Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: /C12pTbplSoqtNkk9A3qtaCnOTOIMe2Sq3jZoYOoyO0=
Subject key identifier: D1:56:1F:D0:0F:D0:16:86:7F:AA:EB:48:8F:95:C1:5F:2A:96:FA:AC
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 019847ADE2905351742AC696D122D498FEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 1326
Signing time: Sat 26 Jul 2025 17:00:34 +0000
Manifest this update: Sat 26 Jul 2025 17:00:34 +0000
Manifest next update: Sun 27 Jul 2025 17:00:34 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: aaeVsx6wLCXlMSqe0i35qPWW8kEbDHiBlfjHMmJFrpo=)
2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=)
3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:e2:90:53:51:74:2a:c6:96:d1:22:d4:98:fe:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Jul 26 17:00:34 2025 GMT
Not After : Jul 27 17:00:34 2025 GMT
Subject: CN=d1561fd00fd016867faaeb488f95c15f2a96faac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:95:9d:02:fa:8c:d1:69:6d:c1:c9:ae:c8:
91:ae:9f:36:04:b8:92:c3:74:6f:b5:d6:4f:44:45:
84:b0:38:73:39:41:5d:fa:81:f3:bb:73:8f:a2:86:
a7:ee:5b:b7:51:e2:cf:76:61:62:96:5e:3f:cb:6f:
03:4b:80:04:41:97:fd:f5:67:0b:f7:0a:c3:9d:74:
74:b3:b5:da:0b:99:b3:c6:4f:ec:45:e8:3a:d4:37:
72:2c:24:bc:0e:dd:a3:8e:2b:b4:86:9f:1b:72:f9:
c1:12:1b:31:28:37:65:5f:93:3f:d7:3c:31:1a:45:
a8:53:b3:08:7e:fc:ac:c5:63:59:6f:41:15:e1:03:
5c:41:7b:67:24:9f:45:d2:20:87:6d:51:23:a0:f8:
0f:a9:99:d7:8c:23:43:1d:19:b7:82:81:cf:a9:6c:
38:e2:2c:3a:ef:15:1f:05:66:4b:89:69:f8:0a:e3:
c2:30:1f:7a:67:90:68:35:03:dd:5a:76:95:49:a5:
cc:87:91:a4:31:60:fe:e4:e3:a1:1d:c5:80:b0:79:
c9:0b:40:ce:ff:46:6e:5c:85:16:ab:f2:b4:a6:55:
53:fa:e6:6f:20:03:41:c0:fe:c9:15:d2:96:1a:d3:
7d:93:ab:25:71:2f:8d:46:1d:ce:43:ab:62:c5:25:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:56:1F:D0:0F:D0:16:86:7F:AA:EB:48:8F:95:C1:5F:2A:96:FA:AC
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ae:ea:4a:7f:74:9a:d0:7d:5d:a2:3d:17:f1:1f:85:92:61:
a7:98:68:fc:df:be:69:09:75:76:68:6e:ab:33:6e:06:18:e8:
49:80:bb:a3:e3:42:96:28:ed:f8:d0:cb:ad:8b:78:d9:93:2e:
24:5b:73:25:ec:21:10:31:3b:c9:78:5e:df:14:9e:13:05:57:
a8:1c:ff:21:a5:ef:4d:86:b6:4e:dc:02:a1:5b:97:ad:47:e7:
4b:b6:f0:da:42:be:10:aa:2a:1d:86:43:b9:fb:77:76:99:36:
b8:98:36:2f:8f:91:93:31:c8:49:6b:2f:b2:6c:99:8d:f8:5f:
c6:f2:97:65:e5:3e:1a:39:6a:4b:bb:bb:e5:3d:f0:25:b6:e7:
95:bf:8b:36:b1:2a:d4:83:a2:c2:0c:32:8d:10:7f:b0:22:25:
75:db:8f:14:84:d2:52:66:39:e5:0b:aa:b2:22:e3:62:9e:68:
32:02:45:f2:cd:74:5e:f1:11:33:5b:77:a1:a6:8a:f6:25:9d:
08:bf:22:2e:12:79:8b:6e:38:3c:97:21:d1:9c:4f:de:3c:65:
7f:d5:a8:c5:8b:d3:65:b4:fe:9e:9b:9f:f5:65:b5:df:9a:2d:
b0:b0:70:00:78:d9:f0:2c:be:ec:4b:f5:8c:d6:ed:28:83:d1:
df:53:10:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:09:37 2025 by rpki-client