Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: DO3SDa1QhwMTpiu6eCgtAx/EtNCB0lOOgT/Ep7jQjsc=
Subject key identifier: 4F:7B:5B:D5:42:8C:FA:29:83:B3:FD:16:BB:BB:E1:D5:7F:DA:F1:85
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 0199375D4288EB5EF8B3837B0B857BDB06D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 160D
Signing time: Thu 11 Sep 2025 06:01:22 +0000
Manifest this update: Thu 11 Sep 2025 06:01:22 +0000
Manifest next update: Fri 12 Sep 2025 06:01:22 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: exjziO4SX1n5vaTUISv+Ked6UJRrnfCmjgY2x7O7NWU=)
2: cednPNYKxfRsr4W4osQ0UxWr_xg.roa (hash: bAnClABodJAGvw6mOL61pHv3A1a0Gmryz3vjrqAKOxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5d:42:88:eb:5e:f8:b3:83:7b:0b:85:7b:db:06:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Sep 11 06:01:22 2025 GMT
Not After : Sep 12 06:01:22 2025 GMT
Subject: CN=4f7b5bd5428cfa2983b3fd16bbbbe1d57fdaf185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:b1:0c:fc:c7:9c:a9:34:86:12:bc:8f:fc:
f6:99:fa:15:f1:e1:f4:8a:7f:3b:58:be:98:ba:ca:
d3:cd:54:08:75:b0:4b:3f:a5:e4:c7:37:17:8f:3c:
7d:dc:ce:41:2a:60:46:5c:ae:c0:d5:b4:52:bf:5c:
61:10:11:48:77:7f:fe:f3:33:7f:7c:04:3e:1d:3a:
f4:b1:71:0a:46:56:de:3b:a7:96:dc:4e:8b:b2:b7:
3c:e0:b6:5b:9e:f6:ea:84:75:89:55:f1:05:67:90:
07:11:a2:37:e5:b0:81:e5:7e:5f:5e:9b:31:d9:af:
4e:df:9f:24:e7:c4:1e:10:20:2f:83:14:73:f2:00:
9f:28:e6:b7:8b:54:e5:ca:20:e9:30:ad:07:b8:5b:
ce:ef:0e:72:16:df:c8:2b:34:d9:98:91:42:70:13:
ef:5e:85:e7:6d:9c:30:91:68:7e:76:72:ab:0a:c4:
a6:60:3b:ae:5d:bf:5b:85:03:1d:94:d2:67:54:38:
92:61:5f:7f:f2:a2:3b:a6:94:54:e2:a4:22:a4:3c:
5f:7a:9e:10:00:73:eb:d9:2e:ae:d4:ac:a9:9d:72:
bc:ef:35:8c:19:c5:46:48:6e:be:d5:bb:6f:26:af:
3c:f5:d5:89:be:5b:b9:cf:a8:22:7d:d5:6c:8b:00:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7B:5B:D5:42:8C:FA:29:83:B3:FD:16:BB:BB:E1:D5:7F:DA:F1:85
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6a:21:eb:ff:3d:46:2f:02:44:1f:19:74:3d:27:bb:de:54:
fd:8a:af:2c:92:aa:c9:f6:43:08:21:f4:ed:e0:26:a8:89:90:
78:a9:0d:64:38:10:d2:70:22:43:2f:0e:2d:94:56:8d:b0:73:
96:82:0c:a5:df:06:d1:ab:ba:dd:10:dd:82:4c:ec:31:87:b9:
f4:95:9c:5e:e0:07:59:b6:ab:e7:e1:63:11:4f:77:66:26:b8:
dd:b8:c4:0d:1f:a2:1b:cd:26:7c:06:0b:42:9a:9d:0d:ec:a3:
77:82:d0:a1:c6:09:5e:2b:56:9f:ed:a2:f2:c5:ca:bb:71:4e:
4e:fb:89:55:5d:f1:f9:8d:7c:54:4d:06:0f:3c:b2:68:3f:a6:
05:d3:92:88:ee:ea:8c:25:d6:9c:8f:b0:fb:f2:9e:75:83:1e:
1f:05:70:25:24:2b:56:da:79:b2:2b:7d:fb:d4:6f:d7:19:e2:
6c:1c:5e:29:c7:14:eb:ea:75:d4:93:fa:0d:36:22:21:45:57:
b9:d7:4e:1b:74:69:4d:87:87:c1:9c:f0:18:a1:38:0e:f8:71:
fb:94:8a:be:c7:45:eb:cc:20:ed:d7:08:e6:22:4d:ea:5f:9b:
d5:ef:43:70:2c:b8:cc:a6:44:24:96:93:0d:74:26:55:ee:5d:
f8:e2:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:10:20 2025 by rpki-client