Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: gFbMgCXl9REf/OTkSeF1YFObprXHA/gT6C5rALrQugU=
Subject key identifier: 40:7D:0F:AB:A0:26:0A:C0:64:28:A8:18:34:16:06:4A:38:B7:02:80
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 019921B1C0A17C22BDBB296DAA7795955875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 01:02:01 +0000
Manifest this update: Sun 07 Sep 2025 01:02:01 +0000
Manifest next update: Mon 08 Sep 2025 01:02:01 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: qpMqLigiWVf/2/Qqf2fSFmmhhsDgSqRGWMWGqyWXAMs=)
2: l7vPco-uERFJMqFRkAMdbQ7Lr5E.roa (hash: TO5lGNkolgRHajeHI2wA6DsrdU/+GUsTcjWvGuJo2do=)
3: mizpW-CedPrysq20puaRplVzBas.roa (hash: ZhIE+FWiXGSht5bpIKov+Ga9kyrb4wRzjNebEuN3tlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:c0:a1:7c:22:bd:bb:29:6d:aa:77:95:95:58:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Sep 7 01:02:01 2025 GMT
Not After : Sep 8 01:02:01 2025 GMT
Subject: CN=407d0faba0260ac06428a8183416064a38b70280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:b3:85:c6:90:80:a2:66:42:4c:0f:7d:2c:
38:15:a8:e8:6b:f4:1f:ca:81:50:b6:77:cf:e9:8f:
21:e3:bd:9e:59:86:09:27:bd:3e:08:24:39:29:ee:
d2:db:0a:47:64:4f:8d:fe:e1:09:53:80:f5:6a:b5:
6f:a6:bb:f5:0d:07:c8:62:8c:b5:7a:e7:a3:05:9b:
38:fb:62:3e:c3:03:f4:f6:36:0d:f4:64:04:34:65:
6d:25:5d:22:f2:19:b9:e2:c8:c3:f3:4c:b3:c9:bf:
a6:ee:28:65:d1:51:15:d2:c7:c9:30:c0:1a:1c:a5:
22:47:ef:95:25:29:a4:9f:01:90:65:d0:10:71:14:
52:a3:1a:82:68:03:65:61:02:06:4e:de:f6:1f:40:
1b:7c:dd:69:15:5b:ae:59:79:36:6b:df:8e:0e:43:
84:18:cf:52:0f:2e:0e:86:da:59:0f:fb:f1:ca:15:
c4:d6:7e:85:43:eb:b8:6d:7c:6d:e9:75:3a:f6:56:
17:49:06:34:4d:2d:70:d1:9e:2e:ba:83:1e:a4:97:
e9:ea:01:22:b4:d2:d7:ae:28:f5:cf:ff:3e:63:d6:
bd:6f:75:40:a5:7d:fc:b4:d4:84:82:98:19:02:5c:
fd:c2:c7:bf:1f:32:b4:a1:95:f8:92:5e:f2:38:eb:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7D:0F:AB:A0:26:0A:C0:64:28:A8:18:34:16:06:4A:38:B7:02:80
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:31:6a:51:a5:97:ab:c8:78:54:89:80:eb:6c:7e:1b:85:42:
44:ab:2c:20:34:95:3d:a6:a4:48:eb:1d:c0:37:e6:af:17:62:
6c:02:6b:d1:8a:88:f0:b5:91:08:91:84:71:a6:e4:9c:bc:3f:
4a:9d:c6:93:86:39:c5:04:66:fd:5c:6a:d5:9a:cc:51:76:bb:
3f:2f:92:ff:a2:66:7a:12:58:e5:68:c6:67:25:1f:5a:3d:22:
59:57:a9:02:33:bc:ea:41:db:04:66:93:ff:a2:65:bc:37:46:
37:a0:ea:46:e9:75:1b:7b:94:97:fe:e8:37:28:83:0e:4a:74:
05:df:84:aa:42:41:e8:33:30:24:ac:aa:cc:e1:ff:56:a3:4f:
44:c7:ec:50:90:37:27:82:6a:03:49:0d:fa:89:cc:5b:58:eb:
c6:6e:92:a0:19:11:25:b7:7a:4c:2a:8e:f2:77:9a:cf:3f:73:
7e:ec:6b:c6:df:ca:56:2a:7e:b8:25:59:0c:6e:4e:cc:db:51:
43:9e:bc:1d:bb:da:ec:8b:53:c0:db:12:06:e2:d5:71:aa:21:
84:49:7d:c6:3c:f8:99:b7:0e:a1:6a:ca:82:a3:01:cd:05:17:
c9:ba:40:8c:df:15:85:70:20:c5:8d:82:9e:c4:02:48:36:0e:
39:a3:fc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:48 2025 by rpki-client