
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
File: cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft (raw, json)
Hash identifier: WzvRdf/Y1ZwblyzC8QDm7r2FFkRLU/J1l4vSOx6k7bM=
Subject key identifier: 00:58:51:25:6E:D3:DD:2E:F9:31:48:5A:3D:73:C4:32:6C:D7:B6:D8
Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
Certificate issuer: /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Certificate serial: 0198D66023B221CC263621D20026A61A5502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
Manifest number: 09EB
Signing time: Sat 23 Aug 2025 10:01:21 +0000
Manifest this update: Sat 23 Aug 2025 10:01:21 +0000
Manifest next update: Sun 24 Aug 2025 10:01:21 +0000
Files and hashes: 1: YJ__Jpr1denKLIU4A4wwpaBEGuM.roa (hash: HQMvWJSgBySt+TDaIiCe+VSZte2lW30WZtz1IJWSvxM=)
2: cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl (hash: 0o2OSzZvWeuYeYEsd2Ze3goqBGL90X/xAvxH6goB08Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:23:b2:21:cc:26:36:21:d2:00:26:a6:1a:55:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Validity
Not Before: Aug 23 10:01:21 2025 GMT
Not After : Aug 24 10:01:21 2025 GMT
Subject: CN=005851256ed3dd2ef931485a3d73c4326cd7b6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:c6:5a:06:3b:0c:7c:fd:84:0f:65:13:d2:
76:37:c9:a8:64:01:77:b3:03:fd:66:64:0d:73:2e:
d3:5a:16:85:cc:10:5e:3e:f0:df:b4:04:e9:1d:73:
b9:bf:92:b3:d2:2a:67:c1:3e:f9:df:55:ef:73:a3:
a7:03:d9:9a:06:86:8a:50:2d:b5:80:f1:65:83:57:
95:8e:96:ba:62:02:52:5a:4f:e5:71:5f:58:0b:86:
f4:06:22:42:09:1c:c1:b2:fb:60:67:25:8a:ce:8c:
11:5d:86:2c:96:15:0c:11:d2:2a:a0:31:b8:97:cd:
1a:e5:2d:55:ec:24:2d:eb:a4:69:70:7d:b7:31:f4:
15:d6:c0:31:d5:1e:57:d7:3d:8b:95:8f:13:a6:8c:
9d:59:7f:60:f2:c6:66:32:1a:0c:38:a5:eb:c1:73:
14:56:4d:ab:ee:ff:48:c2:f9:46:8c:7d:8e:bd:04:
e1:b2:3e:f1:ea:f4:e7:4e:50:2d:76:02:84:20:45:
39:d4:4f:d8:21:72:d6:63:d5:75:c7:a2:d6:76:23:
b1:56:30:db:bf:c6:5f:8f:52:4f:56:56:72:45:f7:
f1:c9:03:c3:c7:f7:5b:d8:e3:e4:2c:07:11:b3:aa:
47:dd:36:a1:2e:41:0e:0c:fa:40:1a:1e:bd:c1:49:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:58:51:25:6E:D3:DD:2E:F9:31:48:5A:3D:73:C4:32:6C:D7:B6:D8
X509v3 Authority Key Identifier:
keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ec:4b:b4:90:33:ae:58:ee:07:4a:38:2d:44:0c:a1:10:95:
57:e1:ae:38:d9:00:97:d9:c5:aa:1f:30:e5:ea:74:57:0a:93:
6d:08:8d:a6:d4:34:e9:b4:71:88:09:5c:9b:d1:df:e8:d8:e1:
9b:f8:3b:14:ae:79:11:a3:3e:3a:74:0b:0a:53:e1:93:f7:8f:
9c:de:7b:9c:8c:49:e5:f9:92:e0:42:3c:29:5b:eb:cc:35:15:
f4:18:30:9e:a9:8f:f3:32:69:14:a0:c3:e6:20:df:8e:f7:bd:
13:c0:b2:76:18:f9:41:d9:d8:ff:1f:2b:5e:13:0f:f3:57:ab:
7c:c3:53:3b:1b:7c:37:67:11:08:e0:cd:8a:82:e2:59:be:64:
5e:60:40:d1:10:13:48:33:c2:0f:65:11:e2:59:4c:ce:1e:eb:
73:e1:ae:c3:d7:b1:0f:ee:a0:b5:81:17:c9:68:92:a1:5d:3c:
a2:c1:fc:d5:43:9c:8f:24:de:98:06:4f:20:3b:0a:5e:a3:7c:
e7:69:51:6b:b9:68:d6:ad:dd:1d:92:c3:2f:f0:31:fd:bc:18:
9a:dd:90:5f:ad:bd:5b:7f:12:ce:76:c5:e0:32:d8:15:45:89:
82:3a:70:49:72:c7:4d:e9:37:38:1c:87:25:ca:49:4d:0a:36:
52:7e:ea:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:14 2025 by rpki-client