Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: pRPIeLLK9BqaOK6F4HpEPFKh2TlumOPoSy8fWhDAs90=
Subject key identifier: 68:E6:E7:D2:44:55:15:F0:11:5F:1C:B1:94:38:AA:E8:FA:41:B6:53
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 0198D404C53B942055CEFD45D9D65400015E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0D2D
Signing time: Fri 22 Aug 2025 23:02:19 +0000
Manifest this update: Fri 22 Aug 2025 23:02:19 +0000
Manifest next update: Sat 23 Aug 2025 23:02:19 +0000
Files and hashes: 1: WiIPyXHByzAssjj4VKSqXNq3hNo.roa (hash: zCz09ISW2vqCRWl6+kt0e/gaUd26cQmDKkxwLzxkeJQ=)
2: XLNp588BlhjTzq9wL8KooDNiDfQ.roa (hash: yqzj3pa+xK6sQ61wkjeNUDLd0sOcE9ePSDM9S9DIM0g=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: /4kAdyjvQRA8OQAIyF/gZBpkUDBICVgDK/qsNZnr4Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:c5:3b:94:20:55:ce:fd:45:d9:d6:54:00:01:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Aug 22 23:02:19 2025 GMT
Not After : Aug 23 23:02:19 2025 GMT
Subject: CN=68e6e7d2445515f0115f1cb19438aae8fa41b653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:02:fc:f0:98:a8:ef:d4:b8:de:a9:97:f1:65:
af:81:c8:7b:7d:e9:87:5b:ed:ca:63:55:05:35:2b:
c1:75:71:7e:f7:81:02:c7:b8:cc:a4:dd:c2:45:2d:
a3:9e:7d:4d:f8:01:48:81:53:30:9d:e1:08:50:63:
ae:ab:d0:64:fa:33:0c:11:3d:56:80:33:61:e2:b2:
ac:45:a1:98:ae:2d:0a:fa:96:fa:4c:36:79:f8:f4:
76:6a:07:38:de:0f:d4:8b:7c:f7:01:10:83:72:1e:
61:02:cb:1f:86:a6:ec:28:31:36:84:d7:ad:0a:5b:
64:aa:45:9a:10:44:ca:e4:67:76:48:e8:65:11:f7:
21:9d:b0:44:4d:c8:76:2a:58:8a:9a:7e:dd:03:f2:
e9:5c:e3:9d:08:92:f5:e3:29:88:7a:3c:0e:90:56:
ed:a6:b3:bd:d0:3b:75:3d:a4:6e:eb:80:31:a0:db:
b8:9d:fe:4c:a5:05:cb:fa:37:11:7f:a4:0a:a1:e8:
7c:83:de:9e:2e:24:ea:a4:31:b7:7e:ea:b0:33:cb:
a3:5c:e5:ca:13:fa:ab:98:eb:32:7b:a3:ea:02:42:
02:b3:b2:65:02:4f:69:54:db:4f:21:26:d9:12:99:
59:76:f4:58:77:04:94:d6:6b:0c:0e:09:8a:f1:e2:
b5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:E7:D2:44:55:15:F0:11:5F:1C:B1:94:38:AA:E8:FA:41:B6:53
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a0:a0:8a:e6:f5:f3:1f:41:5f:2d:f4:8b:da:e5:ea:1f:2e:
c9:b7:a9:da:53:39:3d:f4:73:a6:fe:36:1e:66:33:d1:69:34:
97:39:21:04:aa:fe:e4:41:17:66:10:92:df:10:59:c2:dd:a7:
98:0a:0d:46:db:ba:79:ab:77:d1:da:99:ae:05:25:3e:64:a7:
4b:71:8c:06:d3:a1:d4:fd:4f:bb:90:33:39:3e:fa:ca:17:f5:
52:83:2d:95:b9:15:85:59:6a:93:e2:d5:8b:1c:40:9e:d5:e9:
3c:01:51:d6:8f:ba:8f:d8:e0:48:9b:2a:f9:23:b3:69:ab:91:
48:64:27:81:0b:b7:89:46:2f:dc:2a:c9:bc:b6:73:11:84:21:
0e:e2:d8:2b:4c:e2:45:e2:0b:98:63:01:a8:20:9a:07:79:17:
03:b9:da:3f:f9:9a:49:5d:8b:1a:32:4f:79:44:7b:b3:28:3d:
a6:db:e3:43:ba:e3:b7:8e:5f:67:f8:a8:9b:20:15:88:32:a0:
05:13:f9:ca:d2:0b:8b:ab:1c:d5:bc:ef:d8:82:0f:7c:bd:03:
10:14:79:b9:22:bd:1b:88:14:33:b1:6c:4d:96:e7:d4:87:54:
3b:0e:f5:08:83:04:ac:ce:f3:b7:0b:73:0b:73:cf:5d:c2:ea:
3c:c4:a3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:50 2025 by rpki-client