Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json)
Hash identifier: 7rEOPc9xiAf0D3bYHOdmsfq6uQr6l75fWCNc/S0s95w=
Subject key identifier: 11:5E:C8:2C:45:4C:89:27:8F:69:7D:8F:7C:68:7C:7E:F0:17:16:18
Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Certificate serial: 019849D392D85E3CC1E3852B429821E15C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
Manifest number: 0864
Signing time: Sun 27 Jul 2025 03:00:59 +0000
Manifest this update: Sun 27 Jul 2025 03:00:59 +0000
Manifest next update: Mon 28 Jul 2025 03:00:59 +0000
Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: WUMQ9MGzUmxS3HQuaxX4GhD/tx1EVQPf9wpEYjze70c=)
2: tkNgBbUczBhXw3Q7nsd4bFDL5Ko.roa (hash: 2ZBjCKDVEUumVBdfZIcGHq5+w377C2/RlriHj7O796c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:92:d8:5e:3c:c1:e3:85:2b:42:98:21:e1:5c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Validity
Not Before: Jul 27 03:00:59 2025 GMT
Not After : Jul 28 03:00:59 2025 GMT
Subject: CN=115ec82c454c89278f697d8f7c687c7ef0171618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:a4:11:79:06:c8:f8:b6:87:b7:2e:5d:06:
0a:2e:36:04:cf:b8:2e:c5:28:50:bb:76:61:93:6a:
e6:16:b0:af:84:32:76:d1:6e:85:85:0c:05:11:0b:
0f:40:b0:31:de:1b:40:e2:00:fb:32:b6:3a:ad:c8:
48:fc:32:ea:36:6b:92:2d:2e:cb:90:ea:6b:7c:f3:
01:72:fc:cc:33:ce:5a:60:1f:76:f5:a0:9b:93:7f:
14:6b:3e:0e:42:6d:8f:aa:0b:66:70:3a:55:ec:26:
2a:e3:75:4d:19:d1:25:57:9b:c8:f1:99:a5:20:1f:
be:38:e1:0b:f2:1a:e4:d3:10:76:26:dc:c2:65:e2:
f2:34:d8:2d:da:59:24:30:28:e4:64:fc:4f:8d:0e:
e5:38:e0:f1:5f:52:6e:cf:99:47:ce:9b:cf:3b:de:
de:fb:d5:f8:03:ea:5a:1b:5b:30:19:f6:d4:29:29:
07:13:63:5c:54:17:27:2b:ca:06:c1:ab:a8:cb:fc:
1b:a3:2a:a7:f7:e6:2d:ce:db:32:bc:a3:bb:43:d9:
b4:9b:90:73:d3:43:b2:26:8e:24:43:70:49:98:8e:
74:42:d6:1d:2a:fe:2b:44:f1:11:3b:6d:5c:20:0f:
98:fb:3f:58:af:e6:44:2f:b5:9b:36:cd:e9:b5:17:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5E:C8:2C:45:4C:89:27:8F:69:7D:8F:7C:68:7C:7E:F0:17:16:18
X509v3 Authority Key Identifier:
keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c8:71:88:ed:6e:fe:48:ed:93:5a:04:ca:de:7e:22:fa:56:
87:5f:75:42:59:2f:05:93:77:60:47:40:d6:c3:bd:b8:05:6b:
13:b6:79:d7:ee:a3:7f:d6:c8:7c:d9:ec:a6:96:d3:15:eb:49:
1a:9d:e5:95:39:0b:4c:b6:26:6a:f6:8c:0c:42:f2:83:bc:01:
03:ab:9c:bc:bb:fb:d8:2e:cb:da:b6:90:cc:ef:76:2d:20:15:
e4:76:37:0e:d3:1d:de:49:35:bf:73:16:4f:58:e4:3d:53:86:
90:5c:0c:a1:47:8a:15:9f:b9:e2:04:80:19:bd:ce:03:86:df:
76:3a:da:a4:28:3b:90:b6:10:69:c9:32:1a:fc:18:5b:49:a5:
44:c7:3b:98:ae:75:b5:40:f7:a9:ef:93:7b:c8:17:e0:fc:87:
fe:a9:08:96:5a:bf:4d:79:d7:c6:38:15:82:ba:64:cd:2f:b2:
f1:f1:94:6f:21:32:8e:50:56:7f:4f:ae:e5:93:88:65:29:91:
77:f3:bf:17:91:79:95:02:67:a3:ba:6c:9d:69:ba:a7:24:31:
b8:9b:07:91:b6:71:fb:52:b8:83:2e:ff:af:12:b9:ca:4f:8e:
34:8b:52:b8:61:98:ec:c3:e3:7e:b9:1b:93:8f:bf:73:b2:89:
fb:fb:43:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:36 2025 by rpki-client