Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: IjsDFAzQGNW+ehdAzMuMuKRsp9rIfvutF5XB+qFoy/U=
Subject key identifier: CB:34:21:82:F1:41:91:8B:98:BA:72:F2:35:E2:A9:08:A6:43:01:03
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 019847E48DBA76FF848B1E4CE1B90BB9A884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 18:00:17 +0000
Manifest this update: Sat 26 Jul 2025 18:00:17 +0000
Manifest next update: Sun 27 Jul 2025 18:00:17 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: Y9QDlrfPKWM0BL+44Ubhb16A20zhbkwAwJuYtvEiTTU=)
2: PUu9JBqT0q_kMegzLpokDy8FZpg.roa (hash: GZSimUwCl58YJS+NoDvHAGPvWk0bb2fLNY1EJxjHl3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:8d:ba:76:ff:84:8b:1e:4c:e1:b9:0b:b9:a8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Jul 26 18:00:17 2025 GMT
Not After : Jul 27 18:00:17 2025 GMT
Subject: CN=cb342182f141918b98ba72f235e2a908a6430103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:01:01:18:e7:91:8c:45:fb:2a:1f:c2:8d:
67:1e:24:01:43:fd:73:c2:10:be:28:d9:17:58:a9:
d4:bb:bf:24:db:0f:cc:d3:94:e3:b3:f2:c6:76:47:
e6:4d:70:59:a2:f7:a3:b2:91:e0:2d:74:4e:97:4e:
06:80:70:09:1c:4f:ac:71:b3:2e:d9:40:22:5c:50:
6e:2c:cf:63:fc:d3:70:60:00:02:92:c8:b6:80:33:
40:3a:4f:f8:7a:bd:c4:2e:f3:1b:0d:d5:26:d2:0c:
5c:e8:99:a8:58:c1:18:78:0a:a3:00:28:09:3a:70:
75:22:b7:04:94:da:4c:45:03:cc:90:bf:2b:d3:97:
bf:cb:c9:80:1d:97:ca:43:4b:b4:e8:c6:de:cd:4b:
8d:0a:9f:b7:9a:8c:fe:d0:37:36:e1:8a:c2:5c:c3:
2e:5c:86:52:0b:fc:13:e2:ac:dc:af:ba:0f:d6:16:
34:90:e7:8b:df:fb:bb:e4:13:c1:02:f2:e5:16:c2:
0e:f2:39:0f:aa:cc:cb:70:3e:26:bf:6a:c5:04:ac:
8f:50:25:55:01:8c:28:99:c8:8d:0f:3a:a8:a7:1a:
ae:e3:10:ff:ab:27:46:57:50:ba:44:bf:a3:4e:f1:
55:ba:8c:c8:54:69:5c:4c:83:a5:42:1c:59:3b:fb:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:34:21:82:F1:41:91:8B:98:BA:72:F2:35:E2:A9:08:A6:43:01:03
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:94:26:97:65:fb:ad:fc:e7:54:ae:57:a0:22:71:1c:9c:51:
60:2a:91:bc:67:62:b4:0b:18:57:ad:08:c1:56:50:b0:ab:92:
b2:58:37:c6:10:7f:86:fa:4d:9a:52:f3:f3:b1:49:6d:33:b0:
f4:e0:69:01:a8:31:53:4c:34:b3:a0:66:76:77:fc:7d:d0:61:
43:59:73:25:7d:8d:9d:c2:f4:9e:71:2b:8d:ef:ed:6d:93:04:
2c:4f:84:25:67:05:de:65:f8:24:ee:a4:ba:f7:7e:d2:d1:9c:
4d:30:f4:22:fe:03:ba:ea:60:32:72:96:60:d0:43:c9:17:6b:
9c:b1:e3:c2:15:bc:3c:e8:0b:e3:1d:05:dc:c3:c5:c5:a8:71:
91:14:24:64:6d:56:07:87:6f:7c:57:b6:5d:53:f8:7b:f6:29:
f5:04:ef:60:47:f7:06:0b:72:ef:6b:4d:67:c0:de:f7:63:0b:
28:7a:b0:aa:fe:0f:3c:4e:6f:f5:0f:cd:04:8e:54:f0:f0:24:
0c:6e:37:ea:3a:98:84:7c:80:94:32:08:b6:71:1c:97:60:7f:
0b:d9:7b:51:5e:96:b5:cc:ad:2b:30:da:61:e4:0d:bd:d1:a8:
24:69:ae:3d:15:1b:98:7f:70:d7:7b:50:94:30:f1:7d:d0:8f:
fd:ce:5f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:12:27 2025 by rpki-client