Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: OafkGNAgEa0T4QtmZ5kHKAG3IrQCWcYTXy7DDXBtymc=
Subject key identifier: D0:25:D9:B1:81:42:26:BC:4F:D5:97:80:7A:72:E4:C3:DF:80:55:E8
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 0198D5BC2C5A213C9DCD8EF032884449264A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:15 +0000
Manifest this update: Sat 23 Aug 2025 07:02:15 +0000
Manifest next update: Sun 24 Aug 2025 07:02:15 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: YpIyS+317S4cLK20r6mtoQ8/ne1InwfvnDxqN6G321s=)
2: 9-3CRoQW_QjusaOMGpyHscSTGa0.roa (hash: hSgLJd/C+rhopgNVHjf6fxNZLuf8+Okfp+V4kR/UeS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2c:5a:21:3c:9d:cd:8e:f0:32:88:44:49:26:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Aug 23 07:02:15 2025 GMT
Not After : Aug 24 07:02:15 2025 GMT
Subject: CN=d025d9b1814226bc4fd597807a72e4c3df8055e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:17:2b:f7:e1:ca:40:59:90:a4:b4:00:5d:
1a:4f:73:50:70:bc:f4:62:06:e0:dc:fd:0d:b3:40:
38:cf:4b:da:37:be:02:d2:ec:52:32:a1:a1:12:66:
ba:1f:28:07:b7:3c:4b:5b:9b:15:87:cf:3c:3a:de:
65:2c:21:85:6c:de:59:17:80:f2:36:4d:bf:1a:4c:
bc:f9:e1:2e:8e:0b:8c:46:11:b7:c0:bc:53:f6:60:
bf:54:35:63:6d:e7:5f:2d:12:ee:21:0c:a9:5d:47:
31:7e:6d:d8:44:66:3b:fb:d6:06:be:eb:5a:bf:26:
3b:7e:6d:66:c0:47:63:17:44:85:fc:f7:52:d3:4e:
6e:58:55:05:5c:82:78:07:5e:a3:a5:15:5e:9d:90:
3c:ab:f5:12:e6:ed:f5:d2:a0:da:c7:8e:85:4e:66:
30:9a:e0:d4:ca:7b:7f:8f:e3:3d:24:08:76:f4:06:
01:8f:43:cb:d2:7e:31:94:1e:31:47:13:95:12:07:
96:5c:34:f2:49:e2:f8:c3:e3:4a:5b:2d:97:30:a4:
15:ef:52:fc:11:9e:89:e5:cd:ac:67:3e:ff:e9:71:
68:b1:44:99:e8:83:9e:4f:e3:63:10:fa:13:e3:6a:
34:d3:e3:49:00:5a:a4:9b:98:03:1c:9f:5a:c0:fc:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:25:D9:B1:81:42:26:BC:4F:D5:97:80:7A:72:E4:C3:DF:80:55:E8
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6b:76:e6:1d:d9:c5:68:21:2b:f9:65:d8:1b:9b:46:df:a0:
f5:b5:00:1e:b8:8e:0d:05:ce:6f:5b:a3:45:27:36:d0:41:90:
7a:0e:47:31:d7:a9:19:7d:b7:88:a0:64:db:48:65:4b:3e:aa:
f5:74:54:0b:34:9a:3d:72:18:83:04:99:0a:08:80:db:1e:94:
0f:ef:34:1b:f4:0b:dd:35:79:2f:30:87:38:bc:8a:c0:1d:6c:
28:fb:d5:d5:14:e7:64:e6:bf:f2:88:68:b6:03:09:d6:5e:92:
42:d3:9f:cc:ad:a7:01:c8:b2:c3:6c:fc:8f:c2:3e:4e:24:89:
1d:e2:09:f0:34:68:7a:16:ec:c8:42:5b:af:3a:40:d2:3c:da:
18:c6:69:60:30:d7:5a:4b:ff:59:7d:a1:54:7a:14:d9:41:3b:
dd:93:91:fa:57:00:df:8d:1e:dc:ff:3c:ca:12:ce:1b:c7:73:
84:2b:c0:49:5e:d6:5e:cf:08:4a:f6:ad:24:67:7b:57:92:ab:
ea:88:dc:82:d4:4a:74:1c:99:75:22:af:1a:58:0b:7d:aa:df:
4c:ea:38:24:d0:c2:63:1a:67:f5:3d:44:68:cb:b6:77:6d:be:
35:26:64:b4:6e:af:89:17:2d:49:a6:db:a2:0f:14:45:d8:07:
4f:8a:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:09 2025 by rpki-client