Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
File: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json)
Hash identifier: UIyAkgorJAKbL2b5HrAVAlLTK+ODnVlxuAN94OxavWY=
Subject key identifier: F8:BE:C3:52:19:87:AC:F3:A0:6E:50:48:2C:03:BE:41:18:B8:F5:1A
Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
Certificate issuer: /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Certificate serial: 0198D54E17E64823A61A1B8E2B4BD92154E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
Manifest number: 1307
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: lGAfGR7lT40j0oW4NMgMDwujrUroSdNR9d9zh9Mavj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:17:e6:48:23:a6:1a:1b:8e:2b:4b:d9:21:54:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=f8bec3521987acf3a06e50482c03be4118b8f51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:4a:2d:24:c4:e0:3c:92:d7:09:6f:57:5f:
38:09:2d:ea:80:22:9d:6f:62:9b:5f:95:86:8e:df:
f6:c3:b7:9f:8f:d3:95:8b:e8:01:f7:d5:41:c0:e2:
bd:10:86:95:58:77:1e:04:58:d6:a9:c1:5d:1c:d9:
8c:62:ca:3e:ff:1b:b6:2f:89:66:79:4e:a1:97:3b:
c2:39:0d:8e:9a:f2:e6:6a:14:bb:dc:46:87:7e:7c:
38:56:19:ae:b5:c4:ce:1b:67:b7:45:37:5e:e5:e1:
31:ed:3f:85:ee:c7:f5:15:d1:c1:67:50:a0:e2:29:
03:b2:a6:e0:6a:a9:81:c8:0e:d1:c6:78:ea:a8:d8:
28:f1:6a:b5:64:f2:18:3a:dc:78:44:d3:11:3f:51:
a6:44:8f:8d:9a:ce:54:56:83:5f:55:e9:e3:9f:3a:
73:dd:d0:e4:7d:27:69:a2:9b:7e:50:5d:d0:1b:01:
58:af:5d:08:75:00:5f:ab:ae:10:df:6f:e1:1c:16:
77:b0:8b:ac:74:56:44:ff:19:71:bc:6d:12:59:f0:
7a:f7:29:8a:4a:14:29:0c:a1:c5:4e:4c:81:42:ec:
7e:a3:bd:d3:ef:02:98:6a:0a:ab:81:8c:b3:35:46:
99:e2:ef:55:7f:8f:19:cd:36:1c:3c:a8:b0:75:a0:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BE:C3:52:19:87:AC:F3:A0:6E:50:48:2C:03:BE:41:18:B8:F5:1A
X509v3 Authority Key Identifier:
keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:68:60:df:99:62:04:e3:6d:48:d1:ad:2b:d9:55:4d:4d:45:
d5:18:da:c3:b1:e1:31:4f:3b:7c:2c:07:2a:32:16:f3:b8:9b:
d2:38:78:62:55:be:91:91:65:d7:8d:00:85:16:da:e4:5e:48:
1a:de:a1:f5:6f:94:bf:03:a6:0e:f1:5a:30:8e:da:bf:24:d2:
bf:bb:68:43:8b:84:d0:ee:53:69:fc:83:e0:c2:03:b7:d1:64:
70:4f:d8:ff:99:9b:92:d9:b4:65:1f:32:43:09:9e:e5:ef:b4:
76:78:6c:d4:b6:39:fb:4b:5e:18:23:e3:94:30:c2:8f:7e:a9:
d0:8c:3b:aa:92:28:bc:e2:fc:9a:99:bc:8a:ad:27:bd:98:dc:
92:a6:b8:4d:cf:67:a8:65:7b:b9:24:42:2c:65:0d:10:6d:d4:
e6:d9:96:bc:34:2d:f3:a5:74:fd:2e:9f:2d:3f:3f:9a:ac:8c:
b1:d6:56:ee:e1:5b:d1:67:bc:9f:1c:4f:d3:7f:ca:a3:f4:53:
6a:f2:9f:28:d0:e2:17:38:28:75:ff:9a:63:4a:8a:5c:e1:42:
d2:ea:14:f1:db:11:12:be:b3:4d:34:9a:b3:e3:a2:40:47:55:
2a:08:8f:20:82:5d:01:e1:59:e9:51:2b:ac:5f:05:74:de:4e:
bc:fa:9a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:29 2025 by rpki-client