Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: 628mZLpFLHHeM0mfm2ENXYaJ8PDJe65cma3QS2qXfT8=
Subject key identifier: 48:C8:13:B4:D4:AF:0A:C8:FE:FD:6C:26:E1:5D:66:44:DD:63:79:3F
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 0199228C2E32E982C3266291A0CA80D3CEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 0F23
Signing time: Sun 07 Sep 2025 05:00:35 +0000
Manifest this update: Sun 07 Sep 2025 05:00:35 +0000
Manifest next update: Mon 08 Sep 2025 05:00:35 +0000
Files and hashes: 1: 0E7XqwXvQw8zGg6cfEDvAxEUfw4.roa (hash: GEurlnwNp4FPEWbJDU+gHsQep+536ZgKzEj3iyCeYrM=)
2: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: kKzsCgyG56ml4Iswfa4jn1DRp95bro+vEP0UcdJOJME=)
3: 5YRtqk6Jp7Zam_D7fc_X7XfH8s4.roa (hash: X5F/YiS9H2WE1ZFG9REO1WI3BKWNsouj5lZWL1J+hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:2e:32:e9:82:c3:26:62:91:a0:ca:80:d3:ce:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Sep 7 05:00:35 2025 GMT
Not After : Sep 8 05:00:35 2025 GMT
Subject: CN=48c813b4d4af0ac8fefd6c26e15d6644dd63793f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:e1:f8:76:08:8f:b8:ef:0c:bc:91:97:53:
3f:a4:12:d8:39:83:81:2b:1f:3a:b8:12:50:d6:20:
fb:5b:3a:43:ef:01:79:e3:13:20:e7:eb:0c:3b:74:
ec:11:1a:fd:11:96:67:49:2b:5d:20:92:8a:c8:5f:
0e:1c:9e:13:8a:8a:7c:23:b2:eb:26:56:b1:3f:a2:
5e:10:d7:04:bf:16:aa:92:e6:de:ce:bc:48:7c:34:
b7:0b:b8:f9:92:98:89:18:d1:bf:37:3f:58:fe:e0:
4a:e5:8b:ea:80:25:7e:e3:7a:a9:70:91:4a:dd:e8:
de:b2:7c:10:14:44:b6:a7:9d:8c:84:5e:56:ff:a0:
37:11:7d:0d:40:a9:89:ec:1c:a8:82:c0:d2:a2:84:
3d:82:c4:05:e2:29:80:5a:c4:b7:5f:22:ce:77:82:
dd:58:a3:ab:50:3d:f2:65:6d:a3:c8:eb:70:6c:4b:
b5:a1:e7:d2:b9:59:8e:d1:f1:2a:df:1a:92:39:e0:
4e:f0:76:60:02:76:05:33:38:cd:ad:45:1a:1f:39:
26:54:81:d2:c1:4e:52:cf:94:5a:96:e9:6d:cd:02:
69:2f:7a:88:7b:de:d5:a9:cd:66:59:65:93:22:a9:
fa:53:77:e6:9f:de:41:2c:87:d9:ff:d8:f6:f9:de:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C8:13:B4:D4:AF:0A:C8:FE:FD:6C:26:E1:5D:66:44:DD:63:79:3F
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d2:e1:4e:fe:aa:57:79:34:ea:20:fc:a5:e3:a9:4b:f4:a3:
db:0f:73:c1:02:bc:f5:6c:07:36:bc:ba:69:ac:e5:47:1f:ac:
f8:fc:64:52:7f:be:cf:5b:56:fa:15:dd:bd:0e:57:ed:6e:e2:
48:74:d0:bb:6c:f8:92:20:7d:2d:f1:f2:4a:87:c1:cc:e1:09:
25:b1:9c:d9:01:53:df:e7:30:11:46:f6:3d:24:7a:5b:f0:4e:
88:e5:3c:23:d2:c5:fa:d6:30:24:cf:e6:2e:61:ad:c9:b4:29:
21:db:97:0a:83:46:5c:b7:58:b5:3b:aa:ce:5c:ef:c0:77:e9:
e3:88:98:b8:d8:70:bb:4c:e9:26:22:e3:c1:54:d0:4a:28:b7:
c3:e7:8c:16:a1:22:10:6c:73:bd:98:bd:3c:c5:1b:bd:8d:d0:
2a:4a:ee:e0:6d:26:a3:bb:7f:0e:fe:47:52:30:b9:08:ed:a7:
1a:52:78:93:53:45:87:51:a4:f8:e4:ac:0d:5e:6a:57:c0:53:
0c:8d:27:19:eb:f0:30:b1:b5:64:c0:28:8c:76:ad:65:bc:1a:
76:47:8d:32:1b:24:77:84:55:94:13:90:1a:7c:30:e7:bc:76:
b3:a7:e7:d5:26:c7:85:b3:4c:a1:0b:c5:e4:85:a7:d4:b5:b7:
c7:79:d3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:08 2025 by rpki-client