Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: j+c2v1IhvB62opXO+B6akLjwGs0cBt4DBKnC65mSP/I=
Subject key identifier: 68:43:B1:10:D9:DA:65:92:49:B4:56:85:A4:D9:9B:A4:36:29:BA:97
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 0198530E35C4D37FC17637D74270872CCC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0B28
Signing time: Mon 28 Jul 2025 22:01:36 +0000
Manifest this update: Mon 28 Jul 2025 22:01:36 +0000
Manifest next update: Tue 29 Jul 2025 22:01:36 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: VIVPVYoq14QOGyTAEkKCTfOBtvFw1jzahSj6jDDw7b4=)
2: 7p9fYepg7S5sPZLFet1T6ZdUO0A.roa (hash: 2r3FGqEA9Im8wCkJsvxrPrJGP9I8oT0rHkJZAkKFfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:35:c4:d3:7f:c1:76:37:d7:42:70:87:2c:cc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Jul 28 22:01:36 2025 GMT
Not After : Jul 29 22:01:36 2025 GMT
Subject: CN=6843b110d9da659249b45685a4d99ba43629ba97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:f6:39:11:c3:2e:f8:0c:91:ea:75:a2:27:
2f:d3:8c:42:6f:4a:1f:6b:c2:66:50:15:1c:35:9b:
0d:74:71:c9:7a:83:fe:ca:2a:db:2d:47:f0:19:1c:
c6:92:32:15:d4:b7:27:a4:ca:b1:cf:20:f2:75:0f:
93:3b:42:a9:90:ef:e7:82:8d:92:b9:d2:40:61:e3:
55:e4:cc:f0:81:5b:90:16:5e:ff:5b:6a:80:3b:cd:
e0:8e:d0:23:79:9b:4d:54:2f:1f:f6:4b:67:13:25:
9a:d8:17:b5:9c:81:e9:84:78:99:32:61:ab:64:df:
39:08:cb:df:3b:44:b6:07:9e:11:55:ff:86:ab:b5:
7c:54:d1:a1:2a:29:d8:6c:ab:af:dd:cf:5e:2e:93:
95:f3:65:59:6c:80:87:4d:4e:6a:67:d3:c3:c8:d6:
d6:7b:d2:80:da:0a:84:53:97:a5:39:bb:39:09:d3:
c8:bf:87:e0:82:6d:64:db:d1:4e:a8:9c:34:ea:67:
b4:6a:16:a4:02:dd:1c:93:96:06:2d:6f:06:a7:dd:
da:99:f7:eb:69:ee:32:b9:fa:36:dc:6f:d2:98:2f:
2d:fa:bd:c9:d4:f0:61:e3:d9:20:e9:33:e4:40:1e:
10:d0:4a:ff:3e:db:21:08:18:7c:b0:e0:28:5e:f0:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:43:B1:10:D9:DA:65:92:49:B4:56:85:A4:D9:9B:A4:36:29:BA:97
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:33:5c:a0:a6:d4:3a:d7:59:c6:ad:d9:00:5d:ba:3a:93:23:
71:b5:4c:4f:de:52:3e:3b:a0:b3:8f:28:26:f8:e1:a0:2b:39:
c4:7e:33:87:8d:c2:49:ad:df:58:bc:56:dc:1b:d6:2a:af:df:
f8:72:06:ba:ea:9d:2a:86:19:a4:cd:b1:92:45:ea:49:66:75:
84:1f:90:60:3c:c0:c4:96:58:21:7d:ec:40:dc:42:82:74:2b:
0d:17:a2:2e:36:c1:c5:21:a3:fe:30:e4:3c:6a:fd:44:a8:ec:
0b:01:77:d9:fd:1e:e9:a0:19:ca:22:35:47:83:8f:5f:1f:05:
98:6b:83:42:d0:36:35:f2:19:7a:d9:77:9a:31:69:d5:b1:b7:
2f:82:4c:ac:d7:da:1d:e2:6d:f6:00:2b:6b:ae:dd:83:fa:22:
d3:f3:ca:3d:63:08:f8:3a:1e:7a:aa:13:cf:66:2d:ff:8c:e8:
56:85:93:68:80:84:79:c7:f6:9c:08:d0:53:bf:1b:cc:ac:76:
54:0e:5d:f7:0a:67:cf:b0:b3:17:63:49:be:75:61:4b:9b:50:
cd:84:01:bc:9b:68:cf:d6:96:ac:9b:b9:07:f1:a7:38:be:6b:
5a:6b:40:91:c9:3e:7b:e5:b8:d3:7a:97:13:6c:f7:01:10:a6:
79:54:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:38 2025 by rpki-client