
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
File: 0lYiRXob4zoBJYhmoGfgRH39iWQ.mft (raw, json)
Hash identifier: moEohYY/zOG/SztB9B79F0potiaBgpAGPNGd5DwvzoY=
Subject key identifier: EF:89:EF:A7:3B:B2:4D:08:21:D6:09:94:E1:18:2C:21:D5:CB:58:75
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 019835A7945FDF8F5E4C1D26D6260413DD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
Manifest number: 08C2
Signing time: Wed 23 Jul 2025 05:00:31 +0000
Manifest this update: Wed 23 Jul 2025 05:00:31 +0000
Manifest next update: Thu 24 Jul 2025 05:00:31 +0000
Files and hashes: 1: 0lYiRXob4zoBJYhmoGfgRH39iWQ.crl (hash: MGd+OYZB4WG143Xgk0aK8c1tYpX6NGbS/ox+V3jrcpU=)
2: 1-8dBe3weDEH5lmPUfaCTy1F_iQ0.roa (hash: Usc03D+6sIRxj8MO/R5pSlLN/4nGI6YHAGwKCty72xE=)
3: BZ6xhJfrN5RhRf6aXwKr795wQzI.roa (hash: Sf+y1lLm8gMUQKO4zkjlgPHIcjW4+YLH23G2t7sxkBg=)
4: POa1_1lG2fZrcfZRxbGnmzL6mIU.roa (hash: hZbXwNqNEsVBnStQz74wqfWaYd+uX0JeS3LWv9uiIFs=)
5: dOb6T3OXGQhPHEiptZe57ohMT40.roa (hash: GPGKsltxe4+qDNQ/6wiIDNbmlS41MFY6pNidlYOqIB8=)
6: p51-PJoT-E47Il5-C4i0wMvLMrQ.roa (hash: v6b35eBQ2NIYxUqWiW7LPB2L21OTBBy59B+EGu/7XOc=)
7: tfLXGQ5PJkMa3PshyPbQs6SgEew.roa (hash: 8rcVApOGw4v1UyjSDglLR5/i6c9sG5r3XdZlHqPb4QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:a7:94:5f:df:8f:5e:4c:1d:26:d6:26:04:13:dd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: Jul 23 05:00:31 2025 GMT
Not After : Jul 24 05:00:31 2025 GMT
Subject: CN=ef89efa73bb24d0821d60994e1182c21d5cb5875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:9d:54:87:49:7b:7d:86:66:9e:41:75:dd:
52:d6:e2:bc:49:4f:85:79:23:44:88:b2:be:71:aa:
62:8b:6a:c0:b8:ff:89:ae:70:63:65:15:a4:37:91:
5a:6a:f0:51:6f:52:30:ec:ca:c3:f2:2e:ca:52:d0:
85:bc:eb:c1:84:78:1b:98:f8:0d:02:c8:5e:30:71:
cc:63:f7:12:0b:9f:2b:23:60:43:5b:81:bc:00:05:
ab:97:e0:54:7e:5b:11:a9:7e:dd:32:a1:45:19:d4:
84:81:e6:d9:43:5d:f1:73:e1:cc:64:b3:51:ce:15:
a2:9a:4d:63:e0:59:ef:0a:63:38:2e:33:04:1d:70:
25:03:4e:67:f4:f5:39:8e:e7:5e:54:03:ea:29:dc:
fa:30:a8:97:72:14:eb:c6:d9:d0:7b:8d:d9:95:34:
a5:fd:2a:a9:8d:7c:5f:8c:08:0c:cc:b1:57:3e:d0:
20:7d:b6:c9:ff:e5:90:f4:29:d8:47:00:05:d8:62:
3a:cd:ab:70:a4:dd:20:a5:0e:ee:6b:bd:d0:13:a6:
b0:72:03:a4:4f:ae:67:02:5e:80:66:89:7a:d5:8b:
24:30:e1:0d:6a:ea:b7:d8:bd:7b:c2:5e:52:00:83:
a5:62:d0:eb:15:af:0f:88:78:63:aa:88:0b:7e:29:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:EF:A7:3B:B2:4D:08:21:D6:09:94:E1:18:2C:21:D5:CB:58:75
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:23:13:62:da:1a:69:0c:7f:b5:1f:ae:25:c3:bb:55:8c:a2:
0a:af:b7:47:ae:9c:46:0e:5a:a9:6c:db:ca:db:b0:cb:45:c0:
e3:e6:7a:f0:87:91:15:0e:25:4c:26:e4:d6:f4:2c:2f:2c:02:
f1:5e:6e:7b:11:e0:ea:6f:2b:b1:15:83:5a:bb:e7:a3:76:94:
06:59:1d:0c:39:7f:31:6f:72:4c:ea:e6:34:d2:e1:31:9c:81:
05:4b:b6:e9:d2:6c:0f:c3:ec:44:04:4d:b9:94:47:f3:e5:8d:
c8:b4:dd:6b:f4:87:03:f1:ba:92:44:1b:a4:a7:d1:c3:c2:f0:
17:4e:f1:64:c9:d8:6e:0f:f6:a0:17:36:1d:99:23:cd:1c:34:
54:f5:c7:b0:a3:0b:6e:5e:c7:35:4f:98:ba:7a:87:11:54:c2:
d8:c1:76:0f:25:de:13:03:9c:fa:4b:fd:34:52:66:5e:25:b1:
a4:6d:37:41:63:48:e5:c9:65:05:73:be:94:e8:1d:1d:83:02:
d4:8e:95:74:4c:7d:57:c4:78:22:57:84:d5:20:9d:0a:e9:d9:
9c:e3:37:43:40:38:0f:37:52:da:7a:f7:2e:2f:f4:3d:68:86:
09:64:eb:e3:53:3a:42:1e:28:90:9e:22:8f:fa:d0:59:8f:0a:
59:be:e1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:46:39 2025 by rpki-client