Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: 74RALctfCrvhxlxIIslWIbyFS7LlCmKtZctLtE7oDz4=
Subject key identifier: F0:1D:3A:70:6D:55:25:3A:17:DE:89:0B:E3:48:22:D6:25:88:26:06
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 01984A41374D9FC5B5DAC6F6642F55BD9F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 12FB
Signing time: Sun 27 Jul 2025 05:00:44 +0000
Manifest this update: Sun 27 Jul 2025 05:00:44 +0000
Manifest next update: Mon 28 Jul 2025 05:00:44 +0000
Files and hashes: 1: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (hash: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=)
2: J7XTvcN1MW518JWo3pumgkIR1Qs.roa (hash: SdCNBkFRyN5y9hoeTIHABB2iuWEfHwlmwXNsAfXpH+w=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: 7pFsrZMeS8KGG2AshjG+dOOh7Wq5qKnnYBHuSv8jfOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:37:4d:9f:c5:b5:da:c6:f6:64:2f:55:bd:9f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Jul 27 05:00:44 2025 GMT
Not After : Jul 28 05:00:44 2025 GMT
Subject: CN=f01d3a706d55253a17de890be34822d625882606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:a5:68:7f:a0:a1:2a:11:a6:20:1f:80:9d:
a0:82:25:65:e3:65:71:64:3f:3c:1f:cf:81:9b:81:
2b:dd:fa:02:75:e0:89:d3:17:24:a5:31:13:1f:a3:
9d:e8:5d:ee:fc:49:ee:bf:3f:b1:1b:8d:2c:7c:01:
19:1e:47:88:fd:79:a5:da:97:79:7e:9c:bf:eb:df:
a2:d3:7d:7b:f6:7a:59:e6:71:29:df:8c:1f:5f:6f:
8c:a0:72:ad:a9:68:a3:b7:94:37:c9:00:74:12:16:
50:cd:48:7f:32:5e:5e:b8:25:70:ef:fb:63:b1:ee:
66:0b:a0:80:70:b2:b8:37:64:ad:78:bf:85:82:dd:
65:08:77:2b:fb:1f:34:02:66:92:5a:28:46:41:1c:
c2:e3:61:71:43:57:67:aa:0e:2a:25:10:cd:75:4a:
56:63:9c:e7:1a:7f:88:d2:f0:ad:81:a8:09:16:34:
a7:f3:42:b9:85:fb:2f:3b:f3:0c:17:99:77:b7:76:
a4:cd:c7:02:24:90:ca:1f:3e:cb:82:74:2c:de:36:
91:f5:4c:ad:fa:a6:68:0e:5f:50:ae:60:43:c0:61:
16:64:5d:c7:f0:af:79:27:43:62:5f:83:89:48:f2:
e8:df:79:77:cb:ee:02:3c:33:cf:16:50:82:17:b6:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1D:3A:70:6D:55:25:3A:17:DE:89:0B:E3:48:22:D6:25:88:26:06
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:83:c1:66:6a:cc:72:70:38:16:5e:b5:71:c6:8e:a6:8e:ba:
26:1d:79:c3:8b:18:da:d3:2e:0c:ce:0f:cc:58:b1:41:84:da:
7d:c8:3e:86:26:77:e0:ef:31:e6:6b:25:b9:24:4e:2d:68:ed:
58:e9:e0:c3:20:9c:72:23:7a:71:df:bc:fa:22:f2:00:de:43:
2d:84:7e:b2:b1:b8:13:67:e3:17:57:b3:5c:e2:6b:01:1a:52:
a5:fd:b9:84:3f:8d:3c:43:77:f4:b9:e0:d4:ef:61:e2:7c:4d:
15:1f:9a:79:21:84:c8:d3:75:0b:35:59:c0:11:4d:fd:f6:d5:
26:15:38:dc:93:94:61:1d:18:af:95:7c:3e:29:9e:e8:ed:ea:
53:bf:ed:14:b1:15:23:37:23:51:31:5e:20:be:50:2e:84:81:
ef:6b:bb:b2:50:72:e9:3a:1c:fc:c8:82:a3:3f:0e:e7:7f:56:
73:e5:6c:24:6a:a5:77:19:4c:02:b5:f1:3b:d9:a5:fc:47:ee:
ec:f1:5e:b2:5a:39:4c:00:ea:9a:e1:67:40:65:c0:af:36:b1:
2a:b4:9e:ba:51:c2:0f:9b:69:07:85:0c:f3:8d:63:eb:00:77:
e8:2b:e3:43:83:e2:7e:02:92:92:08:cf:4f:4d:ee:cf:21:a2:
4c:fa:33:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:24:39 2025 by rpki-client