Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier: VbT7JCdT5z3mSQZCAsHfGLkC0Tq5dRQkol7xf8UwXGc=
Subject key identifier: F0:68:C1:27:E0:03:B1:C2:E0:BB:05:73:E5:8D:B7:F5:FD:08:E6:5C
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 0198D4E04969357335383E9D259A3E85AFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number: 0FCE
Signing time: Sat 23 Aug 2025 03:02:05 +0000
Manifest this update: Sat 23 Aug 2025 03:02:05 +0000
Manifest next update: Sun 24 Aug 2025 03:02:05 +0000
Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: gbn6SFHF5qhP0hCY70+5bfyZHwry1qdcVQmHjzz+wyo=)
2: NqFx58VddClRGkaq4vH0spxB4sY.roa (hash: +1mQ81/UVGy7/f9fmdLWXPkvY0wtPU2QaCzUYGQfgPM=)
3: l-051BYsRCxKE3vQ5NqqDTviFr4.roa (hash: zt5p627DRZYw9RNnukf8GDpw31GizuJMWnR2o5lMps4=)
4: lrUiZniRQz-h8c2XhwOWkweOdEA.roa (hash: d49AW/uRjxvRRJYubTh5j7tar5tvmS5hfgjaKWxZ/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:49:69:35:73:35:38:3e:9d:25:9a:3e:85:af:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Aug 23 03:02:05 2025 GMT
Not After : Aug 24 03:02:05 2025 GMT
Subject: CN=f068c127e003b1c2e0bb0573e58db7f5fd08e65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:fa:45:86:f2:cb:f0:e7:f3:fa:f8:96:98:
da:b8:ae:56:17:00:6b:4f:2e:e2:db:d4:5d:cb:7e:
24:37:48:ca:5a:60:af:40:51:76:f1:e7:b5:cc:79:
02:2d:a3:01:1a:25:64:23:9f:0f:d7:a8:8b:ea:ad:
c6:07:af:88:82:48:c3:a2:c5:37:de:a1:10:bf:69:
d3:93:74:af:b7:31:31:70:d5:47:9a:19:f7:bf:63:
be:3e:ed:2c:be:04:a8:87:0b:1e:5d:8e:f6:54:f2:
b3:74:59:74:79:dc:6b:90:e1:76:b5:a7:d7:7d:0a:
97:04:96:02:e7:cb:cd:61:4f:43:2d:f5:0a:af:f1:
64:f7:58:8a:d3:9a:3e:63:7b:a1:e3:03:7f:a2:ca:
00:07:a6:74:63:20:ae:17:ee:50:7d:ed:b5:b6:55:
45:13:83:fe:92:3e:ad:93:e8:18:85:79:02:af:ca:
64:78:f0:9c:31:17:41:93:ad:b9:f2:b3:fc:83:e9:
e3:d1:fb:40:65:7c:c8:2c:e5:6c:ed:ff:32:72:3c:
38:48:2e:50:a4:11:2a:d0:50:5e:6f:6d:f6:9b:74:
75:f8:02:d4:fc:dc:6d:e7:ce:15:a0:52:33:67:bc:
70:88:56:2e:b6:20:3b:89:11:8d:34:e0:8b:ea:f5:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:68:C1:27:E0:03:B1:C2:E0:BB:05:73:E5:8D:B7:F5:FD:08:E6:5C
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e0:8d:9c:ac:88:7a:b7:26:4d:73:5c:ed:3a:e8:43:d7:f3:
7c:7c:e5:79:bd:30:41:74:1d:b5:aa:87:b7:0a:80:13:ef:88:
1e:e0:39:57:2c:95:36:aa:43:6c:eb:d7:8d:4c:20:cc:fa:42:
1b:9c:6f:d3:d1:24:61:8c:89:56:16:d5:a5:3c:4f:53:73:f0:
f2:cb:be:83:46:15:5d:88:a3:c6:8b:f0:05:70:a2:16:f6:a9:
ec:4b:1a:12:a3:cc:31:36:03:97:6d:c2:b6:e4:af:45:95:90:
81:b0:03:d3:d5:c1:79:b8:97:ac:67:7c:0e:46:f6:c9:da:df:
b1:1f:5b:b5:34:14:73:37:0f:cb:eb:db:be:52:3f:33:b0:9d:
84:19:47:27:59:12:2e:49:af:2e:94:cb:cc:77:69:32:b7:d0:
af:59:9d:af:18:88:60:93:10:b3:84:2d:3a:c8:55:4f:87:b9:
6d:26:19:2a:c8:c4:52:66:24:4e:d5:d4:03:29:ce:c8:b3:af:
9e:51:00:73:fa:f8:0e:3a:9b:d1:f1:cd:cd:7d:73:45:2a:06:
09:d7:b9:fc:00:cf:60:19:73:ac:39:32:4e:da:80:27:d3:a6:
fc:14:4c:69:50:fa:52:26:f4:5c:d9:4f:37:35:cc:df:2c:d1:
18:53:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:56 2025 by rpki-client