Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: mLPS9E5Ic+K2y3j2iyxebE0gDISscJ29GT3CiK8uI/c=
Subject key identifier: 85:2C:93:13:EA:24:F8:51:80:A1:71:4C:54:DD:A2:30:E6:DA:91:4E
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 0198D47350A334BD2768A91092D6DCD078F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:03 +0000
Manifest this update: Sat 23 Aug 2025 01:03:03 +0000
Manifest next update: Sun 24 Aug 2025 01:03:03 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: a6V39ZYTwYpEsfZtGG2Gts6j9KlPeYH275lkpyxtME4=)
2: l7vPco-uERFJMqFRkAMdbQ7Lr5E.roa (hash: TO5lGNkolgRHajeHI2wA6DsrdU/+GUsTcjWvGuJo2do=)
3: mizpW-CedPrysq20puaRplVzBas.roa (hash: ZhIE+FWiXGSht5bpIKov+Ga9kyrb4wRzjNebEuN3tlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:50:a3:34:bd:27:68:a9:10:92:d6:dc:d0:78:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Aug 23 01:03:03 2025 GMT
Not After : Aug 24 01:03:03 2025 GMT
Subject: CN=852c9313ea24f85180a1714c54dda230e6da914e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:8b:af:d7:0e:30:ed:86:cb:df:ba:39:75:
57:26:35:1a:ba:45:3a:43:dd:13:2c:24:34:52:47:
8e:12:e3:d1:e2:1a:2d:27:c0:9a:c2:f4:e3:3e:b4:
37:de:cc:93:07:8b:8d:12:fb:ba:cb:91:c8:25:00:
2e:c1:32:58:7f:93:05:e3:c1:04:4c:d6:bd:50:e0:
08:3e:0f:06:a3:bf:17:e2:8f:2d:1d:e4:7c:ae:14:
43:cf:56:fe:f4:ec:1f:df:cd:05:b4:8c:03:a5:e8:
98:5f:e3:86:a2:97:eb:32:ec:2e:89:03:97:12:fe:
3b:7d:2a:73:24:d4:52:80:af:b7:85:a5:80:20:82:
7f:98:40:91:a8:87:56:79:9d:bf:54:e1:c3:41:cd:
f0:d3:43:90:80:57:fd:f2:f4:58:86:48:1a:8e:6b:
0f:45:fe:ec:0a:49:d0:f7:6a:de:58:95:8c:f8:b0:
36:b8:04:a9:de:44:46:79:e3:1e:d3:2e:dc:97:53:
32:81:55:c7:36:98:db:a4:55:9b:38:7e:d4:bc:ee:
58:d0:08:fd:da:b4:31:a1:dc:4f:cf:11:ce:7e:be:
be:71:49:39:e6:d2:43:57:0b:2e:6a:36:58:61:7d:
ad:7a:d8:fc:6d:4f:8b:47:4e:4a:5f:1b:a4:e7:82:
b0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2C:93:13:EA:24:F8:51:80:A1:71:4C:54:DD:A2:30:E6:DA:91:4E
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:88:e7:56:06:26:84:e2:fa:84:aa:e9:46:70:b1:6d:17:de:
63:96:ef:8a:4e:1a:d7:26:07:ab:e2:57:05:4a:cd:86:f3:ad:
46:ff:96:c8:ad:f9:10:32:e8:1f:39:31:5b:0e:5f:2b:1e:2d:
7d:d4:2f:68:cf:9c:cb:57:57:6a:d1:25:80:fb:10:1f:68:15:
de:3b:bb:6e:cb:4e:9a:ec:c7:df:ca:7e:09:58:de:7f:cf:b9:
10:4a:32:a1:42:91:41:f7:23:a5:45:3c:c0:30:93:38:03:01:
59:ce:4f:e7:3c:9e:40:6e:94:12:63:80:65:52:ff:83:7e:a9:
e6:09:87:3b:62:fa:96:42:2f:f4:35:e2:d9:fb:1f:b5:a7:1c:
16:d7:5a:f2:ff:83:85:c3:e0:c7:80:49:0d:fa:1d:53:a3:7b:
85:2a:02:73:fb:b8:1d:58:05:ad:90:5b:1e:59:c5:9a:9e:7a:
c6:1b:c4:7f:87:d9:1d:6c:ac:f9:9e:e8:b7:3c:a1:4e:32:77:
19:22:8e:11:4f:50:f1:71:b4:d4:da:9e:13:40:9e:48:80:f1:
93:b8:41:71:4f:e4:c4:00:18:e7:4b:03:89:5b:1f:ed:7f:26:
ca:8c:70:b0:21:c9:ec:8a:95:e4:25:59:2a:96:34:0f:36:bc:
40:8e:98:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:41 2025 by rpki-client