Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: 44F09vM88hQMuDdCRlLfFjYOASZ3CExOsyQpyABmwes=
Subject key identifier: 6C:38:60:D3:D6:EE:40:08:EE:E2:69:20:16:72:1F:ED:65:65:49:35
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 0198D4A79FB530F49607337BDA74CF887A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 136F
Signing time: Sat 23 Aug 2025 02:00:11 +0000
Manifest this update: Sat 23 Aug 2025 02:00:11 +0000
Manifest next update: Sun 24 Aug 2025 02:00:11 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: URqPICA3i/cSxWyZEGStW2exboOsZKS3ad2nSSIH5zg=)
2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=)
3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:9f:b5:30:f4:96:07:33:7b:da:74:cf:88:7a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Aug 23 02:00:11 2025 GMT
Not After : Aug 24 02:00:11 2025 GMT
Subject: CN=6c3860d3d6ee4008eee2692016721fed65654935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:5c:87:04:fe:b0:bf:f2:3f:ca:7e:bc:1f:
1d:3b:7a:dd:a1:4f:b8:ac:6c:16:52:58:31:ff:b9:
4d:3f:d2:4c:71:1c:45:6e:17:a9:32:5c:c8:ce:72:
53:fb:4b:70:13:59:22:b3:51:08:a1:67:34:69:8d:
52:5f:64:82:35:01:21:b6:e0:04:66:8a:a4:11:65:
88:b3:a3:4f:0d:ff:bf:a6:8b:61:1f:4f:20:aa:91:
3b:61:46:f0:ee:62:65:c0:5a:51:3c:4a:65:68:64:
49:e7:f7:86:22:5d:b3:10:17:b4:be:04:7a:d5:e0:
7f:2a:8a:6a:c7:b3:3e:a5:26:98:9c:2f:b4:7f:00:
f0:db:ce:64:79:38:a8:2e:12:3a:02:2b:f4:6e:6d:
a1:21:52:38:a3:12:ad:7a:23:86:82:01:0c:0f:b3:
7d:a8:0a:24:79:b4:bb:66:18:32:87:06:27:05:7b:
16:be:f4:e4:0e:ca:ad:3f:52:03:8f:f2:aa:ec:85:
78:51:dc:36:94:24:4d:ca:ed:4a:02:aa:67:10:55:
74:58:cd:77:a8:b0:5a:32:00:8d:dc:42:14:bf:ee:
df:ee:2f:57:ef:73:7f:0b:d4:7b:aa:53:e5:f9:b4:
30:58:bb:a5:aa:5b:db:a3:d3:d5:58:ea:6f:a4:c2:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:38:60:D3:D6:EE:40:08:EE:E2:69:20:16:72:1F:ED:65:65:49:35
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:07:9d:2e:19:94:87:25:24:0d:49:37:fa:26:2d:d0:9b:08:
71:8f:8d:c7:c6:c9:fa:01:bd:46:97:65:d8:ac:40:e3:82:38:
53:b2:2e:0c:94:89:19:0c:c4:9e:85:e3:5f:23:02:1a:fe:ca:
79:63:4b:35:2f:18:be:d8:3d:18:52:11:7c:fb:a1:32:5c:87:
20:1d:9a:f9:f3:81:b2:53:5a:16:b4:16:37:07:81:e2:74:99:
ec:4b:c2:71:74:f5:45:6c:49:b9:fe:85:f0:0b:f8:92:02:c0:
70:e2:4d:92:b4:0f:ec:34:d5:f9:b4:a2:ad:89:75:b3:65:26:
90:0d:2c:71:b5:0e:ac:d1:46:ae:83:71:f8:22:bd:b2:a0:30:
bd:f1:fa:66:5f:6d:49:e9:1d:81:97:92:36:01:5a:45:3b:c5:
03:af:12:a4:07:08:41:22:07:af:e1:10:1d:aa:58:26:75:6d:
f1:fe:3e:80:2a:4c:d9:a7:98:58:81:44:bd:94:a0:bd:ed:bc:
ca:a1:2d:de:7b:a0:a1:54:87:b5:b6:4a:c8:92:a3:a9:c5:bd:
2d:21:59:b7:01:4d:90:1c:96:97:57:18:8f:35:af:f8:38:b7:
91:e6:c6:45:ac:20:83:b6:8d:c8:26:10:44:1e:9d:b5:a8:da:
3e:c9:44:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:55 2025 by rpki-client