Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier: Tg5O7GXRoogAIAd/9oUKoqN4KpT9LSBqBrhcfqq1fKI=
Subject key identifier: 0A:9C:3F:CC:E2:4D:B5:30:15:AB:66:5A:38:B6:03:F2:07:03:B8:2B
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer: /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial: 0198541FAF35FB3E47A7C695D8BAF7893216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number: 03F3
Signing time: Tue 29 Jul 2025 03:00:19 +0000
Manifest this update: Tue 29 Jul 2025 03:00:19 +0000
Manifest next update: Wed 30 Jul 2025 03:00:19 +0000
Files and hashes: 1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: ucqYnv/f8OEpHa6/hDqPxUjdOCIuFc9e913QDEFvEJc=)
2: yAFTVipgzUq2JehlyXdlgvk4lGA.roa (hash: 4JLBxrRXaq9Ej5PAfStMaFMw5Cw8Ln+aMWKMUmNE/iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:af:35:fb:3e:47:a7:c6:95:d8:ba:f7:89:32:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
Validity
Not Before: Jul 29 03:00:19 2025 GMT
Not After : Jul 30 03:00:19 2025 GMT
Subject: CN=0a9c3fcce24db53015ab665a38b603f20703b82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:09:95:2e:01:14:73:80:0d:27:1f:3a:53:
a7:a1:3e:ca:5c:17:3c:7c:2c:70:6d:39:8c:22:e2:
c4:3e:3a:2e:a0:18:dc:4c:7f:eb:4b:65:69:91:aa:
a1:5f:f9:87:ad:05:a6:1f:41:c6:c3:46:b8:3e:ae:
75:2d:a2:0c:59:a7:47:4a:08:42:86:a6:eb:68:96:
d3:56:04:8b:d2:bd:79:80:94:da:a8:fe:61:25:83:
6e:b3:c5:0b:6b:ec:f4:3c:a7:4a:9e:83:b1:90:eb:
b3:92:ed:7f:9e:2f:2e:88:f0:82:49:1c:d6:e9:db:
1b:9f:ec:10:81:1c:4e:1f:f2:7e:25:eb:da:78:e4:
77:20:56:0f:cb:56:d6:02:7f:fa:1e:c4:c6:5b:12:
df:c4:06:b2:55:a0:23:49:82:ca:16:5b:3c:3b:5d:
47:17:07:2f:df:52:d9:83:f4:17:f6:c2:f1:4e:43:
9c:41:5a:eb:bb:8b:e9:07:3f:ae:35:85:d4:4e:7e:
fb:8d:2d:19:11:4a:12:43:3f:8f:c3:23:b4:3c:51:
4f:00:5b:60:4b:f1:3e:04:a4:7c:e3:0b:cd:e2:f1:
46:ce:33:29:b5:9f:fc:24:c7:e1:1f:90:1f:38:21:
a4:f0:17:de:30:66:cc:18:0b:3a:c6:8f:54:47:41:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:3F:CC:E2:4D:B5:30:15:AB:66:5A:38:B6:03:F2:07:03:B8:2B
X509v3 Authority Key Identifier:
keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a0:18:69:17:b3:ba:84:4e:19:9d:67:f3:2c:30:8d:ca:4c:
9d:45:4a:d4:9a:c6:88:bd:14:3f:5a:3c:f3:dd:e0:18:c9:b8:
ee:ed:d8:46:10:5f:59:d6:70:03:28:51:0c:53:6c:62:dd:9e:
44:d5:d5:2a:42:67:2e:7d:4b:ee:c3:3a:29:b2:36:11:60:0e:
50:93:c2:c8:a0:ec:65:69:7f:82:09:42:28:70:d4:33:8d:61:
c3:c4:eb:9e:68:4e:79:ca:ae:28:9d:25:e4:97:10:d8:e7:e5:
1d:9b:53:58:eb:b8:b8:f9:36:0f:bd:42:a0:6b:1e:2a:21:4c:
83:d4:c9:26:19:42:bb:3f:a2:d4:74:8e:ba:97:91:b8:65:23:
f4:0e:57:60:fa:cf:43:e1:85:ea:8c:0a:97:b2:dd:aa:cd:21:
4c:54:da:db:7f:53:3e:e5:c7:a1:92:d6:44:d4:dd:f1:52:53:
b9:a6:14:cd:c5:4f:b7:b3:88:5a:32:82:b9:a9:cb:33:ad:d3:
04:63:e5:a2:c5:2c:d0:45:1a:bb:32:a3:4f:54:ff:93:f7:1c:
84:8f:41:fb:c3:80:53:33:3a:fb:ca:29:4c:20:3c:3c:f7:87:
b5:15:5d:da:b2:94:ba:fd:37:89:40:8f:f2:70:85:6d:e0:54:
2a:f5:6d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 06:05:53 2025 by rpki-client