Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: HeUQ9Do9C2s09XZAs5UAydEayeLmzyXDlBJSpCe0XJg=
Subject key identifier: BB:76:B8:C0:D5:6D:1B:8A:80:D8:05:95:23:29:56:68:F6:18:AA:A4
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 01984AE5752C20FF25B71793AD6484706E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 0350
Signing time: Sun 27 Jul 2025 08:00:08 +0000
Manifest this update: Sun 27 Jul 2025 08:00:08 +0000
Manifest next update: Mon 28 Jul 2025 08:00:08 +0000
Files and hashes: 1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=)
2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: BPhCnLognyWBFytpvy2i47McV41SxY1Qquq0kmilQ1k=)
3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:75:2c:20:ff:25:b7:17:93:ad:64:84:70:6e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: Jul 27 08:00:08 2025 GMT
Not After : Jul 28 08:00:08 2025 GMT
Subject: CN=bb76b8c0d56d1b8a80d8059523295668f618aaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:43:f2:b5:e8:b2:89:40:de:68:65:5d:44:
db:41:d4:d6:9d:29:35:8c:3e:84:31:7b:3e:dd:88:
dd:c4:9e:da:f5:5d:c8:a2:5e:0a:98:73:a7:e8:0d:
c4:6a:37:f9:0a:67:7b:44:25:21:60:df:5a:15:97:
c9:04:3a:69:68:cd:04:14:bb:be:fe:44:ed:49:5d:
19:d9:24:cc:6e:3f:5b:05:eb:7f:f6:57:dc:4d:fb:
2b:65:41:40:c8:47:82:a3:f8:45:4c:a0:69:b4:65:
0c:77:91:22:f1:2f:d8:38:b4:53:16:29:57:8a:a0:
bf:51:74:8c:10:0f:6f:ee:68:2b:ac:b5:8f:99:77:
66:b4:db:98:41:3e:9e:6c:ec:8e:d4:d9:5c:55:7b:
55:d3:85:af:58:c2:fd:51:37:9a:5b:3e:37:49:66:
9e:86:e7:cc:fd:d2:bf:db:00:7e:55:21:c3:be:a4:
b1:36:09:f0:7b:f5:13:50:22:ee:38:2d:4f:0f:a2:
5a:21:9c:cb:54:63:8f:38:0f:86:21:63:3c:e7:dc:
18:32:2b:19:29:2e:0c:e9:ee:09:58:53:06:6b:4a:
76:7b:06:38:de:3e:fa:56:81:01:37:3a:64:c9:8f:
ba:3d:01:19:86:f2:6a:1a:a3:62:10:db:f5:eb:34:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:76:B8:C0:D5:6D:1B:8A:80:D8:05:95:23:29:56:68:F6:18:AA:A4
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0d:91:1d:68:5c:a2:ff:6d:a0:eb:97:12:3e:fa:eb:52:de:
79:bd:e3:83:5f:f5:36:b1:d6:34:87:f9:d3:60:ef:28:48:22:
ee:85:46:ab:1d:34:61:6e:dd:10:c0:e4:ba:2d:db:85:81:f0:
0d:96:a1:e8:ab:32:6b:32:5c:91:a2:09:f6:4c:74:68:db:39:
cb:30:05:2d:f8:48:8c:f3:97:9d:9e:e3:74:6a:22:04:7e:1c:
5f:79:cb:f8:45:7b:ab:33:fc:fc:be:c2:31:6d:38:00:11:a9:
70:9f:6e:10:54:c8:0b:0e:b1:0d:0f:2a:e6:00:c2:c9:c5:d5:
d9:32:6d:40:c6:00:97:a1:68:cf:db:ff:e8:7f:d2:db:32:5e:
de:31:e0:31:51:b5:8c:cc:2e:57:95:fd:e2:be:8c:90:e9:62:
78:cd:a8:43:14:99:ac:2c:61:6c:80:02:0e:a6:a4:b3:4d:6d:
1e:04:3c:61:ee:0d:be:de:eb:b6:c1:ad:8a:1c:b6:69:51:65:
45:9a:bd:dc:e9:f9:fe:76:4d:c5:57:5b:ed:5a:25:ab:58:59:
7d:d5:9c:7e:f2:64:74:cb:6b:b2:57:b0:7c:68:1f:63:2d:d6:
6e:ae:bc:a2:bb:fa:e8:ce:c4:13:4b:2d:2d:fc:82:56:19:5a:
0b:fe:0d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:31 2025 by rpki-client