Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: GwhUl+21jGCg2ObchLaMymbM230Nflg/0e9NIxk9wlk=
Subject key identifier: DD:64:54:28:17:27:38:A5:AA:D9:DE:57:2A:9B:FE:49:85:EA:0E:1C
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 0198D65FB431EA7362E102AE4B791B359346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 12E2
Signing time: Sat 23 Aug 2025 10:00:52 +0000
Manifest this update: Sat 23 Aug 2025 10:00:52 +0000
Manifest next update: Sun 24 Aug 2025 10:00:52 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: E2W29R1awCEGYCnYoOtcw9t6UnUFVdeDTPwBfAegqj0=)
2: KrQvju8wsP_1pgegWQDfP_dBbsE.roa (hash: 41ILiMyCbiBXLBStCWRCt8ZnN2evNZdt0aku7rFi6gM=)
3: MT4hr9PSkUajZkci1pWS9v2orok.roa (hash: qezGbt2cfl90iVziKgXNGmy2fO9q+dUTbPbEn9xA5FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b4:31:ea:73:62:e1:02:ae:4b:79:1b:35:93:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Aug 23 10:00:52 2025 GMT
Not After : Aug 24 10:00:52 2025 GMT
Subject: CN=dd645428172738a5aad9de572a9bfe4985ea0e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:08:a9:48:e5:89:22:74:fb:c0:c9:eb:d3:16:
6c:3c:28:c1:e0:aa:8c:44:4e:f6:1d:56:3e:4d:d0:
b7:54:61:2a:41:25:0e:96:07:91:45:27:b9:41:0e:
d3:8c:ad:a8:92:cd:6f:ff:aa:88:c9:3d:c1:ed:af:
2d:bd:59:a9:e4:2e:f1:a2:9b:da:b4:d4:b9:e0:e3:
0b:33:0c:2a:ee:54:3a:26:40:a8:3f:36:21:14:b3:
0f:cf:af:9e:ab:0b:0e:f5:bf:c2:50:8b:79:98:cf:
e7:5f:fb:b1:5f:72:54:d3:85:4c:f0:35:7c:5a:ba:
4b:f3:c2:2e:5b:b9:54:6b:22:a3:72:6e:25:53:08:
00:b0:88:9d:93:48:2d:07:d7:9d:90:ad:a0:5f:07:
ee:aa:ee:7a:c3:82:d7:64:53:b8:e0:37:e7:d1:32:
88:8d:0e:01:38:b7:f4:6c:64:1f:f5:a3:67:ba:67:
da:14:84:d2:02:35:59:8a:98:02:4a:21:d5:be:11:
83:f7:29:fe:5f:d4:d9:aa:06:d8:0e:b5:ec:ad:e6:
30:13:03:64:76:d4:5e:2f:50:1d:e0:ba:f1:11:73:
67:5e:70:cb:57:d6:6a:95:d9:f4:84:b9:12:b8:75:
d2:60:b2:af:43:bf:7e:9f:60:12:80:c5:32:97:38:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:64:54:28:17:27:38:A5:AA:D9:DE:57:2A:9B:FE:49:85:EA:0E:1C
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7e:37:c2:93:7f:58:a8:41:3c:67:59:10:3f:3d:f6:6d:42:
12:79:41:a4:f8:84:bc:20:22:12:45:9b:76:c1:96:20:63:05:
7d:5a:f2:a6:db:b3:14:40:a6:dc:62:bc:d4:a3:5d:db:41:a7:
c9:00:17:75:97:43:5f:7d:5d:09:30:3b:fb:bc:62:be:0f:e8:
2b:e4:d2:84:e4:69:1f:a9:6c:a0:89:81:8e:bc:d8:e4:f1:55:
f1:63:6a:28:85:28:38:1f:54:f1:b1:cb:1b:5c:66:56:98:fb:
f8:81:1b:dc:b2:43:3a:d8:5c:e6:56:6a:62:a3:77:3d:67:9a:
f0:d9:5f:72:3b:94:cc:be:84:6c:c7:4d:af:84:1e:de:f6:cd:
40:b9:ab:4b:9e:d2:fc:50:7d:4a:81:1f:81:72:ce:6b:c4:bc:
1a:8b:de:40:ae:e0:a9:8d:ae:25:c3:40:20:f5:e5:6b:7b:12:
e1:09:9a:25:b4:27:08:ed:67:36:a5:38:c5:9e:94:4a:eb:f9:
c8:0f:ba:5b:9c:6f:ea:8a:25:e1:cf:4c:2b:93:b2:50:d2:d8:
07:dd:e0:e3:6c:64:76:5e:91:59:c6:35:82:c2:97:60:39:ea:
92:99:9b:12:7e:ca:a3:2e:54:7e:f0:7a:21:75:5b:71:a7:e8:
c1:87:b9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:26 2025 by rpki-client