Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: jHy3T/1QF40m7L7UBsOhrpTokU72k2SPs56VbI1FYLs=
Subject key identifier: 1D:21:B1:34:BC:06:02:8E:1C:7B:0F:9C:80:C1:2A:23:8D:49:6F:F4
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 01984965682AAA10B0C87D3220DBDA90DAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 0DF0
Signing time: Sun 27 Jul 2025 01:00:39 +0000
Manifest this update: Sun 27 Jul 2025 01:00:39 +0000
Manifest next update: Mon 28 Jul 2025 01:00:39 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: XAdwtK8V16xyh6XbQralmG8UJnkacminXANoytUN9Tg=)
2: BN10iJQINkqqQbCXE2ZsJo5PDg0.roa (hash: dLiu8pKhhmUdKMIv3bdjJ619GvxkAvZ9+W0bGvQ4ymQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:68:2a:aa:10:b0:c8:7d:32:20:db:da:90:da:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: Jul 27 01:00:39 2025 GMT
Not After : Jul 28 01:00:39 2025 GMT
Subject: CN=1d21b134bc06028e1c7b0f9c80c12a238d496ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:15:68:3f:db:eb:78:af:3b:8e:cc:9f:2d:6b:
bd:43:66:fc:92:4b:03:8a:c4:ce:e5:8b:b3:17:9e:
e4:f6:4c:0c:ef:88:95:90:95:cb:bb:b2:2f:bb:b4:
b4:28:c7:2a:1c:70:97:4d:c6:b2:c1:01:a3:1d:51:
ba:d3:75:84:0e:15:9f:e5:98:91:8b:61:3e:52:2f:
7b:2a:ac:74:f8:7b:47:5b:a8:6a:75:98:66:1f:72:
a1:7b:2b:03:54:1e:14:f7:66:3b:8b:ea:b5:a1:32:
3a:f5:c7:ee:48:95:f8:62:4a:8b:69:8d:b2:37:68:
06:cf:4a:03:37:78:b3:0e:e7:27:0b:17:70:9e:42:
2e:86:a1:18:7a:09:84:8d:58:08:d0:e6:01:5e:c6:
7b:b7:d0:c4:59:45:94:dd:eb:2d:33:6c:6f:97:0c:
ee:92:a1:9d:5f:51:39:f3:be:88:c8:87:59:4f:d3:
0d:3b:b5:06:a9:1c:e9:7a:b7:49:02:d2:be:a3:f9:
08:2a:1b:d9:bb:32:cb:a5:87:46:c0:e8:91:9d:0f:
98:e1:6b:95:d6:10:fb:70:04:da:23:2e:ad:39:9b:
fe:77:d1:be:cc:c3:73:fe:76:33:39:2e:14:4b:c8:
b5:12:6f:b7:96:23:ce:0c:a0:c9:4b:36:7f:11:c0:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:21:B1:34:BC:06:02:8E:1C:7B:0F:9C:80:C1:2A:23:8D:49:6F:F4
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:61:8d:c3:0b:8c:81:76:d1:0c:1d:3b:e9:4b:38:d0:b7:0c:
9a:ff:15:9a:7d:e8:4d:6a:c9:2b:f7:49:a2:90:28:33:16:47:
27:78:4a:fe:ef:d7:f2:03:a5:86:1d:b2:91:6c:e1:a3:c0:bc:
33:3b:c4:af:05:ae:0c:86:aa:30:fb:75:40:39:fa:bb:97:02:
35:b8:75:ac:41:15:1b:4d:9a:c8:a4:6d:bf:df:2d:05:54:1b:
a9:e8:8b:0b:2f:0b:4e:e6:93:c5:92:0a:32:21:bb:5b:47:5c:
d2:30:00:6d:79:dc:4b:15:a3:07:d6:e4:36:a8:e5:c4:6d:90:
00:5a:11:53:7f:a5:a2:54:60:82:5a:b7:84:f9:96:f2:36:31:
59:88:e8:f9:da:67:3a:57:68:bc:73:c8:aa:bb:01:bd:71:f3:
87:9d:c2:e7:cd:08:7d:43:3a:ee:a2:b8:83:13:74:08:8a:9e:
48:35:29:d3:d0:91:df:40:2f:e2:7b:39:ad:15:29:ee:f1:9b:
25:0c:33:a3:e2:cc:06:e4:93:1b:65:60:b2:57:6b:d3:29:92:
6a:52:7e:a8:a8:6f:db:0d:d4:4e:2d:38:a2:77:8d:a2:b8:f5:
72:51:e7:3d:22:8b:1a:00:e9:35:96:f7:e6:d4:30:04:e4:6e:
82:5a:53:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:39:40 2025 by rpki-client