Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File: 0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier: vft2+h1OUyBT3pohcqW1KGUXov7/mY6wm58/zf7Ki1g=
Subject key identifier: 7C:BC:56:F4:68:4F:24:08:97:E9:E8:B2:8C:40:D0:74:50:BC:72:F4
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial: 0198D73B200F4DA79E858A89A237F4C5188D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number: 0A4F
Signing time: Sat 23 Aug 2025 14:00:32 +0000
Manifest this update: Sat 23 Aug 2025 14:00:32 +0000
Manifest next update: Sun 24 Aug 2025 14:00:32 +0000
Files and hashes: 1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: E7Xqnol//GfeaJI29Vhg+/NHdZd09+O1iH62nFJ2I8w=)
2: PdXLVimBA8zILWLashg1LUqBqm8.roa (hash: IrtzMysR6KSQR0SZiM1b2jUK5M57dKBFlK4qFH4B+Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:20:0f:4d:a7:9e:85:8a:89:a2:37:f4:c5:18:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Validity
Not Before: Aug 23 14:00:32 2025 GMT
Not After : Aug 24 14:00:32 2025 GMT
Subject: CN=7cbc56f4684f240897e9e8b28c40d07450bc72f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:8a:e9:3c:18:3f:10:08:72:8c:a4:5b:ac:
10:f7:e8:73:c6:ff:0e:ae:1a:7b:83:9b:08:ec:3f:
44:d6:cd:8c:20:ae:82:82:0d:00:18:4a:74:7c:16:
a8:25:26:e5:ce:93:86:be:da:82:ad:c1:73:03:78:
6c:1b:be:8e:4f:ee:4e:eb:c8:4e:b1:a2:c6:a9:99:
00:60:23:26:b9:5c:11:39:ca:f1:39:8e:ac:ac:b9:
36:4a:9e:18:c6:1f:49:56:54:98:e2:ad:77:c2:bf:
93:6a:6c:66:01:1f:7c:11:64:e7:37:01:d6:0d:2c:
3a:36:38:cb:94:1c:66:f1:1a:49:d1:73:cc:ba:b9:
48:7f:e7:18:38:49:63:fe:93:37:14:11:e0:83:1e:
05:c4:37:f8:0f:88:7d:ee:00:a2:11:48:c3:50:4c:
a4:7d:05:3a:8d:8d:ec:ef:fd:6b:eb:7e:b2:d0:0f:
69:dc:bf:60:3d:69:15:af:04:bf:25:74:be:0d:30:
d2:fa:05:56:0c:0a:b5:23:f3:80:9a:21:95:9c:10:
d2:ad:10:ab:12:60:f5:d9:4a:e0:3f:f8:3d:43:7e:
8e:69:31:29:3b:dc:2e:ad:49:0c:ce:eb:9b:dc:5f:
eb:d0:62:09:b5:e4:40:41:1f:c0:d0:4e:59:02:a7:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BC:56:F4:68:4F:24:08:97:E9:E8:B2:8C:40:D0:74:50:BC:72:F4
X509v3 Authority Key Identifier:
keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:dd:ac:db:84:57:e4:dc:b2:9e:ef:a2:19:36:b7:85:81:3e:
b3:00:c0:5f:10:46:81:b9:4e:1a:02:fd:9f:9d:4f:03:fe:f7:
70:3a:f3:cf:87:32:73:6a:75:b0:62:3c:b2:ec:10:37:a3:68:
62:0c:69:8d:10:79:36:fe:ea:70:1f:f2:aa:82:15:eb:c9:a9:
6b:02:78:6d:d6:95:39:77:9c:1a:6a:a1:4d:c7:79:86:02:56:
c1:f9:50:4b:b8:55:82:85:47:b9:a4:72:19:0d:bd:f0:07:98:
bc:e9:67:bc:aa:6a:da:f2:33:0c:2e:f9:1f:0e:b9:a7:ad:7e:
7c:7e:8f:fc:2d:ba:21:b7:5b:6e:8b:f2:49:e3:02:c9:e0:c8:
f3:b3:5e:9d:72:df:c7:9f:ea:b5:84:02:52:f4:22:e4:ed:a7:
37:2e:1d:0d:9b:3d:e1:72:d9:03:d9:6e:6e:f4:eb:fa:45:3f:
e9:54:8e:c2:b3:6d:57:2c:9e:e1:45:79:1f:f9:21:55:ca:00:
3d:c1:04:16:78:a8:1d:58:84:61:80:c9:cd:d9:37:57:61:57:
8e:ad:89:da:b6:ea:71:85:dd:ff:41:5a:59:fa:7b:67:9f:a7:
bd:6d:a8:25:a2:e7:ec:9c:9b:80:bf:ab:7f:db:ed:7c:81:b4:
0e:4a:1e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:44 2025 by rpki-client