Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: 8pd4y/GKUh4PzA09IcmFuUtleAeF9FM7eiUsDgWyMRs=
Subject key identifier: 28:C1:54:6E:10:AC:82:97:BB:29:FB:3F:DA:E6:55:7E:9C:08:82:D5
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 0198D4A824B1DF3817BF9078AA7F4A018636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0CDF
Signing time: Sat 23 Aug 2025 02:00:45 +0000
Manifest this update: Sat 23 Aug 2025 02:00:45 +0000
Manifest next update: Sun 24 Aug 2025 02:00:45 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: 1nvFgwoozE5BO4c8q9qVNQllUYGrxyf/qlWmWhVjijM=)
2: H2kmwp7spfqcIMI0clIF2k1Rvg0.roa (hash: zHi445ArIHvkJpCdV0dHlskzjilRLemFqJLsU1rnf8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:24:b1:df:38:17:bf:90:78:aa:7f:4a:01:86:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Aug 23 02:00:45 2025 GMT
Not After : Aug 24 02:00:45 2025 GMT
Subject: CN=28c1546e10ac8297bb29fb3fdae6557e9c0882d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:78:5e:32:f5:40:be:b1:d2:1a:fe:62:9a:
f9:a8:cb:b6:07:a0:df:b7:5f:09:a9:d4:3f:0c:e8:
75:5d:3d:12:60:b2:9b:0f:cf:39:1c:64:1a:04:68:
cf:7e:60:71:84:e5:16:ae:32:c7:24:c3:9b:0c:cb:
c3:38:bd:2f:10:a9:5e:ca:2e:69:e1:23:79:0b:1d:
6c:db:c5:af:0d:2d:30:17:55:fc:e8:db:cf:4f:9f:
25:d1:02:41:cd:c3:f0:e5:b5:94:ff:9b:64:ed:c6:
97:57:51:d9:d1:71:a5:6f:69:28:65:e5:76:2e:44:
30:5f:50:0d:6c:94:fa:19:ea:03:4a:5a:8b:85:c1:
c2:ca:7b:a2:8a:89:66:1f:c8:95:25:0e:99:26:ff:
32:54:06:a0:9e:95:12:f8:d5:8e:ba:ea:aa:2c:17:
32:06:b8:5b:18:37:ea:eb:e5:aa:6c:6d:f7:75:bb:
b6:d3:cf:6f:fa:18:0a:52:ec:81:2a:eb:30:d0:26:
8b:34:f0:77:af:e0:fc:60:a6:1e:08:84:3d:be:79:
b2:a0:bb:2d:5b:ab:d2:43:20:4a:2e:5b:42:9f:68:
8f:60:c0:db:4e:73:76:87:d0:78:16:8d:d1:4e:a2:
99:b0:ea:34:a7:cc:14:48:00:75:d8:85:a0:06:3d:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C1:54:6E:10:AC:82:97:BB:29:FB:3F:DA:E6:55:7E:9C:08:82:D5
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a2:93:1d:f2:cb:50:e1:96:25:13:1e:1a:d9:e6:37:cc:da:
49:53:1e:01:0c:a9:fb:de:90:3b:14:4c:d8:04:8b:ff:2d:7d:
c0:26:a2:77:f8:6e:05:69:c6:a1:10:f9:ef:37:39:eb:6a:d5:
6a:41:de:33:43:f6:54:6a:34:be:f8:4a:2d:80:ba:42:1d:17:
25:8c:b7:99:67:e0:3e:32:3b:2a:46:c6:1d:9d:91:33:06:4c:
c1:bf:2f:e0:82:d6:8c:24:b6:85:fc:7a:7e:df:05:48:df:1d:
a3:a1:15:ca:f7:70:91:30:1d:73:87:e0:2c:c2:66:23:c1:b8:
f9:27:40:b9:d7:bc:7b:88:fb:dd:e5:d0:6a:b9:76:d1:e1:57:
57:58:14:59:c0:1e:34:ab:3b:d9:fe:84:63:8e:6c:82:6d:b3:
ba:51:f2:05:fb:aa:8e:9a:c6:00:c1:0b:70:ff:8b:9b:47:95:
03:e8:b9:c4:aa:7d:fd:73:2e:c3:98:de:61:3e:e3:7d:73:d8:
c4:4e:60:7c:37:5d:9c:15:93:cf:33:ce:a8:f2:67:5b:61:80:
73:00:16:e2:5a:d9:77:c5:72:fc:a7:25:ff:a0:ec:5f:2c:e3:
b2:b8:73:e5:df:5b:a1:c3:1f:49:b9:43:6e:ad:62:c9:4b:0e:
c0:56:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:31 2025 by rpki-client