Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: 2VvrkaUVVU/Wmc83pXJ7OnarQt0qkZBTwrp7QOhQHPQ=
Subject key identifier: 44:64:77:97:73:72:70:22:3A:AD:1A:39:86:97:11:29:25:7B:0F:5B
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 0198D5BBDB835131BACD9B647974F5826594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 0EAB
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: XKmk/v8NTbB1e/8aOdIcvO5Ga4JSWtrh+XrGNaHcTXU=)
2: w9laCbfNTG9x8SgYBLM8cjfOdmA.roa (hash: WglJOtLwDI5HpNhEnz7a8Exzapc/0A4kuz517Fgs06A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:db:83:51:31:ba:cd:9b:64:79:74:f5:82:65:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=44647797737270223aad1a3986971129257b0f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:72:8d:69:8e:48:63:67:bf:45:3a:a9:f1:
28:dc:72:9c:d7:d4:8a:f6:3a:36:e1:87:72:24:cd:
07:2a:26:a7:d8:70:99:cd:f9:b9:c7:b5:d9:80:91:
eb:03:76:42:c3:c1:14:f1:e8:8b:6b:eb:6e:86:26:
0f:3a:4e:47:e3:bd:ef:46:db:e6:89:9a:1b:ab:c4:
19:10:70:e2:59:8f:bc:d2:03:67:dc:1a:7d:2c:75:
ad:c4:f8:7d:1b:36:59:db:26:ca:b9:ad:35:22:5e:
65:5b:0a:ed:7c:4e:6a:ff:ad:0b:df:16:57:70:27:
86:ff:9e:8a:25:3a:d8:88:3e:3e:f0:b5:1c:da:54:
c3:67:3b:bb:db:3e:72:e4:5c:fb:d4:6c:ee:16:1f:
0f:70:f6:4e:c3:94:23:6e:8d:0e:2d:55:ec:9f:c0:
31:21:09:34:85:aa:0c:07:50:dd:aa:c2:64:d6:77:
f6:ae:6b:48:e3:de:57:6c:4c:7c:94:d8:a6:ba:60:
c2:28:a3:dd:d3:67:93:61:eb:e5:3d:ae:cd:d9:6c:
b7:35:8e:72:6f:9a:eb:61:40:1a:6c:40:32:dd:65:
00:fa:19:19:22:ee:df:2c:8a:60:ae:7d:3c:d3:eb:
bd:b4:68:3c:94:a4:45:25:75:74:a5:d3:37:1c:4b:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:64:77:97:73:72:70:22:3A:AD:1A:39:86:97:11:29:25:7B:0F:5B
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:13:1b:46:e3:a9:10:ad:5c:88:34:87:c0:06:1b:03:39:2f:
96:5a:4f:ce:4b:e3:e1:99:df:b9:27:70:7e:05:0c:07:22:0f:
b3:fd:b9:12:24:ec:f7:0f:54:53:78:3b:3a:12:5e:45:b0:05:
21:28:87:ea:4e:46:a0:79:40:65:da:d7:06:1a:dd:93:91:6a:
cb:3f:ab:23:cb:b2:61:da:dd:41:33:4a:3f:6f:8f:84:3d:9e:
e2:4b:60:32:74:89:dc:d3:b4:1c:89:86:86:bb:22:80:82:27:
2d:33:b0:89:06:90:20:6c:7c:53:43:9b:39:11:82:e1:dc:6f:
1d:ca:df:13:8a:fa:4c:20:4a:53:21:1b:d1:40:ab:e4:e3:91:
5f:b1:77:4e:67:7b:5f:44:9d:2d:cc:72:6b:29:82:d1:69:9b:
cc:f7:96:56:93:92:34:cc:f4:32:9b:a9:5a:0b:df:a6:6b:cb:
ba:0e:57:b1:8f:d2:55:20:c2:38:55:03:26:5d:4f:0d:89:f8:
b1:95:68:53:c3:4e:63:10:70:eb:05:1b:d1:b1:3f:12:3a:8a:
12:82:3f:b6:85:5b:e5:08:2a:a5:1a:be:a2:4d:ca:7b:68:37:
29:33:d6:f7:fa:ed:42:6a:d6:76:3a:2d:62:ba:4d:90:2d:3e:
83:87:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:02:42 2025 by rpki-client