Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: xJJz0E+jlXc1D/IHKPw9rfhUzUr/871nM9wNrcSuP6g=
Subject key identifier: A1:9D:CB:8D:E2:00:34:CF:19:6E:53:EB:53:2D:96:A5:E9:96:FC:93
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 0198D583A8AD52E0C4778B1C043BCBA5028F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 13FD
Signing time: Sat 23 Aug 2025 06:00:32 +0000
Manifest this update: Sat 23 Aug 2025 06:00:32 +0000
Manifest next update: Sun 24 Aug 2025 06:00:32 +0000
Files and hashes: 1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: 3q0ObwaWL1BgrhKVHrTlaoX10wDKtN9DswMIKt6Rc5w=)
2: vHnKRxUajbywNAqL6nOx-jDQRUM.roa (hash: 9L1D0lkWg2QABU5Zj6IAqZoeAKA6O0lNRb8Xz0hsQns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a8:ad:52:e0:c4:77:8b:1c:04:3b:cb:a5:02:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Aug 23 06:00:32 2025 GMT
Not After : Aug 24 06:00:32 2025 GMT
Subject: CN=a19dcb8de20034cf196e53eb532d96a5e996fc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:c4:e4:b9:af:e0:bc:8e:0e:d1:20:d7:c1:
22:b0:d9:20:3d:8b:d2:a3:02:45:d4:f4:be:2e:ec:
43:99:19:47:a1:9d:3d:95:7b:66:63:66:d8:d4:8c:
fe:ff:98:94:1e:80:00:a0:df:b8:56:54:fe:8a:65:
26:2e:f1:bb:ba:0b:66:ad:d5:32:ca:51:dd:b7:de:
48:32:75:b5:90:8f:17:16:9e:a7:13:be:60:2d:ec:
c8:d7:a9:13:88:d7:e7:ac:9f:2b:d4:78:02:49:7a:
7c:12:90:49:f2:b2:39:c4:a3:fd:f4:62:34:fb:35:
79:f4:37:76:0e:5e:89:63:d9:3b:27:55:ab:ec:f8:
9d:25:a8:fa:00:cc:47:01:2f:f8:d2:95:9c:1d:b8:
3e:89:d9:90:ae:a6:28:7d:34:63:28:39:83:f1:a2:
1b:dd:47:3c:e0:66:10:55:e5:ab:38:49:5d:ed:83:
32:5d:30:0f:e9:8f:35:88:94:73:42:97:4c:89:ef:
8e:c5:cb:0e:c3:c9:8d:a2:41:9d:dc:65:f9:da:dc:
8a:16:94:c4:bc:81:65:63:a4:e9:f9:ab:fa:2e:2e:
eb:da:6e:1d:49:d8:55:23:be:0f:33:25:ba:b3:fc:
cd:36:d2:53:cc:66:6e:74:1e:d9:2c:d6:54:3f:99:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9D:CB:8D:E2:00:34:CF:19:6E:53:EB:53:2D:96:A5:E9:96:FC:93
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:97:27:7a:f7:87:fd:ca:bd:56:85:94:3f:20:b8:ce:98:3e:
ab:ff:35:59:bc:ef:30:71:d4:8b:0e:1d:84:bc:38:6d:2d:89:
c4:40:98:19:44:42:61:17:2b:dc:eb:07:63:e3:c9:d2:e5:41:
86:ca:ff:f6:e6:87:ed:d8:bb:aa:15:ce:4c:4f:da:91:33:f4:
f6:b3:32:a4:8e:6c:88:e8:be:cb:97:ff:ba:75:f3:cc:1c:82:
3b:f3:a2:36:5e:07:bd:fa:7b:06:c5:d0:11:4f:e2:3a:0a:b1:
b8:6b:7e:b5:89:d0:e3:ef:8e:6d:a6:1c:26:fd:60:ae:c9:f4:
fd:ad:ea:f6:5d:7f:d7:50:7e:ee:1c:23:9f:34:82:3f:cc:2e:
cd:eb:52:01:fc:52:8b:38:2f:6c:81:48:c5:88:f7:c4:c4:53:
84:46:74:c9:92:02:df:9b:c7:cb:61:88:fb:cb:a6:16:cc:d4:
d6:76:3c:74:c4:ff:e3:5e:80:f7:9c:c9:a4:f7:a1:07:ab:37:
4b:cc:fc:98:29:c4:70:a0:07:04:fd:6d:b3:7a:b7:9e:11:05:
25:24:f7:6c:e7:af:e4:1c:ac:f3:b4:82:7c:8e:3d:10:27:b8:
42:fa:b3:80:6c:97:23:64:c4:bb:cc:b0:a7:6a:5e:ec:ac:84:
4c:20:69:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:42 2025 by rpki-client