Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
File: D4jGhrHhIvzcFlwCN6D149mQvwE.mft (raw, json)
Hash identifier: sjQFKRHrcBORqszzdGD92iGiiPmDT2FqCY4v0IXNvuQ=
Subject key identifier: 08:02:A1:1A:F8:05:2C:59:F6:C5:17:D9:84:45:9D:DA:C4:CA:95:E0
Authority key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Certificate issuer: /CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Certificate serial: 01984966E1EF7F0611AEEE8E15C8414E69FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
Manifest number: 0BAE
Signing time: Sun 27 Jul 2025 01:02:15 +0000
Manifest this update: Sun 27 Jul 2025 01:02:15 +0000
Manifest next update: Mon 28 Jul 2025 01:02:15 +0000
Files and hashes: 1: D4jGhrHhIvzcFlwCN6D149mQvwE.crl (hash: aPWag+n/2VtRlo5gu/GsJjHx34NhGdAkyp7uW2dKxsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:e1:ef:7f:06:11:ae:ee:8e:15:c8:41:4e:69:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Validity
Not Before: Jul 27 01:02:15 2025 GMT
Not After : Jul 28 01:02:15 2025 GMT
Subject: CN=0802a11af8052c59f6c517d984459ddac4ca95e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6d:25:ca:7d:cc:45:ad:9b:51:37:18:c4:57:
3c:d6:03:79:66:a5:19:cb:60:21:9c:d4:a1:03:e1:
64:e1:50:76:21:56:d0:77:c2:01:d9:95:36:01:26:
cb:4e:4c:3f:c7:a2:62:98:d3:6d:d9:82:01:a7:04:
7f:0a:fe:5a:6d:38:7a:61:cf:64:55:e9:77:62:cc:
18:c3:5d:3a:f0:dd:8a:2c:6b:7a:09:c8:3a:ff:bc:
dd:db:99:54:49:fd:b6:41:3e:7d:e5:67:3d:6f:15:
d0:ef:e4:af:5f:2e:7b:60:e9:45:05:b2:d0:46:25:
e8:b1:4a:45:d9:65:ed:b7:40:71:8e:4d:bb:93:25:
7e:84:ff:c6:41:b8:0b:44:51:f4:6c:cd:d7:a8:a1:
23:00:2d:9b:3b:bc:15:56:4e:2e:9b:2b:cc:80:f8:
3b:a6:21:b3:b7:ba:19:e0:54:e3:f7:68:54:bf:f1:
8d:2e:ed:71:04:5e:8d:d3:b7:f8:6b:85:1f:f0:9e:
b8:7c:2c:7f:d3:10:3b:db:d3:e6:35:86:c7:92:3e:
b4:fa:67:07:74:7d:33:f8:95:2f:f6:fe:4d:cb:94:
88:c7:7e:50:9d:c7:45:55:77:be:f0:d3:35:1b:3b:
3b:09:df:9b:6d:df:64:08:11:74:3f:ee:6c:40:76:
ae:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:02:A1:1A:F8:05:2C:59:F6:C5:17:D9:84:45:9D:DA:C4:CA:95:E0
X509v3 Authority Key Identifier:
keyid:0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e7:78:80:5e:ef:0b:6f:62:bd:cd:0a:20:40:9c:0b:01:c3:
89:fd:dc:58:fa:69:81:80:d4:13:04:4a:d5:d1:71:ae:f2:20:
71:56:64:83:a1:90:30:8c:5c:1d:b2:13:25:2e:49:db:da:27:
b9:e9:88:55:c5:4f:e2:79:d2:e8:71:14:29:da:97:02:3e:5b:
8c:14:86:3a:51:72:fe:79:b3:8d:6d:cb:2d:7b:4f:58:d0:36:
30:32:73:96:c8:44:c1:19:c5:ac:f4:08:6e:5d:08:29:8d:77:
9e:88:13:41:43:eb:7a:2b:26:0d:13:03:60:68:cf:26:6c:35:
d9:bd:52:b4:df:e9:3e:da:5d:a6:99:a0:ab:c4:a0:78:79:57:
e0:84:3f:f6:8e:ba:a2:5a:ea:82:a7:66:cc:75:21:5d:e8:1c:
16:8e:9c:83:4e:07:06:7b:0e:84:7b:6b:33:df:14:e5:9b:d6:
04:cc:05:7c:61:2a:2d:8a:ff:75:3b:e8:d4:85:90:27:5c:6f:
20:13:a8:2f:e7:fc:bc:a2:ab:6a:d0:fc:08:59:a6:50:25:47:
13:db:af:22:a1:68:20:43:84:69:1b:cb:81:23:da:99:e5:b6:
7a:69:51:d6:8f:88:31:11:b9:c6:d8:28:7d:61:10:94:89:ea:
54:bb:49:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:28 2025 by rpki-client