Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
File: 0AQf95gDebeYBJJWho3_OYGcJgQ.mft (raw, json)
Hash identifier: xC2AXWJOWPuGjDAfyx+KGIbsl9HoU6t4aTqVdapPyxs=
Subject key identifier: 98:B5:4E:FF:08:2D:F8:CB:9F:9C:84:53:4A:47:BE:A0:62:01:0E:02
Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
Certificate issuer: /CN=d0041ff7980379b798049256868dff39819c2604
Certificate serial: 019845895D362520106ABEA9C7DF7BA41977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
Manifest number: 1203
Signing time: Sat 26 Jul 2025 07:01:26 +0000
Manifest this update: Sat 26 Jul 2025 07:01:26 +0000
Manifest next update: Sun 27 Jul 2025 07:01:26 +0000
Files and hashes: 1: 0AQf95gDebeYBJJWho3_OYGcJgQ.crl (hash: 0apTg3EMGsJpNB+KaPDsqgyu9L0kfc7Vr9uC9bE58GM=)
2: M3dHm9GHrYD8lQS4ksiSXCNoje4.roa (hash: Nu6oMe2kKfWTDbq3VinP98dNG8A/F9K2WRgisYnSNqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:5d:36:25:20:10:6a:be:a9:c7:df:7b:a4:19:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0041ff7980379b798049256868dff39819c2604
Validity
Not Before: Jul 26 07:01:26 2025 GMT
Not After : Jul 27 07:01:26 2025 GMT
Subject: CN=98b54eff082df8cb9f9c84534a47bea062010e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:14:4f:8d:b7:23:57:e5:15:f1:5d:7b:cb:
d0:37:7a:78:fc:ee:a0:4f:4b:19:b8:45:10:9a:5f:
1b:09:70:b1:9c:c7:14:a8:e6:1f:60:20:f4:bd:ca:
14:f4:41:fc:23:37:25:d4:fc:92:7f:9e:ed:07:be:
63:a5:ca:82:83:7e:93:05:0f:55:fc:71:28:0e:26:
e5:00:d2:b0:d6:bc:93:7e:4f:e0:2e:7c:d1:53:61:
c3:14:32:88:3b:0e:87:c2:dc:ee:f2:8e:e1:47:ac:
c7:5a:0e:66:a1:ed:ba:14:d8:05:9d:82:67:fd:8d:
8c:ec:fc:df:fa:b1:83:42:ff:fd:02:4a:a3:d7:6c:
2a:bf:03:96:d5:2b:60:0f:c2:93:6d:57:e0:88:04:
96:df:17:b8:0d:82:06:f5:08:1d:58:b2:1c:d4:d2:
b6:06:f6:81:e0:f3:5e:e7:33:ae:e3:34:a3:3b:53:
c2:22:a5:80:0a:6a:ba:95:47:a5:0f:53:67:ea:da:
83:13:ba:ad:13:fb:36:35:cd:9e:46:07:c1:ba:1b:
5d:53:8a:6d:f5:f5:d6:bd:9c:c7:bb:7e:4b:72:64:
d9:db:a5:4c:03:cf:fc:da:9a:00:a5:fe:f5:3c:07:
d0:66:ce:a9:1c:c1:89:e7:ee:e9:0c:c4:54:92:d8:
bc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B5:4E:FF:08:2D:F8:CB:9F:9C:84:53:4A:47:BE:A0:62:01:0E:02
X509v3 Authority Key Identifier:
keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a9:40:ec:57:9d:2f:b2:74:02:47:a7:34:f3:aa:a9:63:68:
77:40:4f:df:60:4f:a2:32:6c:1a:0d:e3:dd:74:cf:f8:4f:53:
27:94:c8:8f:52:1c:dc:fb:e8:26:f4:48:f4:6f:db:2c:4f:4d:
7e:c8:c9:2c:c4:99:0b:07:d8:68:b5:4a:27:28:99:0e:c3:66:
8d:c7:06:9f:fb:90:97:e8:5e:c5:2f:87:c3:f8:39:65:c6:49:
a0:dc:46:9f:67:88:4d:10:73:5e:8c:0c:59:a0:8f:7f:92:89:
c3:dd:ec:7a:bd:16:60:c0:9d:0e:13:5b:03:bf:af:55:13:f9:
62:21:a2:d1:8b:8f:e3:15:54:20:02:60:bc:0f:8d:08:e6:83:
16:68:b8:5f:b2:f4:84:af:ae:ad:e7:ff:05:fe:a9:7c:c8:51:
e2:9f:9d:49:63:49:22:74:69:82:8d:bf:c5:e0:7f:06:33:44:
53:34:10:b7:a1:66:73:bf:01:87:21:c2:3c:21:fa:15:a5:f5:
5a:14:93:f1:3c:8c:b8:93:60:b2:dc:a0:c5:84:19:dc:e1:f0:
f1:64:35:0b:f1:11:33:16:a7:c9:52:43:94:1f:68:5e:78:45:
fe:ad:91:e4:4e:a5:66:67:3c:81:b1:6d:63:47:d7:e1:9c:35:
ad:3f:97:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:53:24 2025 by rpki-client