Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: ERPUYGz/kVCfXpfSaatyR3xoC+ytoxRaN9eeiOGD0DA=
Subject key identifier: FB:34:88:67:5D:3D:75:38:B0:C3:70:41:50:26:D8:47:D4:91:29:3B
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 0198D660B5D4DC58B066C8610B199E649719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0A56
Signing time: Sat 23 Aug 2025 10:01:58 +0000
Manifest this update: Sat 23 Aug 2025 10:01:58 +0000
Manifest next update: Sun 24 Aug 2025 10:01:58 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: Usyb8ln4S8oXBYu4Ej7Ixo2IJFRzTsntwYJSrLHVfqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b5:d4:dc:58:b0:66:c8:61:0b:19:9e:64:97:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Aug 23 10:01:58 2025 GMT
Not After : Aug 24 10:01:58 2025 GMT
Subject: CN=fb3488675d3d7538b0c370415026d847d491293b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:c1:dd:90:47:72:01:8f:00:15:de:80:48:
1c:3b:b3:5c:44:c7:d9:10:7f:92:a7:e4:0b:bc:82:
fd:18:8a:0d:68:50:48:c5:7e:06:c4:ec:47:89:4d:
12:22:9b:60:95:90:6b:10:0e:c7:9a:71:98:13:a2:
7c:2a:82:fe:c6:89:7a:79:9c:03:50:06:6a:74:ee:
fc:41:cc:cf:a5:8b:0b:35:3e:ec:b5:8a:34:ca:9d:
6f:e8:6c:8c:bc:0f:a2:23:66:68:5c:4b:54:68:97:
a3:86:d5:61:40:86:65:1a:98:4f:f9:6c:7e:9a:3e:
56:be:05:2b:61:8f:6a:01:db:a3:32:43:36:f1:35:
73:1b:ee:ea:5d:ac:6f:f5:d1:54:14:d9:c6:f3:fe:
3d:e5:4e:c9:ff:72:0a:71:98:dd:e9:c3:8c:eb:fa:
62:a0:30:c3:95:bc:f6:18:7e:19:df:f8:c5:dc:a6:
89:cc:28:a0:45:01:90:3a:41:44:0a:80:dd:cd:0f:
1f:ae:0e:c2:52:50:b4:8a:f8:80:7e:e2:6d:b7:a6:
66:20:2b:ed:ea:e0:af:1e:72:69:29:db:ea:71:c9:
05:ed:ca:41:41:0d:cb:e1:fb:5b:f4:26:db:64:8f:
18:a0:85:9e:72:55:56:5f:bb:7f:ca:05:70:af:91:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:34:88:67:5D:3D:75:38:B0:C3:70:41:50:26:D8:47:D4:91:29:3B
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f8:90:1b:49:e4:d5:44:9e:10:a8:46:4d:a4:11:be:a3:7e:
dc:30:19:6f:78:cd:63:7f:1b:a2:a4:13:79:83:54:89:b5:02:
ac:63:b6:b9:82:26:27:d4:76:4e:10:ef:4f:94:a4:21:ac:d6:
87:e2:b2:cf:41:c6:60:31:23:a0:71:42:45:96:42:87:24:d4:
ca:f2:6f:df:bf:fb:0e:83:01:5d:8a:62:2f:29:4d:c8:78:bf:
3f:3b:bf:4b:5b:46:5b:1e:b6:1f:a7:6c:5d:0f:4f:36:1f:15:
84:47:7c:aa:c1:1a:a1:50:d0:1a:a4:1d:58:3f:98:d2:57:b7:
7e:db:4f:98:83:d7:e9:a0:89:c8:fd:29:02:3a:60:c4:5c:ac:
af:74:d9:47:d4:64:a2:3b:7a:db:98:7d:87:9e:af:b7:39:ce:
a1:5f:9c:35:aa:d7:3c:a5:4f:9a:18:52:13:0b:b3:67:24:3a:
c6:05:0e:1d:f8:2d:1a:71:84:33:35:b9:3b:27:b7:76:cb:5e:
12:f1:8d:6b:1d:57:9b:c2:15:c9:35:ff:7d:d7:2c:5e:2a:fa:
4f:5a:fc:16:12:61:6f:56:79:6a:98:83:9a:c3:21:7c:1f:b6:
5f:a9:8c:0d:7c:2d:1f:10:2b:96:69:c1:61:f1:5e:6b:10:fe:
f0:f8:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:34 2025 by rpki-client