Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: cbgNxksLinu6OG8ezd36LZ6j1JECLGV+MkEl+aAHg7E=
Subject key identifier: D6:BB:85:BC:EB:61:B6:72:29:6A:83:AF:94:8D:CC:72:50:85:ED:2E
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 019844764389BF29956A2565C73103C196D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 0571
Signing time: Sat 26 Jul 2025 02:00:57 +0000
Manifest this update: Sat 26 Jul 2025 02:00:57 +0000
Manifest next update: Sun 27 Jul 2025 02:00:57 +0000
Files and hashes: 1: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: nXujPECvE6CNtMUFJDhHrs4E/QG6hR2g1ncWGXLm5jk=)
2: qj9pJEL6aLQRmJQwwNdSHRT6Q7o.roa (hash: YXXU3MHXgJerIl9CeLyHeV8Hu3RdrFxQkf90wVwUCHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:43:89:bf:29:95:6a:25:65:c7:31:03:c1:96:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Jul 26 02:00:57 2025 GMT
Not After : Jul 27 02:00:57 2025 GMT
Subject: CN=d6bb85bceb61b672296a83af948dcc725085ed2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b3:28:3d:0f:43:0f:ce:5d:61:6c:51:47:12:
39:3d:14:a2:ba:3d:cb:36:eb:3c:02:2d:76:1e:99:
a6:25:e4:05:a7:6c:6b:6b:01:25:ee:06:09:0b:b1:
9c:e1:28:27:9e:d4:2e:9a:6f:4b:f9:b4:f2:fc:11:
4d:35:fd:0f:aa:54:85:c7:b2:56:98:91:f7:16:ca:
a1:4b:7d:8f:8f:1b:da:14:7a:5e:9a:fb:de:16:0f:
50:c5:78:f2:bf:77:c4:0f:8f:83:81:bb:5d:e2:76:
78:65:af:f0:09:81:96:76:3f:5b:04:ab:40:57:0f:
5d:74:36:85:1d:74:f9:ec:16:34:70:7a:25:d1:39:
c0:47:d9:57:9c:df:67:19:a9:99:fe:c4:d0:ec:ee:
42:6d:1e:6d:44:c7:84:90:ce:38:8a:0b:c4:53:05:
9f:dc:6f:b7:cf:c6:9c:c6:1f:18:42:d8:ec:a6:26:
b3:14:4a:8f:7f:85:a3:5d:4c:b8:6b:35:9c:fc:f4:
8d:e3:74:d3:52:35:e4:2f:ff:a6:45:ae:d9:f6:26:
73:9e:ec:60:3d:bf:22:a4:2d:16:f3:ff:c7:fc:81:
fe:0d:30:8b:d2:62:e4:a1:ee:a0:4d:9c:e2:e1:eb:
9e:0d:f1:a2:15:ca:2b:c1:c6:9e:ea:63:4f:96:f0:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BB:85:BC:EB:61:B6:72:29:6A:83:AF:94:8D:CC:72:50:85:ED:2E
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2a:10:fc:cb:60:f3:d1:11:43:86:67:fd:2b:76:b3:66:5c:
55:52:cb:be:3c:96:23:0f:9b:db:de:c9:67:03:9f:6e:ec:96:
05:2e:5f:18:69:44:dc:45:71:0a:4d:36:96:d9:11:2f:0f:8a:
57:4b:1a:07:f2:1d:b9:88:f5:93:a6:91:60:dc:03:db:93:d7:
da:8d:a1:b7:3b:95:69:a6:80:d9:4c:69:3a:1a:bf:b1:ae:4b:
1d:62:9b:22:08:f9:62:4e:30:02:84:14:1b:8c:56:c5:e9:dd:
23:15:e3:97:56:95:5e:5f:79:c0:b0:9d:ce:62:c8:ec:eb:81:
e5:7b:0f:cc:71:67:a2:6e:59:42:e3:da:80:24:a9:47:3f:e5:
f9:8e:44:25:84:d1:97:3d:87:06:4d:78:56:37:8e:c9:9b:0e:
d7:76:4e:d6:10:bf:92:b3:b7:b6:7b:d7:35:f8:d6:04:04:ce:
b6:ad:c8:f0:b2:15:ff:e2:e3:54:42:17:9d:df:4c:17:64:01:
f2:eb:98:7d:4e:05:08:04:61:40:0f:b2:3c:12:da:ad:46:50:
5c:80:4d:c2:83:24:c5:e2:ba:74:b1:d5:be:59:6d:cf:89:bd:
12:93:74:d2:c5:72:eb:52:10:d3:30:a3:c0:e7:61:13:08:0f:
3f:8d:02:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:24:43 2025 by rpki-client