Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: Lz+BMkWhljL4BhSc/SEMT7Rs55s5GkXl7Ms8/i4vAS0=
Subject key identifier: 10:68:7D:5A:24:14:31:B8:84:AB:0B:1F:50:1C:8B:27:C5:FC:DB:86
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 0198D4726B27B80C67CB01EDB35FF6B40E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 1522
Signing time: Sat 23 Aug 2025 01:02:04 +0000
Manifest this update: Sat 23 Aug 2025 01:02:04 +0000
Manifest next update: Sun 24 Aug 2025 01:02:04 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: mUsATsgkQKMYwrT8gfRd36m1pub2U/B0Ju3hLZ4eGy8=)
2: FIvNNxujkeosaQmK-8zL99U8I-8.roa (hash: xdptKNwYHkOXesPFH1LxyuhIbU4UE4ZRfmuf1MyhTcI=)
3: Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa (hash: KQQ09ojl8xnv8sB90M9HtEN2nEY3TEzVcMAwOp9asR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:6b:27:b8:0c:67:cb:01:ed:b3:5f:f6:b4:0e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Aug 23 01:02:04 2025 GMT
Not After : Aug 24 01:02:04 2025 GMT
Subject: CN=10687d5a241431b884ab0b1f501c8b27c5fcdb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:50:16:4d:af:d4:e3:36:d8:90:ce:8b:92:
69:40:53:c4:29:7b:0c:a2:b3:2f:8c:52:53:5c:c3:
ae:d9:72:f6:77:7f:7f:ac:e3:b3:49:d2:42:d1:c7:
e3:fd:41:3d:94:f3:46:3e:0d:63:4e:95:7f:4e:01:
b8:e9:27:44:10:11:06:18:fb:dd:46:30:21:e1:25:
89:47:ee:00:6c:1c:72:e5:e9:59:b5:14:15:d5:d1:
78:6d:59:92:7e:6e:2d:b1:ee:bc:0f:57:40:49:be:
c0:1b:62:18:62:1e:25:8d:7c:dd:f6:9d:00:78:22:
c0:ca:d5:12:98:c5:4c:a0:2a:9b:4c:bb:74:ca:35:
9c:81:67:95:e9:b1:29:a5:0f:7f:91:0e:71:78:d0:
c6:d5:be:82:7e:8f:0e:d5:7d:22:41:d6:29:51:86:
53:2c:8a:66:a7:fe:a7:b4:21:43:f0:b1:71:57:1d:
ae:ba:31:ab:d6:28:93:39:11:b6:8d:57:6b:85:a5:
53:1c:d2:47:47:dd:e8:1b:54:4c:bf:2c:46:8a:61:
02:90:d1:51:51:99:70:e7:85:46:b1:03:30:2f:8f:
7d:75:31:27:e4:26:d3:95:73:0b:39:96:17:23:e1:
2f:a1:73:af:74:1a:5b:81:68:2a:bb:77:f2:dd:17:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:68:7D:5A:24:14:31:B8:84:AB:0B:1F:50:1C:8B:27:C5:FC:DB:86
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:48:86:c1:13:94:26:f9:4a:72:08:77:a9:e0:b4:6b:0e:0d:
d2:9c:3c:e3:4e:de:0a:5b:73:00:c6:ae:6a:40:f8:58:0d:9e:
2f:a8:76:8e:b5:03:71:97:53:71:aa:73:1c:bc:c5:53:71:dc:
40:38:d4:ba:e7:59:4d:62:14:d4:cb:3f:4d:84:cb:56:5b:1f:
5d:89:d9:b9:7b:b0:36:9a:be:d9:93:dc:36:4a:3d:61:90:c8:
50:a0:93:48:bf:2a:f7:03:32:26:51:1d:ae:b6:d3:cd:73:7e:
70:f9:70:36:76:e1:e7:2f:4d:f0:b1:f2:cb:b6:05:20:a1:d5:
a8:3a:df:7e:d3:8e:5b:ab:cd:a4:a5:a0:ea:50:36:f1:e5:cb:
e6:e7:c2:73:67:67:d1:6d:90:02:d2:cc:1a:32:23:5c:ae:a9:
bd:71:d0:4e:3a:bd:9d:d1:1b:fc:fa:8c:cd:d6:a8:2b:fd:1f:
c7:22:89:df:6f:57:58:cf:49:56:cb:d5:b6:81:7a:f5:19:21:
04:9b:67:5f:a4:a4:c6:3c:d1:1e:0b:51:fd:5c:3e:00:25:0b:
ff:c0:62:c9:66:9d:3d:d3:88:80:9e:d9:60:03:c5:82:17:32:
ee:7f:09:a4:78:7a:e2:cd:54:78:9e:74:e0:f3:16:d9:a2:77:
72:a8:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:38 2025 by rpki-client