Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
File: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json)
Hash identifier: 9Hgf/e6xFfBsYbHGNLRZfi2ZcoQHI0imh0xMUn8LdBw=
Subject key identifier: 72:FF:51:8E:DE:DB:6F:75:E4:FF:2C:F5:E0:5F:A6:8C:AB:1E:49:3D
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Certificate issuer: /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial: 0198D4DFEBAECD48AEC4CF344F8646C24671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:41 +0000
Manifest this update: Sat 23 Aug 2025 03:01:41 +0000
Manifest next update: Sun 24 Aug 2025 03:01:41 +0000
Files and hashes: 1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: RSfQeYBQUEY6wiLZYmoUMo/3xUhTIHzw4FlU628b0hA=)
2: f7YxschREuysiSjDT6JDZ1hIzJU.roa (hash: od3isdJHCZlHUjM+HPneCDkTI9VrgHkYJNlcsSC6Dag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:eb:ae:cd:48:ae:c4:cf:34:4f:86:46:c2:46:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
Validity
Not Before: Aug 23 03:01:41 2025 GMT
Not After : Aug 24 03:01:41 2025 GMT
Subject: CN=72ff518ededb6f75e4ff2cf5e05fa68cab1e493d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:95:32:2a:73:08:e3:cb:5b:8a:1b:cf:fb:
6b:89:17:85:7e:9d:ae:04:34:fd:b3:cc:87:8a:a9:
11:1c:63:bd:29:c2:4e:a8:0e:8e:c5:a6:f4:2d:fc:
1e:fe:eb:91:2d:35:eb:86:cb:17:88:3c:4b:d6:28:
5d:60:31:1d:ef:62:8a:db:83:fd:0c:a6:82:2f:35:
f2:e8:f9:85:d3:94:64:a2:28:1d:40:e6:08:af:ce:
66:00:81:11:10:98:2c:2d:03:85:c6:66:82:72:7c:
73:6c:e5:73:87:61:d9:a1:84:85:ad:5d:1d:9e:34:
01:43:be:e1:10:19:5d:a2:15:18:2f:a6:3c:4d:36:
3c:2e:bf:ce:8b:e6:50:02:74:23:96:a1:51:71:d6:
21:e5:47:98:88:56:f3:9b:75:ec:88:88:ed:2e:be:
d9:10:9d:74:08:32:78:5f:88:34:0b:33:ca:0a:22:
07:f3:b3:b5:89:54:5c:bc:0c:1c:2d:88:0b:88:6d:
10:45:65:1e:6f:22:05:a9:72:32:8c:e2:dd:ff:f1:
ec:9e:07:17:6a:3b:ae:e6:47:38:21:ce:55:8c:62:
9c:6b:0b:3f:df:8f:9c:d9:d1:99:e9:c2:8b:2f:7b:
7b:86:92:32:bb:64:b0:2e:61:85:33:02:d5:da:db:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FF:51:8E:DE:DB:6F:75:E4:FF:2C:F5:E0:5F:A6:8C:AB:1E:49:3D
X509v3 Authority Key Identifier:
keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:37:cd:cb:05:2e:3e:e3:9c:2a:09:cb:8b:3b:83:7a:42:22:
33:a6:24:e1:e2:6f:25:14:76:b3:86:cd:0e:c3:76:2e:ab:46:
bd:4a:8e:c4:5c:d5:4f:d4:bd:26:8b:4f:cb:8a:3f:8b:3f:c6:
e7:89:79:4e:18:ae:cd:f8:9a:73:94:a5:2d:cd:7e:2b:64:ab:
49:eb:7b:c7:9e:71:ae:ec:4d:c8:25:d3:f6:ec:b3:46:19:0f:
c8:f6:ad:26:3a:8a:c6:0b:3b:58:34:15:00:af:2a:6b:53:4f:
87:05:6d:4f:85:66:9c:6d:ba:5e:c9:8c:36:00:7b:39:ea:d0:
49:ce:7f:eb:93:31:9a:1a:f9:30:2f:e2:ae:bf:e1:08:fd:4e:
fd:61:8d:94:67:7f:3a:86:06:8c:8d:77:4e:2b:46:98:02:2c:
39:06:4c:c1:b0:a4:0d:62:34:c0:d9:8f:c1:41:54:1a:dc:73:
bb:c8:20:c1:b3:af:ec:a4:f2:de:40:af:6d:85:0a:e5:0a:b9:
b6:82:8c:9f:63:13:12:ff:95:42:4e:a2:f6:a5:b5:13:b0:ab:
d3:89:d2:72:26:92:8f:3f:88:97:12:a7:89:4d:62:11:9c:e5:
36:6a:c3:1c:94:cf:64:08:4b:c0:aa:39:27:58:dd:e9:4f:ac:
55:60:8f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:59 2025 by rpki-client