Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: aqprAnlhyYJmL30eEsMr8TrEZAZcQkhsfS7kNnLXHpY=
Subject key identifier: 55:F1:CF:D3:FE:B5:E4:37:89:C2:24:B5:DB:50:02:61:11:06:C3:3C
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 01984AE58124BDC1C911A4CF36475F0A0FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0C81
Signing time: Sun 27 Jul 2025 08:00:11 +0000
Manifest this update: Sun 27 Jul 2025 08:00:11 +0000
Manifest next update: Mon 28 Jul 2025 08:00:11 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: cgZBFDpei79H80AR8RQAaVueylVolyTMSKeNUQz53T0=)
2: 1-Mnf3JnGm30D3TVdL8D8i-JJTg.roa (hash: FQArZOtG/iI5+2OZ+rGhEkabMbeYZiFVJ69aFAVvKUM=)
3: ViACi2znHcxjvEoTWJabRySlSug.roa (hash: /lKDXYbMBEGiN9zYRBMEKiyvRO0eOc45ePzpVSUQyuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:81:24:bd:c1:c9:11:a4:cf:36:47:5f:0a:0f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Jul 27 08:00:11 2025 GMT
Not After : Jul 28 08:00:11 2025 GMT
Subject: CN=55f1cfd3feb5e43789c224b5db5002611106c33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:21:ed:be:e4:41:84:cf:d6:60:eb:7d:82:
41:a1:65:4d:c6:31:0d:0a:5c:98:7f:b1:a4:3c:65:
5a:3d:dc:e9:2c:cb:87:e7:f6:ee:11:d5:ca:bc:7b:
ae:ab:b4:72:1c:a3:86:da:8f:17:ab:ac:3a:bd:70:
b3:8c:0f:ba:34:dd:7a:69:36:45:7a:4d:5a:72:0a:
67:8e:f4:80:63:64:54:2c:8e:79:64:d6:f3:ed:69:
a9:7e:34:28:07:b1:8a:50:0f:a9:44:2e:b0:7d:03:
8e:fe:cb:01:c4:f6:9c:ed:c3:f9:a8:b5:f7:48:bd:
1c:41:0e:c8:70:28:18:a8:ad:6f:36:51:92:b4:4f:
8e:b4:79:48:ca:6c:e2:6a:b1:5b:ac:61:85:e5:b5:
fb:b2:3a:6f:70:b6:bb:fc:8a:d3:36:b7:30:0d:3f:
71:f6:de:3f:64:a5:ef:0c:ef:70:be:2b:a6:fa:82:
65:23:53:79:31:09:29:58:01:c5:47:5c:a5:50:14:
62:21:d0:b8:96:52:90:b8:0a:19:a7:62:47:9b:9d:
cb:40:3d:bd:42:06:24:90:4e:49:4f:b7:1b:60:57:
da:d3:df:96:84:be:52:f7:a8:f6:ff:9f:e7:63:cb:
01:9b:eb:f4:68:b3:1a:8a:48:cc:c6:d9:be:70:73:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F1:CF:D3:FE:B5:E4:37:89:C2:24:B5:DB:50:02:61:11:06:C3:3C
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:44:a1:36:07:43:a1:f6:f9:54:ac:74:ec:72:c9:11:ac:e1:
25:48:63:03:25:72:e4:ec:c5:3c:54:8f:e1:85:88:21:5b:17:
84:f2:de:25:0e:7d:4d:e8:c5:99:60:ba:c0:be:f3:a7:93:08:
21:95:a2:c7:e4:2d:1c:09:a0:c6:5c:23:b4:49:77:10:b3:7a:
7e:7f:4b:25:5f:0a:24:0d:d7:ba:3a:69:95:9f:e3:7e:b2:3e:
36:a9:68:c3:89:7a:46:5e:ab:37:04:64:91:20:d5:a5:57:94:
8a:51:46:14:9f:e9:87:e3:d8:df:c9:82:3f:01:fe:e8:6f:76:
bb:4d:ed:67:80:7b:8f:1f:72:c2:ec:0a:42:3c:aa:3a:cf:b1:
da:19:f9:d0:24:89:44:0b:04:15:48:53:36:30:9c:7f:44:85:
a6:2b:4c:77:b7:9d:e8:7d:b1:fc:21:7b:f0:cf:70:26:19:35:
12:91:81:65:37:32:66:c2:21:3a:0d:70:33:a4:7a:ac:c3:05:
44:89:dd:f6:43:12:bf:99:ca:37:d6:4d:47:62:30:65:ce:81:
7d:26:5a:a1:93:2f:17:96:f0:4d:df:4d:e5:96:27:97:41:75:
a8:04:d8:28:19:d9:8d:e1:de:50:eb:10:f6:cf:97:ff:1c:46:
2f:ae:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:31:55 2025 by rpki-client