Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier: Jr9zsvIFGzM5vQH33IrteCfSNPvc2ZxU/5gSPMwz1lY=
Subject key identifier: 3B:03:F1:C5:50:65:59:41:83:BE:88:81:11:DF:89:09:69:15:2F:B4
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial: 0198D583836B44BCE0CD3E2BC2A96D11793E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number: 1386
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: r3YCoxMShdYW0+9mCqU4hc8ZMf8xrfpajayIsYq+Fjs=)
2: YV4mxnesnEqsoXEgOeVxrXzaM2I.roa (hash: cQ3+oKEwuuiKGHKe3AeYP28TBOd1C3qmRH0uqKxLNb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:83:6b:44:bc:e0:cd:3e:2b:c2:a9:6d:11:79:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=3b03f1c55065594183be888111df890969152fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ef:5d:f2:44:df:b1:6e:f9:78:4b:90:0a:88:
79:fa:5e:44:ef:04:ce:95:91:d4:67:8a:7c:a3:44:
e9:1e:a5:59:a0:b7:5f:d5:e0:df:c5:ed:b7:a3:0c:
92:81:e5:04:5a:46:21:89:8b:d4:e4:28:88:a8:fd:
90:8d:85:23:a3:fa:4c:69:1f:1d:76:e2:f9:07:23:
36:b6:90:bf:e5:4e:03:72:27:38:b5:38:20:29:a4:
d1:61:c1:f4:ac:19:80:33:2c:45:81:67:66:43:87:
df:3e:81:40:02:10:33:9e:66:2a:6e:c7:ef:2c:ef:
cb:06:ad:f3:7c:33:19:d7:f7:42:54:ff:cd:97:db:
13:3f:de:76:ae:3d:dd:34:20:8e:ca:9a:67:be:68:
da:b7:ef:81:d1:cd:21:8a:c0:1b:4a:1f:62:9f:0b:
31:2b:80:1b:6d:98:0e:5c:d3:d8:a1:8c:9c:9c:07:
b3:78:73:9b:5b:bc:57:10:47:40:ba:8f:4d:92:13:
3e:4f:5f:87:9b:c0:6d:a7:1d:37:47:b1:8f:8b:02:
94:38:3b:ce:0b:6d:a4:ad:59:09:bd:f4:62:ae:d8:
fb:4b:7a:6c:75:6e:c3:83:dc:39:86:20:4d:a9:5c:
5c:bb:aa:e4:ad:70:1f:9c:77:9f:db:d2:f7:61:60:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:03:F1:C5:50:65:59:41:83:BE:88:81:11:DF:89:09:69:15:2F:B4
X509v3 Authority Key Identifier:
keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:60:82:57:b3:28:f6:bb:53:90:59:21:7a:79:21:9e:3d:75:
24:ee:7a:3e:d9:a2:95:24:8b:ef:1c:cb:33:32:10:b9:87:28:
0d:f9:49:a2:12:21:2b:84:4e:fc:50:a2:f8:77:d8:d3:ee:27:
03:67:32:0c:7e:67:fb:70:3f:d6:40:20:c5:ee:b1:84:0d:2d:
3c:1c:20:cd:10:7c:44:7f:2a:5f:3f:21:20:e6:06:7f:42:ef:
87:cc:84:e7:e9:ac:bc:7d:e3:35:0c:e5:89:ab:2e:7a:3a:70:
16:49:b5:e7:eb:88:8d:2e:32:c9:5c:74:54:4e:30:cc:6f:65:
13:d8:87:7e:a4:52:74:ec:d0:84:d1:cc:0e:93:f5:15:28:80:
31:00:61:3a:8e:3d:b6:89:b1:5b:ba:27:ac:9e:55:e2:37:c0:
9d:62:d7:d6:85:ea:81:4e:ab:70:19:15:3b:cb:a9:1f:d2:e6:
2e:12:0d:28:a3:75:e5:4e:ed:dd:be:95:24:aa:3a:ad:05:13:
9f:50:32:74:43:51:24:7e:8e:6d:09:73:b5:5c:61:af:24:bd:
d1:af:a4:54:36:a1:1f:79:72:9d:96:f5:fd:6d:7d:d6:dc:4b:
42:fa:4a:db:31:5a:fe:3e:2d:e2:83:c3:a8:a3:d6:b4:5e:28:
19:df:f0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:30 2025 by rpki-client