Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: E23TuJZxXE+OhjHQ4nT6/ORyZ0F4go8tqBURSonOVDg=
Subject key identifier: ED:6F:A2:F0:F0:8C:52:6A:8E:88:DC:E2:EE:E1:94:E3:52:6E:BC:14
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 0198D6CD25DC6855601BE981DD0F899DE119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 14DF
Signing time: Sat 23 Aug 2025 12:00:25 +0000
Manifest this update: Sat 23 Aug 2025 12:00:25 +0000
Manifest next update: Sun 24 Aug 2025 12:00:25 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: L93hrfvmA3Ox8X8DJhbHf+DsxVhOMFvIsSyaxPdg6cg=)
2: mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa (hash: omo8awS6hh3Xi+tQ6clfUM9W5KqXeL6pdkyIRs6JAvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:25:dc:68:55:60:1b:e9:81:dd:0f:89:9d:e1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Aug 23 12:00:25 2025 GMT
Not After : Aug 24 12:00:25 2025 GMT
Subject: CN=ed6fa2f0f08c526a8e88dce2eee194e3526ebc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:a2:d8:76:95:f0:f9:25:39:b6:58:35:10:
f4:0e:70:e0:c3:7e:2c:b1:aa:bd:16:9d:9b:95:2f:
2f:b6:2e:98:1d:6c:b3:42:a7:c1:ea:4a:6d:ed:e4:
67:c7:a3:4c:1e:b8:e2:b1:50:a3:88:e1:4d:fc:e4:
1b:37:2f:45:0a:9f:01:f9:0b:71:48:6e:ff:42:12:
a8:50:42:37:e2:0a:e3:7b:12:04:35:b4:6e:0c:3c:
71:eb:9b:7a:01:24:4b:8b:d3:d8:fd:fa:e3:99:5f:
23:81:81:46:8e:4e:83:ed:2f:34:dc:58:c9:23:8e:
8b:38:27:8b:20:f3:0f:15:c6:21:99:b3:b6:ac:46:
b2:54:ac:c5:ce:3f:e4:ba:29:78:af:ec:fe:7c:dc:
66:6c:20:0a:ff:52:94:d3:4b:50:fd:15:77:17:41:
04:30:35:68:f5:90:9c:e1:ce:59:8a:45:ca:20:73:
55:b0:00:0c:04:3a:24:f5:52:24:6a:6b:ca:5b:c6:
38:4a:d9:32:6b:06:d4:8a:72:35:2d:d7:f5:17:83:
18:f7:b9:c0:98:60:6e:79:35:7d:08:6a:d0:00:da:
49:00:1d:93:b5:89:ae:e6:1b:16:0b:b5:d0:65:14:
79:d5:be:f4:6a:bd:70:8a:f7:b6:51:47:a4:72:cb:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:A2:F0:F0:8C:52:6A:8E:88:DC:E2:EE:E1:94:E3:52:6E:BC:14
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:81:96:7b:67:51:bb:51:3b:a7:85:08:17:b7:df:23:1e:33:
3b:94:42:c1:05:f7:f7:c2:0d:01:4d:84:f6:16:1d:47:4c:87:
47:0d:8f:76:56:b1:10:6f:7d:5e:e3:7e:3a:f5:02:4d:03:35:
f3:0d:ca:30:d5:19:d1:1a:4e:eb:fa:3b:62:b7:4e:e3:ec:62:
3d:b3:d9:07:43:01:cb:e3:73:44:9a:2a:24:28:f3:5c:76:1e:
b9:ab:ad:f5:3e:d6:16:23:cc:e1:4e:fc:c1:ff:37:f0:26:3a:
47:ae:d8:0e:b4:f4:68:4f:8b:28:19:ef:a7:d5:53:24:81:2c:
0a:27:51:cf:90:22:5b:3a:c8:6e:e9:b6:47:17:f0:5b:53:30:
04:ad:e7:0e:df:5c:b5:1d:3a:ec:b7:35:4e:a0:2a:c7:11:1b:
9e:6e:95:21:fc:55:bf:dd:2b:76:66:6a:de:ec:49:94:3e:4d:
45:30:4b:da:e1:54:e0:88:10:01:ab:31:ee:1c:b4:ea:f7:22:
e6:77:40:16:2b:63:66:75:8b:3e:97:74:6a:cb:29:cb:23:c5:
e0:6f:9f:aa:81:42:31:f0:1b:11:03:f5:2b:4d:96:93:12:b6:
8c:7f:6f:53:7d:a4:77:3b:de:b1:03:6e:16:dd:1f:8c:f1:14:
cf:4c:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:54 2025 by rpki-client