Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: AlQElgp3V45g6LIP2WDYzpAsquqmqzRkTJGWT/ZX8dA=
Subject key identifier: EB:52:8F:CF:FC:7A:ED:C4:48:A3:A6:DD:52:9F:EC:A5:7F:2F:FA:40
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 019844E394DA87D4DA072C917F7A0FDDEEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 04:00:22 +0000
Manifest this update: Sat 26 Jul 2025 04:00:22 +0000
Manifest next update: Sun 27 Jul 2025 04:00:22 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: 4cPy6/fbvy3pfQSa62R/00ujCyTqOoBU+9ZOsdJ99UM=)
2: 6-1osKnhRTEecieKzI4jIsepkfg.roa (hash: ckgtNbcE4kjHePU129hSHdQEi9afRo+rLgqsRFEg78g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:94:da:87:d4:da:07:2c:91:7f:7a:0f:dd:ee:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Jul 26 04:00:22 2025 GMT
Not After : Jul 27 04:00:22 2025 GMT
Subject: CN=eb528fcffc7aedc448a3a6dd529feca57f2ffa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:00:33:0b:53:da:fa:44:f3:ec:60:53:f8:fc:
5c:5e:92:8f:89:df:5c:0d:56:87:d7:d0:73:87:30:
01:9a:a8:df:65:24:e4:14:31:47:c6:73:d6:27:58:
d5:70:66:36:aa:a3:38:4e:55:8e:8b:d1:a1:f4:0c:
c7:33:fe:b6:b6:cd:67:b1:97:77:fc:85:a9:bd:be:
f8:82:d5:e4:be:ce:62:ca:13:99:ba:ff:e7:1c:b3:
8c:0c:6a:ff:aa:73:bc:d8:1f:9d:82:ea:eb:1a:09:
c5:5a:1f:bd:c9:5e:09:92:bf:5d:f5:4b:ae:49:86:
67:61:94:6c:01:9e:c8:c2:e3:7e:9b:63:1b:44:d8:
26:b7:cb:05:cc:8b:ef:2d:40:5d:b2:2e:80:6e:35:
b4:2e:cc:32:9a:96:7b:fa:cc:3d:95:ae:d2:af:66:
44:08:09:9f:32:13:89:bc:0a:ab:d5:13:74:a0:bf:
85:17:7a:43:d0:07:31:5c:00:b0:91:fa:56:fb:6b:
39:90:3b:a8:e9:b3:51:12:ac:b2:f4:c2:83:59:28:
72:9d:35:70:8a:96:b0:22:86:e9:d7:e5:22:00:f6:
c3:e1:c4:fd:eb:76:58:dd:c8:a4:2b:95:0b:dc:2f:
c9:b8:a1:9d:19:d7:7f:89:0a:6a:74:7a:eb:77:9e:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:52:8F:CF:FC:7A:ED:C4:48:A3:A6:DD:52:9F:EC:A5:7F:2F:FA:40
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:52:57:cb:78:54:73:4a:f3:13:ac:77:98:ed:25:44:90:53:
bd:80:34:ab:8f:a4:02:13:e2:38:30:13:12:ec:64:75:99:c5:
40:03:84:31:d2:e6:a9:62:2d:a0:66:3a:1a:f4:15:6d:66:bc:
43:50:a9:73:85:a9:44:b1:8c:74:bc:f2:a1:76:92:a8:d7:13:
e0:40:94:f4:64:50:2b:b7:0d:5a:40:14:6e:3b:ed:11:81:97:
37:60:f5:f7:b8:63:eb:84:c6:26:43:6e:e5:de:2a:a3:1d:4b:
96:7f:2c:3d:2e:ae:6d:13:46:05:d8:e0:f1:d5:bb:e2:8b:b2:
2d:c2:1c:72:ae:cd:4a:bb:fd:b0:cb:2c:d8:f5:4a:3c:5e:8d:
38:db:8c:7c:9a:10:1d:4c:ed:c0:e4:20:4a:0c:f6:ed:a4:bd:
4e:2f:90:82:25:ba:3f:39:62:95:dc:bd:3c:6a:60:f9:e0:55:
68:6a:fc:23:ba:9d:82:86:15:fd:ac:40:60:12:47:4d:06:02:
04:18:d2:d5:b3:63:7a:28:52:0a:3a:e7:0b:c6:a4:20:06:77:
0c:9e:7d:41:2b:ff:b2:26:20:2c:fe:2c:60:17:40:e2:5e:23:
d0:ca:c9:28:5b:8c:aa:93:74:c3:5f:73:f5:ae:03:03:42:d0:
2d:60:8e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:05:25 2025 by rpki-client