Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: HPnwZKQ58FGArjAGy+lPzzonzLJSA0eXRgvdqh7GkJU=
Subject key identifier: 77:F8:A3:CE:BF:E9:96:AC:00:BA:A1:DA:0D:29:ED:3D:7D:D5:28:8A
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019827ECAA0666E7BADEEE0E0802C5202062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 0A
Signing time: Sun 20 Jul 2025 13:01:17 +0000
Manifest this update: Sun 20 Jul 2025 13:01:17 +0000
Manifest next update: Mon 21 Jul 2025 13:01:17 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: mRIM+dOg1S19x59SQVI/HKe8M0ME857EN63uQ1AwTzg=)
2: L3NuWTe_ZTmjBo-VlxbB6Itqb5c.roa (hash: 1CPUHzNqQbUf2XOYArYRqgpqG1Ievq6YnuLxsGd4YuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:aa:06:66:e7:ba:de:ee:0e:08:02:c5:20:20:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Jul 20 13:01:17 2025 GMT
Not After : Jul 21 13:01:17 2025 GMT
Subject: CN=77f8a3cebfe996ac00baa1da0d29ed3d7dd5288a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:ca:6b:50:a5:31:3a:c1:fb:fb:b9:d7:cf:
82:ba:1b:52:ee:c2:82:79:75:ac:ed:fd:2a:7f:a5:
57:d8:73:e0:be:66:4b:18:dc:21:05:bc:67:65:9e:
a0:d9:83:79:61:22:c2:10:2f:04:69:55:11:67:2a:
b1:c4:6c:26:f2:a3:57:fd:b6:ee:aa:fe:3d:35:04:
6a:5b:e8:88:ca:98:44:9f:21:05:62:32:78:3d:63:
c4:51:a8:50:77:0d:b5:ca:83:25:52:4f:d1:62:3a:
77:e2:71:a2:89:68:cd:c5:18:90:d6:29:f7:2e:1f:
85:c8:f2:1b:67:42:fe:cd:27:9b:58:21:c0:14:52:
17:0b:1d:3c:79:8e:25:ab:82:d7:0a:90:69:0e:82:
29:90:d8:db:ec:6e:ee:31:72:bd:57:48:16:48:f9:
12:3f:9d:15:8c:6f:42:44:f6:9d:94:c5:f4:b2:78:
00:06:af:62:c0:d3:19:45:0f:e2:4e:65:bf:4d:da:
3e:d4:29:b6:ac:4b:86:0f:3e:6f:e0:1a:c0:e6:d1:
1a:f1:04:47:d9:8f:0b:60:50:65:d0:d5:6f:90:cb:
48:a4:12:22:cb:01:0b:9f:9a:08:e8:77:48:62:23:
72:f7:90:ec:5c:e5:f0:51:20:be:a7:fe:97:6c:f3:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F8:A3:CE:BF:E9:96:AC:00:BA:A1:DA:0D:29:ED:3D:7D:D5:28:8A
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0e:ee:22:f0:02:5d:5f:61:9c:96:de:45:75:14:9c:af:50:
2b:1e:db:c3:61:15:14:73:d5:f8:11:30:1b:ab:87:8a:12:c2:
0e:92:b3:a2:d2:98:c9:ff:7b:bb:44:4a:d7:f4:69:77:37:8c:
ba:77:eb:f8:0e:74:b5:09:84:77:d6:f0:b5:ab:5b:c0:5c:e3:
56:fb:39:b5:06:2b:13:d8:0f:50:79:f1:98:c2:ca:cd:14:5b:
3b:e5:22:5c:f0:39:d6:d9:a3:76:e0:68:1a:5b:29:76:6d:ee:
ab:46:8d:2d:7d:0d:d2:fb:22:87:46:af:a9:d4:14:86:c0:99:
f5:e3:cb:30:9f:f7:ba:12:91:22:2f:70:16:d0:37:37:b5:a4:
19:1e:59:fe:62:d1:bb:08:93:4a:54:d6:64:65:ba:a5:c4:9b:
2e:a3:67:ed:4e:d5:87:a0:0f:e8:b4:ee:4a:b5:e2:79:21:1e:
1f:d5:0f:e8:07:80:a7:8f:36:35:48:e8:2c:e4:b0:5c:02:bb:
4f:a0:17:55:b4:5f:ec:81:d7:a3:a8:9a:9c:7d:d6:cf:5f:7a:
2a:32:d8:70:98:b9:08:56:02:38:c8:ed:c3:8e:fb:5a:6f:5a:
18:92:0c:9a:7c:ae:7a:72:a2:79:dd:28:44:ce:fc:e0:96:15:
20:10:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:23:32 2025 by rpki-client