Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier: AyIq2WwCo1XnAK36fz2572mklb0i2kQU+y/zITi1jZE=
Subject key identifier: B1:01:EF:00:D7:22:88:81:43:61:89:AF:24:0D:44:63:19:2C:84:63
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial: 0198D58346166C48B1A1885B95152D187BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number: 0139
Signing time: Sat 23 Aug 2025 06:00:06 +0000
Manifest this update: Sat 23 Aug 2025 06:00:06 +0000
Manifest next update: Sun 24 Aug 2025 06:00:06 +0000
Files and hashes: 1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: k1/Q2zVjnRcHmhKLPzs5ENX5e0s6m2EJQIBrVxvB6hU=)
2: FyqKK2FcK12A9-k5axnFf2sz21k.roa (hash: W5mhlrOLXBrpKomBUnhpTyesgUMLSIHoT9QMJTSp0oA=)
3: rF6Gqj7_srm_DIMIqHN-GdQzygE.roa (hash: 2gAliij8n2m8vHu7/1GlcWyJj1a4KLcr3RlOnjXIB4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:46:16:6c:48:b1:a1:88:5b:95:15:2d:18:7b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Validity
Not Before: Aug 23 06:00:06 2025 GMT
Not After : Aug 24 06:00:06 2025 GMT
Subject: CN=b101ef00d7228881436189af240d4463192c8463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:98:56:da:98:aa:ba:11:54:64:ee:4a:30:
83:85:a5:f3:8b:bb:7a:d1:e2:af:0c:67:56:fd:01:
20:f0:82:81:3d:78:6e:ba:3e:fb:9e:cc:cb:06:39:
13:fe:a0:a5:36:2f:e2:bc:46:5a:62:c5:62:c3:03:
77:9a:8b:c9:32:5d:95:14:34:c4:50:d7:1f:17:1e:
db:f4:23:82:b2:1e:32:e1:88:d5:85:cb:59:b6:fd:
53:10:27:19:74:a1:c8:a2:5e:ca:f0:f8:68:d3:5d:
ec:4d:bf:e3:4a:41:3f:7b:5d:bc:28:dc:fe:f1:e5:
83:45:26:11:23:21:5b:a8:df:ad:56:50:6f:bd:02:
f7:a3:a8:d9:61:22:fe:65:a7:5f:53:8b:66:ae:49:
3c:12:4e:35:3a:c9:20:4c:cb:0d:a1:e6:32:c6:c3:
f2:eb:4d:f3:a2:46:5c:dc:cc:dd:bb:51:6b:c8:71:
38:43:13:a3:cc:f5:20:b0:61:71:f7:92:2b:9c:2e:
d5:7d:af:a3:73:2b:39:15:33:86:1a:93:0d:09:0f:
43:e0:ca:e7:ce:4e:23:74:10:a6:97:a9:06:62:96:
cb:4c:64:ad:63:a4:bf:8b:5b:0c:a6:45:28:c3:df:
15:7e:99:6d:13:e0:a5:d6:f8:b9:b2:98:fc:a8:33:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:01:EF:00:D7:22:88:81:43:61:89:AF:24:0D:44:63:19:2C:84:63
X509v3 Authority Key Identifier:
keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6c:cc:83:83:c2:5e:a3:60:04:6e:59:2e:63:5d:d3:ee:0d:
f2:f1:d1:bb:68:b0:c3:06:6a:27:bd:70:7c:0a:d8:f6:7b:ae:
f1:ae:63:c3:d7:0b:56:3a:b7:64:88:64:98:e3:33:60:a8:6b:
1c:a4:3b:ec:8b:db:0e:42:59:dd:d3:b7:b9:6f:ab:51:bc:88:
c4:88:0f:3d:93:b6:f1:76:a3:1a:83:26:88:68:53:81:fe:a2:
87:08:94:b2:d0:3e:7a:be:2f:c4:40:1f:75:8a:93:19:72:40:
42:e3:59:a0:73:74:ba:24:9e:52:cb:62:a8:f9:90:bc:c9:1d:
64:8b:ef:23:d1:74:b4:b8:ca:bc:3e:17:9c:25:9a:37:75:f4:
3a:10:e8:cc:54:28:dc:98:3e:e6:01:20:5e:07:c8:7d:27:db:
15:59:ff:6b:c1:75:d7:58:f5:71:cf:aa:55:30:50:1a:92:61:
a3:bc:47:6e:e2:96:95:ee:0a:51:2a:e9:3d:cc:4d:7e:0e:ec:
95:dd:52:b3:9d:f6:79:ab:44:8b:cb:3b:37:a4:9f:90:89:63:
f9:3f:21:32:68:2c:79:79:eb:d5:9a:b6:08:4f:d7:e4:34:83:
3c:94:3e:c7:5e:1c:65:c4:41:98:21:7e:03:5d:17:6d:c0:96:
da:2b:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:41 2025 by rpki-client