Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: kDHM3EOrrk9HCGlWVu+PYR0on1nRYPSSZpVOUdQ1bjo=
Subject key identifier: 04:74:EE:76:4F:E7:E6:3A:1A:A0:0D:E1:43:4C:6E:70:67:CB:51:77
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 0198D58392E703BF084EE1788CD50CBFE6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:26 +0000
Manifest this update: Sat 23 Aug 2025 06:00:26 +0000
Manifest next update: Sun 24 Aug 2025 06:00:26 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: YxQoO/oidGpV+NfmndPIZK63CUqFdKD1cFsC0/TH6IM=)
2: FtQX4tz2PfNS1jDZrdtbiPoNYSU.roa (hash: M4MM/hQp8qhWYBPYsVJLPE9nJhVevNigPOSWligASH4=)
3: xpbeDPeraC0lsT88_DSzZTcvzFU.roa (hash: 7vANxALGvUHJgNJxUW1TqxLJ7J9U0tCgO5zgV2ERDWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:92:e7:03:bf:08:4e:e1:78:8c:d5:0c:bf:e6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Aug 23 06:00:26 2025 GMT
Not After : Aug 24 06:00:26 2025 GMT
Subject: CN=0474ee764fe7e63a1aa00de1434c6e7067cb5177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:78:83:00:69:94:3c:15:7a:da:95:f7:a5:
f3:60:6e:8b:8d:b8:cc:f6:5d:45:c9:fe:01:7f:9e:
39:82:07:30:3a:aa:80:3f:f8:37:5e:f3:1c:d9:ce:
fe:e4:48:21:e5:0f:ac:7b:ee:4e:7e:73:bd:c7:33:
68:58:17:c3:d0:fd:0f:5e:6b:0f:10:dc:0b:cb:69:
ed:98:53:e1:ac:cd:d5:92:4d:cf:4d:53:f6:4d:11:
cb:36:e2:75:84:c7:af:20:69:c0:f6:f9:e3:ad:b4:
9e:e9:26:1b:7a:aa:83:62:11:25:ba:52:8b:b5:92:
27:76:be:d2:d1:67:e9:29:cd:7e:1f:27:d7:5f:03:
ac:55:e5:b1:e5:d7:c1:88:13:7e:79:ce:37:b8:45:
e9:f7:c6:dc:b3:48:99:f8:8b:da:fe:ea:9b:96:d7:
77:1f:55:ec:e2:9d:25:d7:64:57:f8:56:56:8c:f8:
98:37:6a:0a:47:7e:36:1e:de:32:f1:d3:ec:9c:c6:
09:13:79:34:0a:44:0a:75:2b:95:61:55:81:ab:27:
cd:d5:85:fb:02:de:77:db:4d:5f:00:ea:de:81:36:
49:4f:41:83:13:c2:ba:f5:ad:90:d8:6d:d1:f6:89:
ef:56:67:61:93:35:d7:aa:83:89:f0:bc:dc:b5:93:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:74:EE:76:4F:E7:E6:3A:1A:A0:0D:E1:43:4C:6E:70:67:CB:51:77
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:56:73:b3:86:e1:d4:16:6a:c1:3f:45:e7:1e:5d:d7:bb:60:
f2:a6:64:93:24:22:e6:2d:d9:17:34:3f:cb:2b:24:5b:d9:cb:
68:98:81:bb:28:ed:25:b7:a7:65:28:4f:76:b2:e2:cc:1e:fb:
21:80:08:bf:3b:31:33:68:3b:98:71:3a:2c:70:3b:cb:ec:11:
ba:0f:81:b5:e3:54:5e:06:06:db:c5:7d:b9:5c:b5:b6:59:26:
39:32:61:77:20:c5:cd:36:31:4b:ec:ec:2e:f6:c9:22:1a:8d:
f4:e4:77:60:f6:7a:27:f3:85:fe:53:31:bd:4e:b7:43:04:da:
72:15:ee:c5:b9:b6:1a:17:c2:9a:27:c3:d3:85:c7:1f:6c:3e:
ff:3a:a1:3d:e0:b6:93:9e:12:ab:16:77:58:c6:bc:4a:9e:dd:
0d:b6:e9:f3:0c:77:3d:ca:72:d5:5e:21:7f:6d:bb:4f:38:b7:
d0:d7:68:da:31:2d:8a:1e:4e:de:fb:0e:c8:ad:c4:3c:a1:40:
f0:b2:35:00:05:f8:45:43:a3:ab:5e:ee:dd:cc:56:ec:bd:44:
46:56:85:ed:80:2e:a8:0f:63:f0:ea:fe:7c:d7:20:b8:bf:36:
b6:c4:97:8f:8d:33:63:44:ee:2c:78:fc:7a:18:22:ca:c5:e8:
19:bd:1c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:45 2025 by rpki-client