Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: fEwORTM8bV5gEJQ81DBcEHYpXXtgw7I0O9Q7g4PtpD0=
Subject key identifier: 27:E1:68:54:36:DF:08:28:DE:09:81:4A:3C:5E:6A:B9:D1:D0:D6:93
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 01984A7838070DA31111A12B140646AB170F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 0D7D
Signing time: Sun 27 Jul 2025 06:00:49 +0000
Manifest this update: Sun 27 Jul 2025 06:00:49 +0000
Manifest next update: Mon 28 Jul 2025 06:00:49 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: Rl5kPGM/P6jGB+qmgpbW16SpUDC46rWrjVxNQV4Nqj0=)
2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:38:07:0d:a3:11:11:a1:2b:14:06:46:ab:17:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Jul 27 06:00:49 2025 GMT
Not After : Jul 28 06:00:49 2025 GMT
Subject: CN=27e1685436df0828de09814a3c5e6ab9d1d0d693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:30:9a:30:f5:6d:08:b4:33:54:bb:44:98:
61:3d:e5:9f:50:2a:1b:b5:4f:6a:f7:35:3f:a9:d3:
5b:a8:ba:b5:13:3d:b3:29:36:0b:4d:54:7e:5b:d4:
a2:10:a9:b5:cd:cd:5d:d1:bb:78:7f:1a:d0:62:ca:
f3:2b:5d:78:69:95:7f:34:4e:63:a6:73:bf:51:91:
4f:31:bd:e2:75:d5:aa:6c:db:5d:8b:dd:3f:f4:17:
6d:6f:f8:40:e4:4a:2f:85:b6:5c:f6:cc:17:35:91:
9d:d7:88:f5:c4:5c:bd:08:56:50:3e:71:03:59:b6:
d1:2a:bc:62:30:89:dc:2a:cc:bb:fe:f0:5c:1c:4c:
7c:17:f6:8b:91:f9:7d:55:58:70:d4:28:2d:6a:a3:
4c:06:85:70:56:85:e8:1e:b7:fc:29:f9:de:df:cf:
33:8b:44:c8:ae:1e:de:a2:50:27:d7:de:72:72:5b:
19:96:80:f8:02:23:5d:78:e2:0a:47:c8:08:13:f4:
b5:3d:3d:5e:ac:06:34:51:ea:a6:cd:97:b5:99:9e:
74:57:fa:22:a4:8e:46:85:eb:cc:1e:a1:37:ef:36:
01:37:34:0e:f6:44:5c:e4:0e:42:37:f7:3e:c8:da:
e2:8b:64:26:7b:93:25:99:58:bd:1b:bc:8d:4f:b4:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E1:68:54:36:DF:08:28:DE:09:81:4A:3C:5E:6A:B9:D1:D0:D6:93
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bb:83:e6:f8:f8:a8:9a:21:bd:72:15:14:bc:bb:c2:cb:a1:
50:f7:c1:9f:c5:1c:4a:70:d0:86:25:b9:06:51:b8:18:8f:e7:
47:22:e0:f4:fe:73:b1:84:71:3f:c6:61:9e:aa:42:a2:3a:7c:
f4:24:3c:30:06:59:5e:c2:72:a5:4f:5a:ad:6c:62:ff:94:68:
d9:ba:06:e0:ce:1c:60:74:7d:22:fe:58:fb:1b:cd:07:23:3a:
b1:55:db:f0:75:5e:51:b5:c1:46:69:90:25:27:d4:f2:66:dc:
9f:86:d0:fc:a8:8b:d5:ac:16:73:a1:03:0a:61:5f:19:a6:14:
d4:dd:7c:0e:69:fa:31:02:ac:0f:f0:20:76:e8:f1:09:6e:cb:
6f:04:53:f2:b8:dc:37:73:04:a2:d1:ef:ba:63:6f:af:59:f6:
64:43:68:38:ae:ef:5b:0d:19:09:f9:83:73:7d:25:f5:45:58:
79:a6:4a:d2:67:98:ad:88:4d:22:10:91:04:fb:d0:17:0b:0e:
00:da:4c:68:b7:98:1c:93:67:87:84:f8:e9:26:6b:3b:18:0d:
2c:f0:95:5a:1a:fa:98:85:37:a4:ae:5e:6b:46:5f:fe:96:ff:
5d:c3:b8:1b:a0:e9:1f:7d:8d:b7:b2:c0:e0:fd:5d:fa:1b:3d:
4f:09:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:10:00 2025 by rpki-client