Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: tsJp0Ir+qDuVsIzBbqtJ+cjFvLCvex2khsiVBVOJ3HI=
Subject key identifier: EF:06:EB:CC:C9:2A:1B:9C:FF:1B:1A:FE:E5:71:92:9C:3E:E2:10:85
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 0198D5BB9EC619A3F628B8073CF446D55AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 64
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: yOR0USZJTDI6RVQ50DxIhLq1cq2XTJVLbt2Qc4bck+o=)
2: L3NuWTe_ZTmjBo-VlxbB6Itqb5c.roa (hash: 1CPUHzNqQbUf2XOYArYRqgpqG1Ievq6YnuLxsGd4YuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9e:c6:19:a3:f6:28:b8:07:3c:f4:46:d5:5a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=ef06ebccc92a1b9cff1b1afee571929c3ee21085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:04:05:2c:9c:08:91:b2:00:c9:42:83:17:
27:d8:5e:2f:92:18:2d:49:c9:d0:13:d3:8f:56:fa:
11:25:5d:c3:cc:76:b9:ce:71:d4:2e:f1:b0:3b:5d:
73:49:58:69:93:0e:e2:11:5d:9f:55:10:4b:3a:0d:
ce:df:9d:1a:0c:f8:d0:4d:52:74:47:e1:b9:48:11:
01:46:a0:97:47:34:5f:4e:0e:f0:e7:3f:8b:70:61:
60:e0:1b:6f:3e:df:7a:78:13:78:33:2b:f4:db:a3:
07:14:50:05:6c:33:68:d6:df:5c:af:46:bd:cf:e3:
64:a7:fb:46:1a:bb:91:fa:7f:02:61:7d:45:52:c7:
51:c0:e3:5c:9e:ad:4f:ce:83:47:0e:58:af:83:63:
c3:f0:2a:78:cc:ec:1e:a0:65:55:cd:13:a9:7d:ee:
45:cf:b2:d4:67:ee:b9:28:b3:f2:99:92:42:24:7f:
c0:df:2c:c2:74:de:70:43:48:03:a4:44:d9:98:53:
0b:db:a5:b7:b8:b9:46:44:d4:60:a0:bf:ed:08:6a:
9a:ff:85:f1:ab:8e:6e:e6:4b:15:3e:27:19:82:9b:
d2:9c:dd:25:8a:15:f5:94:61:e0:65:4c:40:ad:5a:
8e:d3:6a:ae:c9:89:09:48:52:44:ae:79:1a:54:51:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:06:EB:CC:C9:2A:1B:9C:FF:1B:1A:FE:E5:71:92:9C:3E:E2:10:85
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f8:07:24:dd:fc:4a:23:b9:ea:fd:dd:02:fc:c6:f7:6c:ab:
b5:c1:f7:08:56:7f:6c:c0:d5:a8:ea:40:f0:d3:31:37:cb:8e:
ac:4f:60:da:18:70:50:1c:f0:34:bc:b4:36:01:12:10:8d:69:
10:77:86:0d:9c:d6:0a:da:00:07:81:0d:a9:ee:96:54:08:6e:
6b:be:18:77:02:67:8c:a8:ae:9a:d6:3a:57:7d:41:5f:29:a9:
36:bb:8f:7c:b3:80:3a:77:67:45:e0:45:b4:09:fe:23:84:7c:
72:b1:e3:15:56:5c:95:4a:f3:a9:66:be:9c:95:ba:6e:d6:55:
e3:d5:42:d0:76:e6:b7:d4:b2:92:09:aa:a8:75:b6:05:c8:a7:
e7:1b:46:ba:1b:69:50:32:12:fe:12:1c:e9:05:93:38:b4:c8:
fd:dd:8f:cd:4f:16:a4:c8:7f:ef:12:0e:3d:ae:f4:a3:be:3b:
da:d3:be:47:61:ac:01:8b:d3:c9:b3:03:7a:f2:96:51:f4:5e:
89:fc:7f:39:9d:2d:3b:a0:de:2e:a0:c9:b5:18:df:2b:e1:f3:
c0:60:d2:3a:9a:37:df:b9:a6:85:e3:74:c8:dd:52:ac:0b:b5:
63:61:f2:b5:1a:56:f7:be:09:be:f5:9c:01:c0:7c:34:c8:80:
d7:4d:8f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:57 2025 by rpki-client