Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
File: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft (raw, json)
Hash identifier: sSYXVQrfYIV4n4Nt+ezUZw8mO8QbFVhnYTVlqa64YoM=
Subject key identifier: 62:E7:5D:A9:09:85:C7:2A:72:D3:CE:E2:2A:DA:A0:A4:48:64:BA:49
Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
Certificate issuer: /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Certificate serial: 019847772A77B0C592F51AA09CB6D2640A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 16:00:48 +0000
Manifest this update: Sat 26 Jul 2025 16:00:48 +0000
Manifest next update: Sun 27 Jul 2025 16:00:48 +0000
Files and hashes: 1: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl (hash: 319oCyep6Nf9BG6YOGNeFD2ht31CN8f04Elc+rEvufc=)
2: 4RiMrm8aaExTJ5NxhFCCQc-LTfQ.roa (hash: xT77mBm76fvxQ/4syBVoQsoquUiDMD7RefgDewlMNII=)
3: O84I_LAanBtJYvSSTZhnAsP3iQA.roa (hash: 6ivMoGITrJjRBuEurkZGNP+0M6whX3cvNI3NRDFJ7b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:2a:77:b0:c5:92:f5:1a:a0:9c:b6:d2:64:0a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Validity
Not Before: Jul 26 16:00:48 2025 GMT
Not After : Jul 27 16:00:48 2025 GMT
Subject: CN=62e75da90985c72a72d3cee22adaa0a44864ba49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:53:d6:e9:38:bb:7e:60:91:fc:50:ff:27:41:
51:72:bd:ec:36:42:ad:3c:35:0d:0b:ca:df:aa:9e:
67:75:fb:0e:7c:8f:19:7e:7e:50:89:ca:c1:a5:9a:
a0:4a:7e:ec:d3:fb:5a:63:0c:56:37:11:54:d8:2e:
98:5d:e5:ba:24:b4:3b:18:b6:09:31:3c:ba:c6:0f:
0b:d5:ed:90:52:64:93:d6:8e:af:a4:d8:98:60:c7:
4a:df:81:ae:75:10:ee:36:f7:1e:c0:7d:c7:66:55:
ab:8c:fb:12:17:ba:2b:f0:40:51:b6:63:d5:c8:dd:
bd:59:68:2b:e0:fe:28:f1:24:88:34:77:22:2c:00:
db:74:24:ec:15:42:c8:53:13:78:17:66:52:58:c3:
96:5f:42:99:cb:c2:ce:2f:b3:1f:ba:b5:ec:2d:e8:
15:e0:c6:9a:1f:a9:8f:92:42:30:1c:06:01:05:a0:
cd:59:e0:94:a8:33:16:dd:a0:39:4b:46:ba:58:b1:
de:a5:2a:4c:e8:fd:b1:89:01:c7:67:43:be:e1:4c:
a8:7a:bc:a1:d7:3d:66:12:2b:ff:d7:e8:07:a8:f4:
d9:7b:fe:3a:46:ea:7e:c4:03:e4:c5:1d:fe:cc:d7:
49:84:ac:d5:78:90:57:17:b0:6f:e9:35:d5:9f:cb:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E7:5D:A9:09:85:C7:2A:72:D3:CE:E2:2A:DA:A0:A4:48:64:BA:49
X509v3 Authority Key Identifier:
keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:00:cd:59:aa:0d:d7:f1:3d:bf:9a:31:29:ae:6b:e3:23:2a:
7b:8d:1e:10:cb:ef:80:e5:e8:d0:d4:b9:49:cd:9b:76:bc:9c:
92:34:e3:13:1a:75:b7:80:b4:11:e1:db:21:3b:9a:d2:33:ad:
8b:62:71:90:fb:81:ce:f2:5d:95:32:7b:90:1a:e3:cb:ba:00:
4b:ac:95:f2:1a:62:f7:d1:ff:fa:e8:0a:6d:9d:93:05:9c:a5:
8d:c7:93:e5:f5:94:56:29:bc:c4:71:a2:fa:3f:40:61:04:80:
0d:1f:d0:32:4f:3a:59:71:fd:02:16:78:12:01:d0:82:a7:53:
3e:30:df:dc:3f:b1:96:52:e8:03:ab:35:9d:6f:01:60:96:5c:
eb:9c:75:1d:27:c2:96:c1:63:a8:c4:f6:4a:e5:12:83:07:bd:
2e:cb:38:3f:d5:b2:19:1a:65:3a:ee:b8:d4:2d:12:87:b4:40:
69:51:e7:00:10:a7:bf:50:ee:f3:b7:85:9a:7d:c8:09:e7:5b:
10:e3:4e:63:0c:c2:5f:f8:30:3d:fd:e8:03:5e:92:86:3d:3d:
37:12:57:e8:4b:77:66:3a:8d:a6:a7:a0:37:eb:0e:fe:62:6b:
58:b7:f5:95:dc:b1:06:ca:77:5f:1b:20:66:a7:db:24:5f:12:
dd:1c:45:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:09:44 2025 by rpki-client