Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File: 0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier: FdN9/+dxokxEoogGZjVh0oYc18j9Zvu21rL0ZEtlbPg=
Subject key identifier: 72:18:5A:37:91:60:63:21:CF:90:BA:0D:92:A3:05:9E:7F:4B:BC:27
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial: 01984776D4369D3784411EE070C065F0F053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number: 0496
Signing time: Sat 26 Jul 2025 16:00:26 +0000
Manifest this update: Sat 26 Jul 2025 16:00:26 +0000
Manifest next update: Sun 27 Jul 2025 16:00:26 +0000
Files and hashes: 1: 00FQiMdjUQle4zFwKcr67i8rD5o.roa (hash: vAwK94aBbQ1WLXSLlow/JuiTreizX+JgqV5lHzwa2Js=)
2: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: byKGTcKaNy6BvEvZ2OrOU7WXSDwC4z4bDwodW8A6SAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:d4:36:9d:37:84:41:1e:e0:70:c0:65:f0:f0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Validity
Not Before: Jul 26 16:00:26 2025 GMT
Not After : Jul 27 16:00:26 2025 GMT
Subject: CN=72185a3791606321cf90ba0d92a3059e7f4bbc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:57:eb:20:10:3b:f4:82:fe:b8:55:41:ad:
f9:e3:5c:9f:66:47:9c:80:4c:85:5d:c6:24:4d:84:
17:a8:3e:2c:27:5f:8e:7c:9f:41:dc:8a:b3:ad:c5:
23:9b:8e:aa:60:35:d8:61:34:c6:ae:11:68:94:2d:
72:5e:c3:c0:cc:f2:3d:e8:2b:57:cb:80:c7:d7:dc:
36:d3:51:ee:d3:3c:24:72:18:6d:1a:6c:6d:19:72:
e8:4c:ea:0e:90:80:61:de:88:d6:11:c7:4c:06:b5:
4d:71:fc:fc:ba:9a:14:9b:8d:b6:ad:e2:a6:42:ad:
70:b0:d5:25:43:1d:91:73:54:1b:16:92:a1:85:44:
0a:aa:42:22:22:47:d4:f7:72:51:59:8e:53:dd:c9:
8e:3e:15:af:fb:b1:f3:40:75:12:03:61:f6:46:c6:
30:67:ac:47:a2:5c:53:f6:b6:2e:21:f4:9f:81:c7:
40:83:b9:a1:54:ec:fe:7f:59:62:00:fc:77:e1:3d:
f1:9a:d3:3c:1b:45:83:2d:92:16:29:fb:99:c4:e1:
c2:36:62:4a:bb:19:80:23:ea:9f:70:e0:b8:ed:49:
bc:f5:8b:07:9e:76:f7:d7:03:f0:20:d0:6d:55:8f:
e0:3c:7c:be:01:6d:c0:29:9f:0f:95:59:b3:b6:48:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:18:5A:37:91:60:63:21:CF:90:BA:0D:92:A3:05:9E:7F:4B:BC:27
X509v3 Authority Key Identifier:
keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e7:b2:aa:94:7c:f1:e8:60:4b:be:93:d9:c4:74:a4:65:c9:
d8:18:fb:b8:fd:1c:9a:bd:ba:08:c2:7e:1d:3f:ff:29:d0:9a:
61:5c:ce:eb:e2:82:56:f9:a9:a4:08:11:48:a7:47:a5:00:d3:
f4:08:bb:6d:a5:4a:59:d3:fb:46:c5:59:ee:a5:78:1b:56:f9:
ad:8d:a0:4c:a6:25:8b:86:a8:d5:7b:63:c8:b4:6c:05:a8:7d:
94:64:22:57:cb:05:e9:ca:cb:cb:0d:f0:3c:34:37:13:6c:d1:
44:b4:22:37:f5:16:4e:4f:1f:78:6f:56:1f:f1:fa:c0:3f:cf:
3f:8d:c8:62:fa:e3:83:d4:c9:c4:1f:fa:11:65:aa:19:40:93:
90:65:93:a1:c9:f8:7d:ed:58:5f:4b:b6:8a:55:9a:d7:03:51:
2f:ac:af:10:04:8c:1b:0d:c4:89:e5:54:62:3d:fc:37:a4:ea:
e5:6a:64:63:11:88:39:de:72:7e:af:ac:4f:58:c7:b0:1f:6c:
c7:7c:ef:44:79:ff:2b:98:1f:d9:a6:84:88:87:d8:3c:67:13:
b1:ed:b0:72:15:25:eb:8c:13:68:09:92:ab:27:83:52:c1:57:
79:88:4c:74:9b:ce:4a:7a:c3:b2:ec:be:1c:32:d9:8f:5d:6d:
25:91:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:52:35 2025 by rpki-client