Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File: 0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier: oXKPNd4Q+jFr2ygs7jjoqGbADZ0iljAK9GOwQvEdqg4=
Subject key identifier: 3A:B7:74:CC:9D:DD:9C:25:1B:57:27:E1:CD:7B:82:D0:41:43:E6:FA
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer: /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial: 019854FBC4D1F337FF78F126FD6228BA0DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number: 0BD1
Signing time: Tue 29 Jul 2025 07:00:42 +0000
Manifest this update: Tue 29 Jul 2025 07:00:42 +0000
Manifest next update: Wed 30 Jul 2025 07:00:42 +0000
Files and hashes: 1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: kWo4V9bwnmXHYODjBBPHBcLKOUMkV54fAnIMTDgNqWA=)
2: 1qLqqTllve4zCxVAYOzBHvpeKI4.roa (hash: vb9EDboxZKlgHYFjRAGPCvT6HrDSb4Ej+FgPnOTiZKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:c4:d1:f3:37:ff:78:f1:26:fd:62:28:ba:0d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Validity
Not Before: Jul 29 07:00:42 2025 GMT
Not After : Jul 30 07:00:42 2025 GMT
Subject: CN=3ab774cc9ddd9c251b5727e1cd7b82d04143e6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:a4:83:5a:00:0a:2a:ff:ce:f1:d4:e1:10:
73:29:98:96:9a:7f:5c:b1:03:1a:07:96:cd:2f:cb:
a3:ea:35:1a:d8:e2:73:01:15:70:77:ea:1c:9d:ac:
7c:f8:88:7d:ea:ef:48:61:c2:07:1e:72:6f:93:ba:
53:35:47:51:68:dc:3d:a2:80:22:36:c4:8b:fd:a1:
44:51:34:ea:70:61:60:04:dd:27:11:9e:22:ac:d6:
8b:22:f8:35:e6:77:ff:71:7d:04:8a:03:a5:91:a3:
46:d8:99:33:b6:a1:fd:f5:3d:91:b0:91:ee:28:32:
17:46:31:7a:9a:d5:4a:85:20:47:ed:1a:ee:8e:e1:
49:78:f4:5d:2f:a8:40:3d:6e:e5:15:d7:e2:33:05:
22:cd:aa:a9:5c:cb:26:a8:5e:01:48:5c:8e:d7:f4:
56:cc:f3:e7:d0:33:23:ee:4a:10:a6:4d:63:67:f3:
9c:1f:e2:b3:dc:be:00:06:fd:3e:9b:09:49:41:78:
6b:6a:0c:81:a4:e5:ef:89:ba:2e:0f:16:93:ea:19:
41:eb:89:ff:fc:af:20:e7:a1:1b:8d:b9:1e:fb:c6:
ea:81:15:d1:c8:34:1b:ec:90:a5:e5:89:4c:23:b4:
27:ae:00:22:09:df:df:ac:79:48:55:cd:25:9e:f5:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B7:74:CC:9D:DD:9C:25:1B:57:27:E1:CD:7B:82:D0:41:43:E6:FA
X509v3 Authority Key Identifier:
keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:eb:47:4a:34:d6:34:c4:6d:c3:d1:03:7b:2f:fa:22:b8:b3:
76:ad:6d:90:58:ff:4d:4e:75:eb:9d:52:ce:0d:88:8d:04:c4:
f7:57:62:f3:e3:67:3d:c9:c0:dd:ea:44:30:02:72:e0:31:be:
06:e5:e4:75:37:47:45:c5:67:17:a6:ba:d8:cf:c3:3e:73:e3:
cd:78:0c:cf:d6:7e:06:6b:fc:78:4e:78:55:67:d7:56:0a:ec:
16:ad:4f:2d:60:4a:4c:67:c7:b5:ad:43:4e:2d:83:c6:49:62:
b5:09:ee:53:07:3a:c2:54:c8:9c:62:53:30:0e:61:f4:ca:c5:
b1:70:14:ab:06:29:ae:35:6f:fb:8e:14:94:89:e4:b9:7e:3e:
f6:57:0b:8a:05:9c:18:fa:80:49:c8:47:7b:04:58:60:0e:95:
8f:ea:4a:d6:5a:22:8f:8a:e3:a6:a7:6c:8e:b3:e1:3a:46:82:
4d:55:0a:0c:40:cf:23:98:e9:5a:3e:a0:56:a3:63:c9:12:01:
06:ae:57:a8:e6:80:53:eb:2e:94:a2:25:30:67:d1:b8:e4:f5:
77:64:78:58:a6:e0:8e:ba:71:9d:04:c0:8f:06:81:c4:50:7a:
a2:7b:22:fa:54:05:d3:fe:e1:cf:3e:6a:74:62:e6:4e:eb:35:
c1:70:f3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:40:20 2025 by rpki-client