Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: Zc6fHUOippN+I5XO46hCrH+Jm49vdjoNKL56bdsnuE0=
Subject key identifier: 1F:34:B5:07:B7:9A:9E:16:D2:5F:34:8A:5E:B8:CE:7F:E3:A2:55:1F
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 0198D66142536CCE3908AC374AF5DE581DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 06D7
Signing time: Sat 23 Aug 2025 10:02:34 +0000
Manifest this update: Sat 23 Aug 2025 10:02:34 +0000
Manifest next update: Sun 24 Aug 2025 10:02:34 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: ii7Ga5JyNDfE3wbIXmsQMrU1fxJUTmwDV4w/YnIFTlA=)
2: z_Ej6CoZbrKxrzLQhz11AHSKLRg.roa (hash: UVS5jjAa9OEvk26uuzlwcbiMZWOU5g+RlzuAxXPKfXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:42:53:6c:ce:39:08:ac:37:4a:f5:de:58:1d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Aug 23 10:02:34 2025 GMT
Not After : Aug 24 10:02:34 2025 GMT
Subject: CN=1f34b507b79a9e16d25f348a5eb8ce7fe3a2551f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:87:82:a6:0e:50:c8:69:a4:1c:4e:bf:8b:
b6:93:be:7b:74:03:90:cd:1d:76:c2:c9:52:75:72:
13:bd:b8:56:4a:0d:ec:93:04:87:b4:af:ad:97:9a:
2b:f2:03:3d:07:47:e1:f3:fb:fb:1e:3e:5d:a4:f6:
4b:9f:38:fc:44:f1:b6:5c:53:d6:ce:b2:55:70:e7:
62:ca:12:35:a4:97:80:c5:f0:42:6a:0d:5d:91:fe:
b5:e1:46:16:6e:53:5d:0f:3f:8f:f5:fa:37:e4:51:
bf:f3:6f:b9:eb:92:7e:13:4a:d7:60:fe:b3:4c:d6:
3e:49:74:d1:15:d4:05:08:aa:95:14:8e:80:78:d0:
16:0a:05:cb:01:4c:86:e9:38:85:14:16:23:98:f1:
60:d3:12:9f:5f:b6:5f:0f:92:89:68:a5:3e:52:54:
2d:05:bf:ca:1d:05:bf:db:5a:48:c6:90:98:80:9f:
61:d8:6b:00:17:34:c5:67:1e:86:c9:47:36:45:55:
2f:5f:17:1e:61:f0:a2:66:0a:b0:7d:2b:93:54:f1:
be:60:43:51:c8:89:9d:a0:37:57:98:9c:f9:5e:64:
c2:2a:af:4e:2a:65:35:c7:28:3d:c0:90:e8:91:c0:
d9:13:5d:a8:f8:b1:e5:e3:e5:a3:02:d0:e7:c3:4a:
60:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:34:B5:07:B7:9A:9E:16:D2:5F:34:8A:5E:B8:CE:7F:E3:A2:55:1F
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1f:bf:af:2a:34:3b:18:6b:3c:16:96:aa:90:44:3e:44:45:
93:d1:27:f5:2b:89:13:4a:7a:ae:0e:f0:79:29:ef:06:b0:81:
4a:a7:cd:72:c8:6c:dd:45:a0:b6:1f:64:4d:4d:b9:c8:72:fe:
a3:07:66:81:7d:e9:ef:53:c5:01:27:86:84:eb:38:0f:dd:a7:
a7:98:a6:37:d0:cb:aa:d0:48:24:32:fe:90:95:50:45:33:f1:
13:d1:b1:44:6f:c6:da:90:a5:fd:e9:ec:be:23:d6:38:3c:77:
76:f9:fa:95:fd:df:20:29:ec:49:ea:d8:1b:8f:ac:e1:d3:96:
db:a3:e5:b0:b5:a0:e1:37:40:a0:ba:b7:78:cd:18:be:5b:cb:
44:0a:2e:89:fb:a7:fb:32:7c:27:ca:28:69:35:f5:40:ae:3e:
48:7a:91:d9:a6:c8:f2:54:2a:2f:25:0e:dc:6b:27:89:48:65:
48:95:bc:13:5f:9a:57:95:79:24:26:13:5a:09:84:d4:3b:dd:
c4:d8:21:44:43:58:aa:1e:a2:18:e5:76:65:8f:5a:d0:8a:88:
d7:90:3e:31:cf:fa:27:83:74:42:d4:5a:83:f9:e1:df:18:3b:
80:ff:92:e5:43:83:5b:6e:33:7d:f7:3e:64:c1:17:2b:db:47:
56:f4:ee:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:08:07 2025 by rpki-client