Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
File: pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json)
Hash identifier: mJIMHM5eX0MptMhDtLnRuMel8M3ijKta2W9O05YKwUc=
Subject key identifier: 10:EF:62:CF:5C:68:CA:B3:EA:39:E0:51:C4:47:8F:B2:95:B0:A6:74
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Certificate issuer: /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial: 01984778A354BE67D53F6A4214797A4C6ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
Manifest number: 0CEB
Signing time: Sat 26 Jul 2025 16:02:25 +0000
Manifest this update: Sat 26 Jul 2025 16:02:25 +0000
Manifest next update: Sun 27 Jul 2025 16:02:25 +0000
Files and hashes: 1: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: f9u//HBq8orZbZWp9CRzF9u7txxN7031S0QGgNEade4=)
2: z4rUk_E4AGcR7M7P_EXqaAGwIrE.roa (hash: vdPESCF/t7U31UD2O57fuph7iNy0Hlzj8MYZvwZ4bj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:a3:54:be:67:d5:3f:6a:42:14:79:7a:4c:6a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Validity
Not Before: Jul 26 16:02:25 2025 GMT
Not After : Jul 27 16:02:25 2025 GMT
Subject: CN=10ef62cf5c68cab3ea39e051c4478fb295b0a674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:27:ab:86:a5:fa:8e:7f:48:ee:ba:c4:98:
af:b9:10:98:02:05:92:75:95:e1:98:48:b4:10:ed:
3a:6e:d9:c4:78:ee:2b:04:53:45:25:1b:1c:4e:f2:
8c:9d:66:31:99:12:63:a2:af:a1:bb:3f:e2:51:53:
94:e4:71:bb:1c:35:a8:84:79:37:e1:9a:9d:a0:6c:
66:bc:84:7d:75:2f:69:a8:96:ae:9f:1d:29:a3:b8:
a6:70:fb:6b:99:60:62:60:8e:eb:da:f1:00:e2:e5:
06:cf:35:05:3b:ea:fe:6b:d8:2c:9c:e2:25:9c:df:
e2:00:7a:e5:21:22:4b:86:d3:d1:7d:98:ff:54:c8:
8b:af:3a:5c:de:92:59:fa:57:98:c9:54:4a:1b:02:
48:ff:a6:43:da:a0:fc:c0:73:8c:1b:31:d3:73:09:
b5:91:a4:74:1e:21:48:42:fe:0e:25:17:a1:3c:49:
81:81:64:43:6d:b2:56:ec:96:6e:92:5d:64:d3:37:
f4:c8:d2:38:43:ad:d6:26:17:4d:95:15:28:8e:26:
cc:4d:a7:7b:41:0e:a6:40:c4:64:b3:29:8b:8c:1e:
b9:97:d0:f6:d6:7e:51:80:bf:0d:2f:b5:b8:9d:a9:
eb:35:f0:82:3f:e2:5c:74:82:ae:d5:02:e2:b7:66:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EF:62:CF:5C:68:CA:B3:EA:39:E0:51:C4:47:8F:B2:95:B0:A6:74
X509v3 Authority Key Identifier:
keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bc:03:1d:97:75:2f:86:5e:af:53:96:a4:7f:79:43:b8:de:
f4:47:2b:bd:e9:b5:d1:39:1c:0d:21:c0:d0:13:4a:c4:99:97:
80:f5:8b:f1:85:f2:57:35:e9:ca:f5:f2:eb:11:9f:b6:58:39:
94:57:af:d6:b5:da:95:75:9c:ab:44:d7:2c:bf:e3:f8:15:d2:
6a:9c:8e:eb:a0:de:5d:b4:f3:8b:f2:4a:f3:08:b5:7b:9c:18:
d9:e5:f4:e2:98:f4:b4:57:72:f4:82:a4:17:e4:82:6b:1b:ad:
8e:55:25:d9:6b:9e:f8:ce:23:bb:66:2e:96:c5:83:22:25:35:
ee:a3:45:e5:9a:56:68:62:68:c4:6a:3c:d9:dd:98:4b:7c:26:
07:93:84:41:51:f6:02:85:13:05:42:a5:cf:b2:06:37:96:d9:
38:31:39:02:b1:ba:f3:14:af:53:ca:fc:d6:a9:4c:26:07:58:
b3:55:c3:ac:c2:db:06:41:a0:73:65:ca:71:71:bc:6a:b8:b8:
39:07:10:e4:cb:a9:6f:2f:01:e7:c7:5c:c1:47:f5:c5:3d:89:
50:3b:f6:d9:c8:72:f3:a7:45:9d:d3:4c:39:14:ae:6c:40:11:
b9:fd:60:5d:a7:39:4e:64:e5:9b:b4:84:eb:b2:76:8b:7c:db:
d3:55:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:55:55 2025 by rpki-client