Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: HHo/xG04PxT9s5LCC7Wa5VAWGMCzLK4DVibAD9Yc5Tg=
Subject key identifier: 3A:21:02:41:0D:72:13:2C:40:96:56:7B:7F:8E:16:00:6A:3B:CD:C7
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 0198D404EABD9747EBB6840F07BF80E38671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0CC8
Signing time: Fri 22 Aug 2025 23:02:28 +0000
Manifest this update: Fri 22 Aug 2025 23:02:28 +0000
Manifest next update: Sat 23 Aug 2025 23:02:28 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: DXDn7FHRA5qUyCYb6A+06R2xx7ISeE9rS7MYT8u/Oqg=)
2: 1-Mnf3JnGm30D3TVdL8D8i-JJTg.roa (hash: FQArZOtG/iI5+2OZ+rGhEkabMbeYZiFVJ69aFAVvKUM=)
3: ViACi2znHcxjvEoTWJabRySlSug.roa (hash: /lKDXYbMBEGiN9zYRBMEKiyvRO0eOc45ePzpVSUQyuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:ea:bd:97:47:eb:b6:84:0f:07:bf:80:e3:86:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Aug 22 23:02:28 2025 GMT
Not After : Aug 23 23:02:28 2025 GMT
Subject: CN=3a2102410d72132c4096567b7f8e16006a3bcdc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:33:36:7e:b1:f4:73:f2:7f:f3:d8:4c:37:
c8:48:92:6c:a3:39:50:c4:3b:cb:5d:61:f3:24:df:
ec:3b:41:82:09:8f:da:f3:54:5b:83:f2:33:a2:66:
25:96:6d:12:4c:d1:38:98:6a:16:d1:18:57:89:b5:
52:47:0e:1e:3e:12:d7:44:77:3e:9d:78:ba:4c:7d:
26:64:2a:97:35:46:95:27:fe:a0:46:12:3d:68:79:
f7:b2:de:07:29:2b:f3:bd:b8:34:12:0c:ef:33:3f:
5d:e6:c2:a1:01:b8:e2:fb:a4:71:1c:b5:5e:61:09:
26:5f:c4:dd:99:0d:74:36:9b:4d:1a:a3:33:d4:39:
c8:35:93:8c:35:38:0c:44:7c:e3:f4:a0:4f:19:2c:
d9:a1:36:3f:a3:8d:6d:c3:c6:72:e1:0d:1d:2d:5d:
85:1a:c1:51:09:73:16:1a:8b:78:54:f0:dc:5b:4c:
10:48:8f:b7:6d:23:92:53:2d:a1:b9:b3:99:bf:a1:
90:b7:e6:e0:6c:bb:5e:f7:ec:cb:6d:5c:dc:f8:3e:
e7:18:52:b0:3f:f4:7a:48:7f:90:2d:30:3d:a2:ea:
d0:90:80:b7:81:5b:5c:c0:74:5e:b5:20:42:31:81:
85:3f:17:9a:e2:1d:c5:f5:ce:31:bd:e8:6a:d9:4c:
23:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:02:41:0D:72:13:2C:40:96:56:7B:7F:8E:16:00:6A:3B:CD:C7
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3c:cc:04:50:e0:c6:e0:86:1f:0e:b5:db:b1:3b:02:24:e7:
37:a1:e8:52:10:36:7a:e6:0c:60:27:cf:6f:12:29:9a:1c:ad:
c3:24:fa:52:4a:73:1f:ae:45:04:2e:20:9a:5f:71:73:f9:15:
b1:00:ce:aa:f8:9c:0e:93:9c:65:12:a6:e6:04:28:0d:45:c4:
b0:58:bb:b8:82:96:89:72:9f:4f:23:13:c7:68:ef:df:6c:8a:
2d:38:d7:53:b1:52:7a:64:9f:86:fe:59:bd:e1:be:31:b6:66:
72:ad:84:34:b3:25:bc:a0:7a:1e:55:74:51:14:ac:46:b3:f9:
b1:a1:25:68:22:51:6d:a4:fe:7a:c7:30:0b:e2:74:ac:ed:91:
e7:1b:5c:2d:ae:ba:13:7e:6f:2d:43:9c:c0:d5:da:cf:e5:e9:
f6:68:9c:66:a4:8b:a7:63:93:33:4b:32:95:e9:df:b1:06:ae:
d4:a8:dd:4c:d6:b5:84:75:04:4c:74:13:ac:fa:4a:1e:17:7d:
37:c0:0b:b8:cc:0d:de:d5:17:c5:e5:08:b3:01:e6:94:70:d9:
44:3c:76:b0:84:45:8d:4f:6c:4c:0e:b1:97:2a:f6:a3:01:ed:
b7:f1:38:51:3c:c8:bc:a5:16:d5:1a:63:cb:49:c2:3a:17:52:
e6:2c:6c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:19 2025 by rpki-client