Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: o4QXsfziK8kfj0i+eNXAxJAzbPYpxE9Yp5puHKwfZBg=
Subject key identifier: 7F:FB:AD:32:82:31:AA:95:AC:04:B8:20:04:F4:4F:22:70:B4:F0:7C
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 01984AE5DAA7F5BCEF705A0F975BD8322B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 0D8F
Signing time: Sun 27 Jul 2025 08:00:34 +0000
Manifest this update: Sun 27 Jul 2025 08:00:34 +0000
Manifest next update: Mon 28 Jul 2025 08:00:34 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: ZG75Rl5XqclGoeGtv3lqIKt0RDL/4GwXl+V7qEmk7Tw=)
2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:da:a7:f5:bc:ef:70:5a:0f:97:5b:d8:32:2b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Jul 27 08:00:34 2025 GMT
Not After : Jul 28 08:00:34 2025 GMT
Subject: CN=7ffbad328231aa95ac04b82004f44f2270b4f07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:ac:39:70:63:7c:cf:93:6e:3b:c4:f7:8b:
cc:0d:26:37:3d:fa:63:0c:b6:7f:ae:6e:38:25:a0:
5a:4b:ef:58:48:ac:3a:64:8c:dc:ed:9b:57:c3:a4:
09:ec:43:cb:fb:54:0b:17:0f:7f:05:a9:5f:c9:57:
1e:70:33:41:2d:48:fb:3a:90:60:ae:89:77:65:bb:
b3:89:2f:16:dd:a9:20:69:a4:56:a0:b5:f1:4c:33:
38:34:4e:cb:26:8a:27:f1:d3:80:dd:ff:48:98:a7:
08:82:7a:75:61:0b:78:88:7f:58:30:72:96:e1:4a:
6f:cb:17:7d:d8:26:79:3b:34:42:f9:a1:fe:b9:41:
48:3e:98:24:ff:12:e8:0b:35:cb:38:ac:92:94:66:
2d:ca:fd:34:f6:ed:b0:a6:7d:6f:be:ec:97:54:0a:
4c:8e:1d:0c:93:66:8c:ea:a9:58:50:6e:83:5b:b0:
b2:6a:29:4c:54:a6:4d:e4:61:c0:4a:10:df:12:8f:
7b:dc:9e:9b:16:d9:8d:5e:e8:15:54:54:79:bc:f1:
7c:b8:e6:13:a0:a7:6a:fe:f2:5c:12:2d:a7:8a:10:
b7:88:d1:d4:db:53:73:c2:02:46:59:0f:f9:64:8a:
09:2c:00:02:ae:dc:7a:e2:78:6a:89:9d:ec:ef:20:
de:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FB:AD:32:82:31:AA:95:AC:04:B8:20:04:F4:4F:22:70:B4:F0:7C
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d7:a3:27:60:08:8d:3e:ec:7e:09:49:92:27:27:87:e0:9b:
bc:cb:b2:6c:e5:c0:e7:f7:3d:f4:64:93:8c:c7:1f:e8:f9:39:
f5:2e:b9:d1:f1:b6:a4:38:a9:76:f2:e0:04:56:4b:8e:2b:de:
9f:a8:65:3c:2e:a3:06:7f:2c:e4:be:a5:8a:41:13:43:bf:7f:
4b:bd:cb:80:b9:51:08:a7:45:9d:bc:da:48:4e:7c:61:97:56:
14:1e:81:13:1c:1f:5e:71:94:89:35:7e:1f:e6:87:51:d2:a0:
a2:f1:0c:e3:f7:b6:69:59:8c:4a:1b:2c:f1:e8:aa:bf:88:80:
e7:7d:25:32:5a:8d:c5:1f:ec:ed:66:81:29:96:7d:fb:45:b5:
17:1d:e9:9e:e6:25:f2:58:86:8c:79:9e:03:73:d3:36:98:7a:
68:db:09:98:a4:df:87:f8:81:b7:4b:d5:bd:3c:15:66:b8:01:
95:25:f8:2f:23:c8:64:bd:41:37:5f:56:d6:7d:39:18:f9:2c:
4d:8b:f4:5b:15:54:31:64:00:30:4b:67:df:df:00:60:7e:20:
5a:82:89:a8:05:a2:f6:11:59:e2:41:c8:3d:b6:97:a6:88:4e:
9a:17:1f:90:6d:7e:ac:cc:85:6e:77:17:1b:74:2c:6e:99:aa:
fe:51:47:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:32:42 2025 by rpki-client