Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: uk0SDzuAoCPL73GcDmK9Qwbci9VY9yTDiXcHOBm+PiU=
Subject key identifier: CD:2B:22:60:D2:AF:2B:6E:9B:7F:56:A0:5C:F4:4E:C7:2F:26:56:B6
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 01984588ECF646B05E7D4007EE80E3098828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0CBA
Signing time: Sat 26 Jul 2025 07:00:58 +0000
Manifest this update: Sat 26 Jul 2025 07:00:58 +0000
Manifest next update: Sun 27 Jul 2025 07:00:58 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: qKrU9OsgEOOKC3I7rC/sil4a3GYwZ9ZSN0jRRB4RLzg=)
2: KKoVkt36UzhB8KBbFPImmZW73vA.roa (hash: GhpkIl47GYlGJw2nWrVttpHKLmkRE0ZfoRg/RpNRI/I=)
3: fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa (hash: Y2XsWw7qdiuLK4RPieRUDih+9enRniyBYvTmKwdcDsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:ec:f6:46:b0:5e:7d:40:07:ee:80:e3:09:88:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Jul 26 07:00:58 2025 GMT
Not After : Jul 27 07:00:58 2025 GMT
Subject: CN=cd2b2260d2af2b6e9b7f56a05cf44ec72f2656b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9b:4a:24:81:20:8b:8a:19:f1:5a:24:79:25:
2e:8d:30:a8:d2:17:11:48:ec:55:43:01:26:75:b0:
69:43:fd:3b:43:fb:4d:bc:aa:4e:f2:f2:9d:89:ce:
eb:01:26:1d:74:b7:ca:34:42:18:0f:2f:17:6e:55:
bb:29:e9:ec:49:e4:96:00:14:8c:5a:92:6e:72:ec:
43:d8:e0:8e:80:84:c1:4d:3e:7e:c5:9a:4c:f2:c8:
3c:80:71:12:61:c3:8b:52:ab:f8:27:34:f3:26:12:
36:e8:6f:26:f7:6d:b6:71:a7:58:e3:01:06:2f:26:
88:4d:75:10:a9:30:4c:45:be:97:99:b1:ff:2e:b8:
e7:d1:bf:8a:98:dd:23:53:8f:1f:46:4f:51:94:81:
fc:9d:d9:b1:76:e6:b3:88:a6:8a:0f:30:3c:99:2b:
54:61:aa:67:f8:24:6c:f1:6a:c4:3d:1c:1d:24:a2:
f0:94:f4:cf:22:61:72:55:5c:48:16:d3:86:93:5b:
c8:f8:0f:dc:8c:aa:66:37:c8:71:bc:8f:01:16:59:
fa:b8:ca:f0:80:ad:24:fd:67:dc:e3:93:11:0c:50:
79:e9:61:19:41:e5:8f:41:be:72:2d:30:89:32:8d:
07:28:b8:24:ab:d7:5b:71:00:67:b0:c7:af:5f:1a:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2B:22:60:D2:AF:2B:6E:9B:7F:56:A0:5C:F4:4E:C7:2F:26:56:B6
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:db:84:26:56:48:59:a9:96:2a:c3:f7:4d:20:06:13:7d:e1:
33:2d:9f:86:71:e8:99:0c:42:0b:eb:40:e9:96:ab:6a:17:13:
74:7b:59:8c:ec:cb:61:c0:52:a5:e5:71:59:30:74:a5:75:6d:
94:4e:06:2d:91:b0:64:7d:d3:a2:07:15:1a:9e:47:57:da:c5:
31:1d:52:67:0e:fa:e8:33:53:75:24:0e:5b:6d:76:86:c6:1d:
8b:04:c9:64:75:93:9d:5e:44:1b:7c:34:c4:83:7d:ba:82:cc:
d4:4a:64:a5:31:de:e0:62:82:7c:a5:32:a9:e0:68:9a:05:f5:
08:3f:7a:c4:8c:08:88:18:81:ce:a8:c8:63:40:d8:86:df:cb:
de:bc:09:a3:87:1a:9c:74:81:1a:4a:26:33:a9:51:80:19:f5:
cb:7f:7a:f7:b5:8c:7c:7f:95:f5:91:bf:80:45:84:45:e0:c0:
08:58:d4:c6:be:d5:7e:76:e5:7c:b1:7e:e9:bf:1e:28:27:7f:
0f:34:66:92:fa:18:29:7e:7d:aa:c0:cb:49:f5:8d:9c:15:3c:
44:88:aa:5d:04:04:4d:22:f9:8c:f2:6b:3a:4c:53:d7:a7:6d:
a7:7a:e6:2b:12:dc:2b:26:e4:cc:d1:99:57:46:d1:25:d9:0c:
4b:70:bb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:29:47 2025 by rpki-client