Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: kugg1QcVXQXDWataf9nvB3tu4lVh/pauiaEROuUTK54=
Subject key identifier: 1F:2D:DB:A9:08:84:D2:DF:4E:1E:3D:D6:35:2B:61:BB:F1:AB:0A:FE
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 01984AAEBC9625C0ED1AED73FDC8C6D7343A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 07:00:22 +0000
Manifest this update: Sun 27 Jul 2025 07:00:22 +0000
Manifest next update: Mon 28 Jul 2025 07:00:22 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: 70iRwFd+/dMG65R6Oapl8mNRfFOR/fkA6f8JW/JQFQA=)
2: 9-3CRoQW_QjusaOMGpyHscSTGa0.roa (hash: hSgLJd/C+rhopgNVHjf6fxNZLuf8+Okfp+V4kR/UeS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:bc:96:25:c0:ed:1a:ed:73:fd:c8:c6:d7:34:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Jul 27 07:00:22 2025 GMT
Not After : Jul 28 07:00:22 2025 GMT
Subject: CN=1f2ddba90884d2df4e1e3dd6352b61bbf1ab0afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:27:54:a9:99:ca:8b:db:8d:cd:ae:80:13:
22:a6:2f:7b:e4:64:9d:d6:ee:86:c6:46:c0:23:87:
c5:b2:62:f6:d1:37:58:c1:9e:fb:42:6f:6f:50:af:
49:19:18:d5:46:16:f3:a0:13:3c:99:5a:f2:89:bc:
2f:83:3e:9f:ce:41:2b:5a:a6:e2:a7:a5:8c:2c:74:
dc:53:c8:54:86:ee:50:44:ec:e2:f5:5d:d4:e1:58:
20:08:dc:37:af:98:8a:e2:2d:a9:9d:e7:59:68:c8:
ab:47:dd:bd:70:fc:25:42:27:1b:9f:5b:e8:3c:77:
1d:33:72:34:37:99:ad:2e:4c:53:12:c4:de:98:df:
ad:d3:c6:a6:86:38:e9:46:83:37:9f:0c:28:50:66:
e0:3d:d9:07:61:af:db:4f:3b:1f:4c:b3:e0:9c:72:
e9:5c:42:d9:6a:e7:31:5e:39:10:21:8e:6c:3d:53:
ef:e4:83:ae:5d:46:1c:47:e4:96:9b:b7:ce:03:2d:
8f:6e:94:ec:22:f5:e5:f4:50:f9:29:d1:1e:5d:b9:
f0:5a:52:da:43:1c:be:7f:88:85:5a:62:08:8a:b9:
d8:2b:c4:81:10:88:87:a2:ce:c8:54:32:bd:6b:09:
80:fe:bf:75:f6:23:8b:cd:1b:68:28:ae:f7:f7:42:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2D:DB:A9:08:84:D2:DF:4E:1E:3D:D6:35:2B:61:BB:F1:AB:0A:FE
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:53:ce:f4:14:ab:bb:0e:1d:ba:6b:f0:bf:13:ba:da:9b:61:
cd:2d:bb:9d:97:82:ab:1c:ae:e5:65:89:5e:53:52:79:2c:78:
69:d1:3f:df:4c:e0:94:bc:c6:2a:48:13:39:db:a9:61:35:ed:
6f:b0:58:b7:a1:c1:2d:f3:b5:7c:f5:eb:49:2f:f0:9c:dc:39:
b1:34:95:e7:ea:a4:44:f1:1e:c0:1a:6d:a7:b4:ab:9b:b2:95:
98:49:2e:cf:f3:7c:21:80:8a:89:56:93:b9:bf:0f:14:6c:52:
f7:d2:73:ed:6c:b5:4d:43:a0:97:c7:35:e4:5e:58:c4:41:8a:
f5:95:e6:c9:3f:f6:34:29:ba:b0:7b:76:0f:2a:6e:9f:0d:39:
4b:39:01:1d:f7:98:45:f2:eb:63:6f:b8:91:71:c4:90:fb:95:
57:4c:40:1c:0d:4a:07:03:51:ef:ac:be:49:44:c1:eb:41:ff:
df:a6:a0:84:47:b3:8c:0b:55:3c:44:75:2f:1b:80:02:4a:98:
dd:2d:4f:f1:67:96:da:af:34:6a:63:97:01:6e:ec:e8:a1:22:
68:6e:11:22:f4:48:aa:d7:a1:8c:e4:78:b3:4c:50:a7:d7:43:
47:3c:b4:36:f8:e4:f9:ee:eb:88:f7:58:8c:96:bf:3f:72:82:
b4:40:7f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:37:36 2025 by rpki-client