Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
File: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft (raw, json)
Hash identifier: 4j0BV8kwucbrUucKGSU/2MqAlDtZWcKjEb266Eg8LIU=
Subject key identifier: 7B:DE:A2:3B:F1:77:E0:3B:CA:73:AF:61:AC:CD:6C:3F:81:A6:33:A0
Authority key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
Certificate issuer: /CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Certificate serial: 0198499C6563F782CF511A097A1DC3EF21D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
Manifest number: 1345
Signing time: Sun 27 Jul 2025 02:00:42 +0000
Manifest this update: Sun 27 Jul 2025 02:00:42 +0000
Manifest next update: Mon 28 Jul 2025 02:00:42 +0000
Files and hashes: 1: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl (hash: 41JHs7CEDMS3BzAIcMlh+gIYGOSolNK62s1HpTpMS8o=)
2: 5tz1cuLC3Spal7LSIEjI-Qlcl6U.roa (hash: XSoR4/ODhnGd0USG7NRxHx6V9kNwJuT3OUfa19EcNCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:65:63:f7:82:cf:51:1a:09:7a:1d:c3:ef:21:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Validity
Not Before: Jul 27 02:00:42 2025 GMT
Not After : Jul 28 02:00:42 2025 GMT
Subject: CN=7bdea23bf177e03bca73af61accd6c3f81a633a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:70:69:a1:69:ca:97:86:ef:45:70:bc:de:
e2:e3:24:2b:23:e9:0a:a8:be:3b:d3:5b:43:fa:16:
bd:9b:e6:ed:48:09:b8:51:3d:54:14:0e:d6:35:13:
a6:fe:81:dc:a9:11:4d:c9:1b:de:40:ff:06:85:5b:
7a:71:da:04:e0:ae:82:46:5c:f8:63:25:9a:ff:d2:
b8:d5:7b:02:51:5c:66:f0:f2:87:4a:1a:c1:94:a5:
e4:cb:3a:25:3b:09:93:9c:ee:2f:3c:0f:b1:56:d3:
ec:9b:f9:bb:b7:1f:17:d5:f2:0a:df:8d:5d:35:f5:
63:f9:30:7d:cc:52:ce:83:f8:ce:38:05:f0:05:39:
8d:9f:93:bf:70:e1:50:03:e4:6a:68:cd:4e:69:79:
e9:2d:bd:d5:9a:d6:75:72:8e:76:7b:90:84:84:a3:
37:95:56:ac:8c:b7:53:7b:d0:92:ec:24:15:f4:ea:
12:68:60:0f:1a:9a:fb:28:67:27:6c:b6:91:9d:45:
17:7d:42:6e:4e:31:a3:83:18:b0:70:b6:dc:0c:c4:
7a:10:70:df:c2:d4:5a:13:66:47:26:ac:e0:75:31:
9c:94:49:81:09:fe:7d:80:2a:ca:1a:e2:1c:33:c6:
01:8b:a5:c9:00:a3:68:47:23:c1:09:6a:10:c0:96:
21:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DE:A2:3B:F1:77:E0:3B:CA:73:AF:61:AC:CD:6C:3F:81:A6:33:A0
X509v3 Authority Key Identifier:
keyid:D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:16:a6:15:65:5e:41:e9:6c:c5:3e:4c:45:5c:6e:5a:4e:c1:
74:40:3c:64:bc:e7:2f:33:bb:4b:7f:d2:4e:de:e2:1f:f2:0e:
05:90:b4:a7:a7:2b:1c:47:a8:d8:23:f1:61:c5:ae:de:5f:70:
69:f0:c7:35:dd:f7:bb:62:33:11:da:aa:8a:55:83:2e:c1:ac:
5c:1d:04:f5:84:c6:90:af:69:59:90:23:c7:2d:d5:a8:7e:c3:
e6:f0:b8:08:2e:fe:b7:c8:55:ac:b9:c9:03:1e:9d:d3:7f:60:
79:60:bd:b2:0b:69:6a:b3:74:66:83:4a:dd:65:78:70:00:9c:
69:a8:81:a3:0c:dc:1a:59:5a:cf:88:f8:3b:56:e5:a5:d6:d9:
2a:9e:83:c7:73:f8:36:d0:6c:6c:15:53:67:ca:4b:d9:3a:e2:
94:89:c0:ff:3e:a3:f9:ca:b0:4e:55:e0:68:a7:76:45:7e:f4:
ce:d0:41:90:3a:f3:02:ad:e3:d5:3a:c6:f2:21:e2:3b:6d:cf:
3a:13:39:d8:97:63:b6:ca:c1:82:98:34:db:a6:2f:64:6e:f1:
0a:01:9c:0c:12:6c:49:5b:89:ef:4f:c8:42:9f:09:cf:0c:41:
37:f0:9d:3c:78:1b:fd:fb:00:b8:1b:d0:cb:3b:49:4a:e4:b0:
d6:bd:0f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:46 2025 by rpki-client