:57:c8:c8:5c:cf:d9:be:fe:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:05:5F:8A:71:05:85:A8:3F:9C:D5:51:40:C7:7B:90:D4:78:E2:A0
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1b:ca:19:a7:52:b3:47:f0:50:36:a2:ab:e0:07:5a:4c:ad:
52:8e:92:56:fc:e8:50:4c:b7:dc:a5:07:e9:6a:53:97:84:18:
bd:49:75:0e:c6:c0:6f:dc:30:9b:75:d0:ef:44:16:7a:df:07:
8e:65:07:54:3f:22:32:27:3e:6e:f4:e2:a3:77:62:f3:33:20:
53:9f:b7:26:af:1a:e4:24:79:ac:5c:e6:e3:97:43:a4:b7:a8:
eb:f7:49:c4:66:17:a3:0c:21:30:90:14:1c:31:7f:db:e3:ff:
2d:be:5f:3f:d6:2b:59:01:a6:18:e7:cd:f7:7b:db:49:2c:35:
88:90:31:d3:b5:55:00:8d:f1:a7:d2:b5:06:d4:3b:cc:d1:cb:
8c:d9:6a:1c:96:19:34:48:1b:6a:78:8f:c3:16:24:bf:02:de:
14:af:6f:6c:11:bf:5b:34:05:38:05:fb:d1:67:3e:30:0b:55:
e1:f1:cb:b8:e8:07:66:c6:07:1c:04:94:8e:21:9d:0a:18:91:
2c:43:b6:4f:1f:53:35:c9:07:3f:e2:81:50:a9:32:5d:ed:48:
f9:bf:85:a9:0e:4c:c5:67:5e:19:70:c5:03:c7:d4:1a:db:a7:
27:2d:ce:15:c6:a4:32:33:a5:ba:ae:27:77:74:12:47:4d:26:
e5:13:a3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:26 2025 by rpki-client