Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: XMXzYaG5kZDd+SbGGTBhRkB7ZqKG+/cRSkRlbRLECoM=
Subject key identifier: 0C:7C:40:40:A0:19:56:D0:1E:8C:ED:3B:27:49:33:2D:19:70:9C:DF
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 0198466440B25C7FA0BBD80399EDE85AD8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 11:00:31 +0000
Manifest this update: Sat 26 Jul 2025 11:00:31 +0000
Manifest next update: Sun 27 Jul 2025 11:00:31 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: 3dCmDO41phAEafCCcLaESE8gPfvo1VJhYqLCXTTIum0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:40:b2:5c:7f:a0:bb:d8:03:99:ed:e8:5a:d8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jul 26 11:00:31 2025 GMT
Not After : Jul 27 11:00:31 2025 GMT
Subject: CN=0c7c4040a01956d01e8ced3b2749332d19709cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a7:a9:80:74:88:7c:ed:1e:34:e9:da:a0:ee:
fd:21:a0:c8:6a:73:8f:b2:e9:9c:ba:d1:21:e4:ca:
80:99:6e:14:78:13:7d:d8:a9:70:a3:26:7f:af:54:
f2:71:f9:22:87:7b:0a:40:4b:88:2a:98:6f:41:1a:
5a:db:10:12:74:9a:2c:46:41:ab:09:84:85:84:61:
70:b8:5c:6a:93:8b:da:c7:19:74:62:ca:53:bc:76:
52:fa:c6:f7:7a:ef:f1:e8:d1:b2:d7:c8:3b:c3:0b:
f9:c9:0d:c3:57:6e:fe:4d:d9:be:d8:fa:c5:18:7c:
3f:81:c9:1b:46:cc:f2:fc:b9:8b:aa:6f:4c:14:13:
c7:04:47:15:bb:04:e0:ea:65:f2:cc:52:95:d0:9a:
45:79:6f:b3:87:c4:67:4c:0f:83:db:a9:6b:d1:e1:
05:a5:2e:45:82:40:93:e3:1d:d4:cd:f2:6b:ff:34:
11:f1:3d:91:79:91:56:57:f9:95:e0:88:c4:0c:84:
f9:ff:8f:3f:e8:4b:d7:5c:9a:a5:c2:53:0b:82:3b:
12:c1:14:ec:c2:9f:65:1d:50:04:a2:20:6a:c3:2b:
d0:d0:86:51:3a:64:6a:42:b8:aa:0f:ff:9f:7f:cb:
f6:31:2b:15:8e:20:a3:3b:1b:d0:05:3b:94:f7:15:
78:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7C:40:40:A0:19:56:D0:1E:8C:ED:3B:27:49:33:2D:19:70:9C:DF
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:df:60:bd:47:92:02:0e:59:0c:b3:3f:58:b0:24:01:3e:69:
65:9f:36:5b:0f:ff:44:fb:fe:3b:18:76:31:3b:98:ab:e0:d2:
66:fa:f8:43:11:df:4c:19:df:5e:4e:9f:d4:de:0c:db:0b:08:
c1:be:dd:e1:aa:8e:78:bf:d9:09:73:08:60:7c:1e:f2:f4:41:
f3:fc:9b:b4:9c:0c:2b:d3:4e:69:c7:1f:aa:8f:ed:3b:e5:90:
c0:3b:2a:4a:b7:14:42:20:fb:1f:6b:db:fe:00:b7:07:2d:9f:
cc:7d:bd:ff:93:12:2a:96:4e:79:94:46:c8:03:e8:62:59:3e:
8b:20:0f:f7:84:09:fa:29:34:f0:c2:ef:d8:3b:bb:00:79:4c:
ec:ce:89:4e:c8:48:3a:7e:85:95:8f:64:29:25:dd:65:b5:22:
23:1e:eb:86:3d:09:c1:27:19:0d:88:c9:24:f8:ef:ed:b9:17:
97:d1:e3:15:82:7d:1d:da:de:27:dd:d8:47:77:a9:5e:55:52:
8b:e3:da:75:27:37:d1:e8:54:98:f1:22:d3:8f:f4:01:41:df:
64:cc:25:fa:3f:97:94:4f:3c:56:88:ef:18:4e:6c:c5:20:45:
58:8a:ee:b1:7f:e9:dc:a8:e5:ab:f4:c3:67:08:fc:f5:ce:dd:
19:43:37:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:57:58 2025 by rpki-client