Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File: 0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier: ltE72PLIcUOnc+NsVHNd9cDch8vWqm1Q+j28M7E2tjc=
Subject key identifier: D0:62:7B:AB:6D:21:CA:E1:C7:52:CE:85:85:27:70:D8:42:EC:60:45
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer: /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial: 0198D4A80D47208FDB07109459C823625137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number: 08DC
Signing time: Sat 23 Aug 2025 02:00:39 +0000
Manifest this update: Sat 23 Aug 2025 02:00:39 +0000
Manifest next update: Sun 24 Aug 2025 02:00:39 +0000
Files and hashes: 1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: ZkGfE/gY2KijWjHoaDproVy2+GmKQlg2QQ8hGNgFzdI=)
2: 4d-M2xoibAEms_RDQ9mCEYeUNpg.roa (hash: wVeVUALjyzMUssmf4Hte549aQq7kwv7Or9f/6VG17Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:0d:47:20:8f:db:07:10:94:59:c8:23:62:51:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Validity
Not Before: Aug 23 02:00:39 2025 GMT
Not After : Aug 24 02:00:39 2025 GMT
Subject: CN=d0627bab6d21cae1c752ce85852770d842ec6045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:25:05:45:0e:96:53:52:30:71:d5:c0:87:
d8:84:6b:02:b9:ab:60:a2:0a:b5:a0:11:3f:06:00:
9b:30:a4:5c:3d:aa:14:8d:f7:47:c9:06:99:40:7d:
fd:0f:40:a1:de:55:ce:d6:17:5b:fa:79:d4:4f:94:
12:cf:f3:bc:a4:c9:5f:e2:67:1d:5f:c1:32:51:31:
81:d9:70:d7:2c:18:ee:f4:4f:9b:a4:d4:35:29:e8:
7b:31:21:bc:68:d0:91:a2:bc:2c:0b:97:91:d9:bf:
17:d4:5b:9b:76:ac:8f:a0:0c:ff:20:ec:d3:02:c8:
4a:f0:12:93:eb:6c:12:ec:b7:21:e5:9a:9f:cc:f1:
e3:39:0d:d5:bc:0e:19:2b:ed:df:3d:44:94:8e:1c:
69:89:35:54:ff:60:ed:2f:ed:24:66:ab:75:b9:ff:
da:ab:06:70:69:de:d9:2b:f8:78:f2:05:5e:9b:ef:
78:6c:67:9a:c7:cb:dc:d3:92:2a:c2:cf:3c:21:f6:
4a:1f:bc:db:bd:12:bf:fe:d7:d9:b1:8b:ef:dc:2a:
11:0d:da:b5:d3:7a:b5:73:27:ef:c8:e2:5b:01:09:
b2:20:1f:0c:b9:c1:44:f6:22:52:64:a4:e8:6b:82:
32:77:28:44:e6:b9:2b:3a:ec:f2:49:24:a4:92:58:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:62:7B:AB:6D:21:CA:E1:C7:52:CE:85:85:27:70:D8:42:EC:60:45
X509v3 Authority Key Identifier:
keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cf:d7:bc:9f:6f:da:69:de:c8:40:f7:3a:5e:84:2a:9f:41:
a7:25:26:b9:c8:e7:68:27:9d:38:10:52:cf:5b:98:a2:39:88:
27:59:d0:63:f1:06:02:9e:31:b4:e2:05:2a:c1:3b:47:0f:8f:
a5:f6:8a:78:c3:b5:ca:8c:9d:2f:11:15:f8:02:e7:3a:a5:4c:
aa:b6:5a:23:b5:24:22:69:f8:f0:b4:52:bf:d5:92:3d:ef:8a:
d3:87:ef:4b:68:23:c7:90:42:43:0e:9a:9a:f1:ad:0a:87:16:
b1:00:ca:1f:7a:a6:af:e9:59:11:17:22:51:bf:da:98:0e:a0:
91:91:99:f1:da:f0:65:26:e2:f4:73:63:c2:26:91:dc:67:d1:
95:26:fe:53:a6:c8:82:1e:db:fd:7f:33:b4:71:ec:49:21:3b:
e3:7f:17:b0:a7:10:a0:f7:0e:68:f5:8d:2f:42:48:d1:90:bc:
ba:75:84:05:67:56:ba:16:4c:18:e0:68:c2:c5:8e:d3:bc:78:
1b:9f:32:b3:5a:df:cc:93:62:d1:92:86:1d:a4:d3:e2:81:6d:
14:18:62:f8:79:d8:b5:39:b5:e2:99:1a:73:21:25:b2:a7:8d:
23:a7:00:60:8b:09:68:33:91:67:b6:f4:57:d8:de:07:d5:3b:
11:ab:df:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:59 2025 by rpki-client