Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: LZb3RoM8mb3r3UlOihqG5N0LQnc6CKSXxkQp+irrUJU=
Subject key identifier: AB:62:D3:3F:BC:49:99:88:B1:1D:B0:14:0A:71:C3:A7:B9:35:8E:85
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 019922C35DCE39EB2D3FEDCEFD07AC5E58F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 1425
Signing time: Sun 07 Sep 2025 06:00:52 +0000
Manifest this update: Sun 07 Sep 2025 06:00:52 +0000
Manifest next update: Mon 08 Sep 2025 06:00:52 +0000
Files and hashes: 1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: CmIVKPWSIEtuUHJv7MfwooVZBChM0IL0Clr9Jgkxs3E=)
2: vHnKRxUajbywNAqL6nOx-jDQRUM.roa (hash: 9L1D0lkWg2QABU5Zj6IAqZoeAKA6O0lNRb8Xz0hsQns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:5d:ce:39:eb:2d:3f:ed:ce:fd:07:ac:5e:58:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Sep 7 06:00:52 2025 GMT
Not After : Sep 8 06:00:52 2025 GMT
Subject: CN=ab62d33fbc499988b11db0140a71c3a7b9358e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:3c:d5:9c:9f:38:f9:6f:e3:b2:7a:74:0d:
ce:93:d9:3b:8c:f2:fb:57:6c:88:bf:1f:3b:61:da:
10:c4:97:e3:86:fa:6b:39:a2:67:52:a4:ed:11:54:
46:6a:e1:40:93:78:40:38:e5:75:60:82:c8:14:be:
b9:34:d2:d9:2a:d2:a8:04:f6:3e:75:2c:99:f2:3d:
b6:b4:04:93:e0:c1:b4:03:90:57:57:30:1a:d5:33:
b1:01:34:ff:da:55:10:ce:d4:28:c4:18:89:f7:2e:
3b:ab:9e:7f:59:40:ff:35:25:bb:6f:47:7b:28:94:
b6:3f:86:5c:e3:50:13:61:10:af:c3:08:5a:35:96:
8b:f5:a2:f2:d1:79:d7:4f:99:1b:dd:da:6f:40:3b:
39:14:55:d1:50:f8:2a:bf:f1:9a:f1:bf:ac:91:18:
0a:c0:bc:55:c7:a8:28:f4:4a:76:17:91:4e:cd:76:
e4:90:78:fe:64:e8:76:02:f6:b9:d7:c6:47:89:45:
9a:10:9e:18:8f:a3:46:58:4c:31:1a:bf:f3:55:61:
17:e8:2e:d0:99:e0:2b:da:3d:ea:a2:a9:52:ef:cd:
cc:19:c7:1d:c5:22:66:2f:45:8d:b6:6c:9c:2f:bd:
de:d9:de:21:27:36:bb:80:e7:5a:53:e0:d1:64:77:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:62:D3:3F:BC:49:99:88:B1:1D:B0:14:0A:71:C3:A7:B9:35:8E:85
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7b:98:b5:93:fe:85:10:68:c5:39:7e:f2:83:be:ae:41:9a:
b8:52:49:ef:45:08:ca:b5:7c:13:6a:be:a6:0a:22:57:af:8a:
75:05:f1:ae:50:18:a4:d2:5e:68:e2:d2:b1:11:eb:29:7f:ea:
da:66:f6:e0:2a:70:1c:07:26:58:60:87:fe:63:bf:ba:70:7c:
de:9b:ad:f7:1f:3a:1b:2b:3d:ba:df:52:db:b9:3d:fd:61:47:
a5:3a:bd:59:28:32:3a:a8:8f:f7:48:48:a7:e2:25:49:8f:09:
ab:4d:5f:ab:d2:3f:d3:43:71:2d:f7:f1:5d:db:16:64:31:2b:
64:9a:ce:0d:1c:05:d1:1f:84:5d:c9:8e:18:f6:28:87:d2:c6:
04:1e:59:6e:f4:95:3e:20:76:dd:53:21:d9:62:11:82:df:ba:
93:ad:fa:54:f5:44:bd:cc:57:25:f9:0c:4b:eb:34:b4:64:62:
08:0b:bf:a6:c5:6c:9f:c8:b5:7e:64:c7:39:27:ff:af:6a:d6:
9f:f3:43:f2:c5:c7:58:ac:6e:75:eb:2b:19:b2:6e:a3:ee:c9:
b2:bc:dd:ce:8b:d6:a8:de:9c:94:00:14:4f:82:6e:55:14:21:
49:7d:46:62:9d:f3:ce:26:9f:ca:23:f6:2c:d0:cb:5f:06:0a:
f6:c8:c1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:30 2025 by rpki-client