Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier: Dfcelp3ZfrxrRG+xeomf+9wg6PWpzc4sUCufgZIZNL8=
Subject key identifier: 6A:40:53:FC:21:51:EA:48:D4:56:0F:8E:DD:B1:94:17:FF:15:CD:7A
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial: 01991E78C14DE0AB44DB49B194B86A0AFEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number: 166F
Signing time: Sat 06 Sep 2025 10:00:54 +0000
Manifest this update: Sat 06 Sep 2025 10:00:54 +0000
Manifest next update: Sun 07 Sep 2025 10:00:54 +0000
Files and hashes: 1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: 26VLP8TwH1Wn2FOOiso3lMlXy+WHsQEQufKUHS6Bn3M=)
2: 2LgtOWneA5YvGT4_RnemdJk10ZI.roa (hash: i3ijgdJkTo+0tXZivrTiqDYQJFUVEZ40sKvM/03kC6k=)
3: BKyeRj9qftx8WGEdxVWFVc1273A.roa (hash: nhVWVpplcnh6PS/kPe42Tn4vpV4Cv/wcOxTwDykaiQM=)
4: NyrZFNY0uejKVVI5JPC7FPtdUjc.roa (hash: F1z0p2TvKAcesacsMKTiWmQh7lfOeilS7Yll9HRgTgE=)
5: ZOG0pJ01hXVC3r9SBSUX3nP3iWU.roa (hash: M3TtUoEAKZLP5h7xNaBXjv6fTWKL5P7QGAapCue/jYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:78:c1:4d:e0:ab:44:db:49:b1:94:b8:6a:0a:fe:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Validity
Not Before: Sep 6 10:00:54 2025 GMT
Not After : Sep 7 10:00:54 2025 GMT
Subject: CN=6a4053fc2151ea48d4560f8eddb19417ff15cd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:1f:51:fa:93:25:8b:35:d0:07:44:98:71:
95:d6:f2:b0:74:2c:0f:6c:a9:3c:cf:80:fe:c6:2d:
5e:d5:7b:b8:20:c7:a5:77:7e:57:8c:43:3f:9b:89:
69:e8:1e:0c:26:ca:b5:1e:15:b0:d1:4f:2d:43:ff:
81:39:c0:3f:3c:ce:33:84:7f:0b:71:4f:8c:f0:d0:
83:5d:2f:4c:38:d4:97:59:80:45:52:55:58:b7:fc:
14:da:52:0e:71:06:d1:76:18:40:07:20:7d:74:3a:
82:7a:15:1d:fc:da:0e:b2:74:ff:3a:84:3d:8e:33:
9e:df:d3:b0:01:09:b6:3c:42:34:8a:a1:25:07:0a:
18:b1:91:19:09:07:e5:06:b3:d7:b2:64:44:1f:b4:
7f:c1:98:07:27:08:cd:67:e2:4f:ff:8b:5e:40:b9:
6f:6b:aa:4b:07:03:d5:9a:9a:b9:82:81:c3:44:52:
f0:7a:b7:b0:78:25:78:65:0d:f4:9e:15:f9:a6:21:
5f:b5:94:0c:9f:65:a3:86:c2:40:6c:d6:9f:0d:d3:
5f:21:80:b1:13:08:6d:65:cd:61:af:97:8c:7b:34:
74:09:fb:ef:23:d4:d5:ea:d4:8b:84:9c:19:d4:5d:
25:75:93:f6:14:85:a0:42:37:f1:82:65:74:a8:b0:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:40:53:FC:21:51:EA:48:D4:56:0F:8E:DD:B1:94:17:FF:15:CD:7A
X509v3 Authority Key Identifier:
keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:66:59:95:54:33:71:8e:dc:6d:98:66:e1:2b:de:e1:02:b3:
b1:5b:e5:c9:85:ed:fb:6b:b8:cb:38:cc:1c:b3:b9:c4:45:b2:
51:1a:36:5c:90:38:26:76:d4:0f:90:ed:c6:94:72:c1:9a:1c:
10:78:6d:e5:b1:f8:57:81:b7:86:ae:72:8e:ac:11:51:19:fc:
8e:08:4b:ce:5c:a6:2d:74:e8:76:c1:aa:40:42:c1:62:0d:2b:
40:ef:ae:2e:8a:d1:ac:a3:35:dd:01:2e:fc:08:dd:41:b4:72:
c9:85:34:07:13:46:d9:da:60:34:8d:99:51:6d:a0:1d:42:f3:
fa:a2:fc:42:68:b1:e3:ae:dc:e1:df:78:09:75:05:d1:85:88:
65:f0:23:3f:f8:fb:7c:c9:90:bf:ee:e6:ce:40:a4:90:19:2d:
e7:43:46:73:d4:30:d7:e8:4b:b4:8e:99:0d:65:d7:6f:8a:c9:
51:b2:12:de:03:4f:6e:92:07:0e:83:4f:9d:c4:25:8e:08:3c:
b8:c9:2f:1e:da:81:ef:07:61:d1:be:60:22:f2:a8:00:66:38:
92:72:28:48:4c:de:c9:17:e4:46:2f:81:82:1d:b6:2f:ae:f5:
70:12:d6:93:bf:47:a2:d7:6d:29:bf:44:8d:6a:3b:7f:6f:9c:
22:ea:a2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:08:18 2025 by rpki-client