Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: IuZjb5kLWXrMiRklLeZ0vDBduUR8LQLfinu+URyDi3M=
Subject key identifier: 01:FF:03:21:85:3B:FC:29:96:80:98:35:EE:3C:09:43:59:17:1E:3F
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 019853E8C90FA5D196C951964D66BC3E7FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 0FCE
Signing time: Tue 29 Jul 2025 02:00:21 +0000
Manifest this update: Tue 29 Jul 2025 02:00:21 +0000
Manifest next update: Wed 30 Jul 2025 02:00:21 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: 5ochWUhHzIMPlRnpGEXyaIcxvQW/IKN5+yFweqXGxQg=)
2: Ut4z4tImR83ncGrwpXNPaCBz4dc.roa (hash: x3Tb8uXmHgRhBdCjWUywrl5EoWV8hOlCverEGcV2UXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:c9:0f:a5:d1:96:c9:51:96:4d:66:bc:3e:7f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Jul 29 02:00:21 2025 GMT
Not After : Jul 30 02:00:21 2025 GMT
Subject: CN=01ff0321853bfc2996809835ee3c094359171e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ec:74:46:30:bd:1b:17:95:72:56:6a:56:e9:
ce:44:08:07:4d:42:e3:28:b9:49:0c:6a:c2:46:a0:
b6:5a:1f:33:cb:a2:d2:25:04:2a:bb:97:af:27:14:
b4:0a:eb:15:b4:59:ea:4c:72:26:ed:20:40:45:f1:
0f:d9:18:98:8a:77:01:13:1d:62:8f:a2:a5:cd:b5:
9a:a1:1a:a0:18:c2:58:6b:30:9f:4b:0e:dd:16:ad:
3d:1c:c1:e3:06:9d:36:e2:8e:da:22:10:45:8a:ef:
c3:6e:75:c0:fe:72:bd:b5:79:a1:ea:de:70:5c:35:
38:96:dc:dd:3e:81:1b:3c:b3:e0:5a:a4:21:15:32:
a2:7e:c5:a6:f7:c5:ea:86:6a:ba:56:a3:cf:dd:0b:
8b:8a:c6:ac:22:45:d5:79:a4:d5:ae:c2:7e:8f:51:
e0:1a:49:af:9f:69:86:18:e0:05:f3:c9:63:a5:0c:
33:db:d6:ed:e7:b7:3f:23:e6:0d:7e:d5:43:5d:8b:
3f:4a:de:1a:47:ee:99:02:0c:d2:dd:33:f0:2a:cf:
d7:d3:69:e0:83:40:5f:34:a6:90:2f:11:bf:93:86:
87:0c:76:87:19:df:0e:8c:e1:3d:46:99:e9:78:32:
33:fb:78:35:ab:16:26:e5:9d:dc:a0:2a:c7:c3:be:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FF:03:21:85:3B:FC:29:96:80:98:35:EE:3C:09:43:59:17:1E:3F
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:78:dd:d9:b9:d4:83:2f:3f:86:9f:2f:33:53:ae:e2:45:5f:
2f:a9:e7:e1:a3:ba:f0:c6:76:59:fb:00:28:f2:ec:04:6e:e1:
d8:83:74:a6:a2:14:75:40:86:84:82:2b:91:1a:4b:41:7b:21:
5c:4c:6c:d3:d4:14:51:fb:81:5e:2d:f5:09:0a:02:4d:bf:52:
25:2a:41:11:4e:a5:db:53:04:35:fe:65:47:66:2e:19:87:53:
60:0e:5a:79:2c:30:a4:65:df:a3:06:2d:fc:e2:b3:8e:fa:5d:
c6:28:76:7a:8f:2d:e3:6e:85:15:3c:3b:19:16:c4:ee:94:7e:
74:59:b1:4d:6c:0e:76:e8:ef:f4:8d:26:9d:00:9d:e0:58:f6:
da:79:0a:54:79:46:5b:db:fc:7f:b2:ef:30:86:5f:d5:95:ff:
8e:b7:aa:76:1e:e6:37:83:1b:22:91:56:c5:e7:17:3c:20:b6:
bb:e0:0d:87:40:a8:ee:2f:fa:11:b2:d8:93:a7:61:a6:05:fa:
6f:df:ac:02:1a:2e:36:73:02:b3:a5:dc:78:a1:cf:1d:48:86:
19:71:8a:bd:7b:49:af:9f:95:ae:a4:76:bf:3d:c0:bc:38:32:
5f:30:70:c4:23:5d:6b:db:e7:91:16:43:9c:31:22:67:9e:2e:
e7:0b:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:09:59 2025 by rpki-client