Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
File: C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json)
Hash identifier: iZqoIs4bA4dkszfX0yaRogovsRN20rDfeB+dAcQ0G7Y=
Subject key identifier: A6:98:53:9C:64:D0:C2:2D:35:88:09:37:D3:59:C7:CA:E3:F3:78:F1
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial: 0198D62982D81101D3B7F1B69DD819C8B0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
Manifest number: 098D
Signing time: Sat 23 Aug 2025 09:01:41 +0000
Manifest this update: Sat 23 Aug 2025 09:01:41 +0000
Manifest next update: Sun 24 Aug 2025 09:01:41 +0000
Files and hashes: 1: 0hvroDJRTiv5TMHGbhEK2DlptC4.roa (hash: S3R/izONJp1lVpysE4WjLxcYlxkgXfVor/cn43zpbBk=)
2: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: Wh8hHbD/9vekv6ZLL6M+ngdHGDNc62clAOY4GGDagzs=)
3: amv-696wBdt_QKun8p7XRRFXqU4.roa (hash: bYmc1FDq2rT+11x0JTkkZhN6/zVzcCRLsddYEZtQBbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:82:d8:11:01:d3:b7:f1:b6:9d:d8:19:c8:b0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Validity
Not Before: Aug 23 09:01:41 2025 GMT
Not After : Aug 24 09:01:41 2025 GMT
Subject: CN=a698539c64d0c22d35880937d359c7cae3f378f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:25:d6:67:6b:e9:24:ae:4f:f7:20:60:fb:
ae:77:0a:d6:74:3d:c8:64:ff:a3:ab:5f:8b:7a:e4:
ed:4c:35:4c:58:12:1d:0a:d3:7f:4e:87:66:cc:13:
8d:83:5e:ba:99:10:43:b6:63:a5:b1:cf:d0:40:25:
30:de:27:2d:f8:ee:43:f9:1a:35:de:2d:01:0e:34:
95:97:7d:89:4b:97:f3:16:a3:7e:25:a8:49:be:bd:
39:fe:7b:5a:f9:b9:8d:f7:e8:9b:0f:8b:6a:f6:13:
6c:51:33:e0:f5:2d:5e:8f:1d:7c:f4:4f:82:8c:cc:
db:e9:82:39:49:f9:a2:fb:76:b0:6b:39:a4:ec:55:
92:0a:7c:84:83:4e:7a:2c:d9:79:13:b9:d8:0c:c9:
7a:d1:a3:e5:bb:49:9d:f2:fe:31:f9:6b:12:9c:3b:
70:11:14:b0:28:1b:f4:17:5d:90:bf:f8:9a:4c:e4:
da:8d:aa:c1:a5:a0:61:ee:0d:3f:51:e8:d6:db:2c:
41:3b:de:a3:96:5f:d6:ed:55:4f:83:bf:27:20:d8:
90:cf:9a:b2:a2:d6:f3:ba:33:79:e1:09:dc:23:f6:
be:b6:4c:37:cf:6d:8b:b2:53:79:b1:c4:af:0d:be:
f4:7c:f3:a2:cd:4e:44:ce:46:9c:ee:ad:fd:8e:35:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:98:53:9C:64:D0:C2:2D:35:88:09:37:D3:59:C7:CA:E3:F3:78:F1
X509v3 Authority Key Identifier:
keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fa:3f:00:86:ba:7c:9a:2b:0d:65:89:e4:29:f4:c3:8d:b5:
a7:c4:ba:b8:95:3a:b0:c9:03:15:e8:38:ba:d0:d2:cb:07:9e:
1d:69:b1:3e:40:e3:f3:08:21:5e:fc:a1:af:70:71:a2:f7:05:
36:fa:7b:5e:40:23:37:de:51:f5:24:41:47:8c:74:28:cb:e3:
6b:2a:c0:bd:5d:ab:0c:b1:d9:1b:10:cb:2e:82:36:f3:11:91:
77:29:a2:07:c9:39:c8:6c:7e:ad:d2:27:b9:c3:ca:3c:09:d4:
85:d2:6b:e0:d3:c0:ef:fa:08:50:05:39:d1:67:bf:5d:69:6b:
40:15:55:c1:20:8e:41:78:e2:4b:f7:c0:e7:df:cb:48:e7:09:
34:ca:30:7e:ef:40:2c:1f:8b:65:82:f3:66:80:0d:8e:24:d1:
f8:a1:b5:81:cb:d8:59:9d:85:ed:60:a1:f8:c2:05:bf:ae:2f:
d5:e0:88:93:db:62:36:2a:37:49:0c:2d:f4:a8:dd:23:3f:d3:
7f:c7:61:94:20:d5:94:a6:9c:ff:5d:e3:58:b7:88:a4:0c:f6:
6f:1c:1b:75:6b:55:bb:5e:c2:6c:a7:00:b4:2e:0d:35:46:14:
28:ce:00:ee:24:78:7d:1a:cb:d7:fa:83:22:5f:c4:e8:03:28:
30:a8:13:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:27 2025 by rpki-client