Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier: MAKNJ2OdhDPAWSyiods5Ew4Zw5Uh8oY77lEJ93pdJ48=
Subject key identifier: 2B:D0:A2:5A:B3:97:08:F5:F9:4F:98:18:5A:E4:FB:34:FF:64:CD:40
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial: 0198541F83F8DC4592C27F570322EAFA0C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number: 03EF
Signing time: Tue 29 Jul 2025 03:00:08 +0000
Manifest this update: Tue 29 Jul 2025 03:00:08 +0000
Manifest next update: Wed 30 Jul 2025 03:00:08 +0000
Files and hashes: 1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: nWL441JFaTGb9gzgksg7AYak90dTfhXFXr1sZKpXC/M=)
2: NJkr6UX1dyZbz9hAAHSEva9N1dU.roa (hash: dH1+iQ8jrIWNeK4bcaaw6PWPrPpzci2xfb2T6H4KeWY=)
3: nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa (hash: b96JAOO8n31SIeeTv1ll8vmQplePANc0Xbj3yOfw8j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:83:f8:dc:45:92:c2:7f:57:03:22:ea:fa:0c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
Validity
Not Before: Jul 29 03:00:08 2025 GMT
Not After : Jul 30 03:00:08 2025 GMT
Subject: CN=2bd0a25ab39708f5f94f98185ae4fb34ff64cd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:e4:51:33:d0:b4:4b:2c:5e:e6:d2:89:2c:
4f:c2:8c:e8:79:2c:e5:b9:12:3d:e3:99:04:5e:37:
b7:87:c8:1d:a1:f8:95:02:37:10:90:93:a5:5b:5e:
9d:0c:d1:2b:33:2c:d7:a2:fe:82:a3:d7:68:38:6c:
c6:ee:ec:84:50:91:58:7a:e6:8c:8e:66:80:3a:ce:
07:24:16:ec:cf:76:20:a9:53:23:2c:b9:ca:ca:9d:
d0:4e:7c:94:8a:be:28:70:9d:61:ed:51:26:5a:49:
08:9f:c2:42:a7:cd:48:ef:27:11:bd:98:4d:df:c5:
9c:1a:62:98:27:f1:84:57:95:cf:cf:9d:b3:1a:ff:
e2:9b:20:a8:29:c9:32:2d:7b:7e:ba:44:f7:85:da:
f1:12:f3:8b:99:51:0f:97:53:35:9a:83:e0:d4:72:
d9:c4:27:48:04:83:a2:eb:b8:fb:b1:c2:64:1a:8c:
1b:f8:b3:df:fd:c8:19:59:e8:8b:c2:55:63:25:57:
4b:a7:63:3a:34:ef:02:2c:a5:53:41:20:79:c2:f8:
63:ed:6a:bf:c2:76:92:81:9b:90:a0:fc:32:2e:4e:
f5:55:f1:e4:db:7a:6c:f8:ce:b9:bf:bd:25:49:66:
f5:51:2b:71:49:40:1a:a7:7b:09:c4:b4:71:ee:1b:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D0:A2:5A:B3:97:08:F5:F9:4F:98:18:5A:E4:FB:34:FF:64:CD:40
X509v3 Authority Key Identifier:
keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:62:96:83:99:09:26:a9:a8:dc:28:9b:d0:75:45:bc:c0:92:
11:b4:e1:b3:74:25:82:b0:53:c2:fa:72:95:55:bd:1a:fd:1c:
1b:ec:00:ee:b2:3d:7a:4e:5a:4f:1c:74:dc:98:88:77:9d:f9:
09:0c:79:92:0c:bf:c2:47:fe:0a:5b:80:13:dd:97:a9:b3:66:
3e:d4:6d:21:d2:e9:34:ec:ad:f3:1a:e2:3c:3a:40:63:00:e8:
87:30:3f:b2:37:bc:c3:a1:11:45:2e:69:48:2f:75:a1:51:4b:
c1:39:d8:4b:ed:63:3b:ba:a8:f2:a6:4d:4b:e4:6f:11:42:c8:
16:4e:bf:b3:24:76:28:12:8a:2d:22:a0:a0:e9:25:b7:a3:eb:
a8:4d:7d:ad:7a:25:d7:21:06:95:94:73:a9:7f:0c:d8:6e:a8:
4e:31:05:79:2b:25:3c:fa:00:99:f8:7a:d5:42:8b:75:45:37:
4a:4d:57:b5:1d:3e:70:d6:68:3e:a0:94:84:96:6f:6b:a7:40:
8b:a4:1e:57:65:e4:dc:9c:81:47:aa:18:1d:cb:d8:1b:88:2a:
48:23:f0:6b:56:11:58:a4:14:7f:85:4f:90:05:eb:9a:06:df:
2f:1a:e5:e7:82:b8:1e:e9:28:9d:48:c1:93:d5:83:7d:cc:b9:
0b:e9:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:40:06 2025 by rpki-client