Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: E9amGkBH/S/3JPxLGfdQSGc19v//IJst2HLh1WlCilM=
Subject key identifier: 4F:1F:AA:F4:DD:A1:C1:92:6B:52:B6:89:6F:18:FB:B7:E7:19:14:A4
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 0198D516324165ABC90695429F8172702B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 138B
Signing time: Sat 23 Aug 2025 04:00:58 +0000
Manifest this update: Sat 23 Aug 2025 04:00:58 +0000
Manifest next update: Sun 24 Aug 2025 04:00:58 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: 1P3kHSIA96k558/zHWmzaBrlTbZRCgXT8A2X3Xthrbc=)
2: dW_FLnsv0zWikILQzBidDijXgG4.roa (hash: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:32:41:65:ab:c9:06:95:42:9f:81:72:70:2b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Aug 23 04:00:58 2025 GMT
Not After : Aug 24 04:00:58 2025 GMT
Subject: CN=4f1faaf4dda1c1926b52b6896f18fbb7e71914a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:5a:7b:42:8c:20:c9:fa:61:ff:81:31:50:
a3:b8:12:e1:8b:18:8f:f1:cd:05:5b:70:1e:f7:38:
96:35:0a:c1:2d:a0:08:f3:30:10:c7:bf:2c:34:c9:
f3:97:9f:76:ad:3f:43:8d:54:3b:a8:3d:f6:c3:99:
63:39:21:3d:29:b2:e6:93:66:84:f9:4c:0b:71:bb:
6a:bc:b8:c8:4b:15:a4:81:49:8a:da:4c:e9:a3:a5:
b6:47:01:d1:b7:13:59:4e:f3:59:cc:26:b9:e1:98:
de:05:94:a8:17:3b:b0:0f:48:f9:bb:64:30:63:78:
10:d6:4f:5d:bf:f5:65:47:36:de:f3:22:e5:12:b0:
ba:d6:d2:c9:12:5d:4b:8d:71:89:d5:fa:37:31:b2:
55:4e:2c:db:9d:c1:54:e9:5b:54:9a:ba:ca:81:fe:
95:b8:fd:fe:66:bd:f6:46:48:b0:8e:a4:1e:b3:56:
ec:db:ba:14:a8:dd:f6:3f:6e:f2:86:ba:7c:3b:b4:
4e:e9:62:88:6e:9f:1d:e8:13:71:c8:aa:a5:01:ab:
9e:89:5b:e2:a7:53:98:85:07:4f:28:1b:4b:5d:d5:
52:14:73:c1:83:a0:bb:be:15:22:8c:9d:2d:b4:d9:
7d:6e:54:76:71:16:e4:2f:ca:3a:7e:2f:0d:e0:36:
61:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1F:AA:F4:DD:A1:C1:92:6B:52:B6:89:6F:18:FB:B7:E7:19:14:A4
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:df:c0:f1:2c:64:4f:bd:dd:5d:36:e3:df:28:c8:ec:f5:f6:
35:44:ab:01:8d:0c:98:64:44:23:49:c4:40:0d:36:4d:2d:0e:
ee:d9:39:8d:bd:7b:6e:10:7c:d6:16:ad:78:be:24:d7:24:c2:
82:40:6a:b3:05:31:a6:ce:68:33:4e:54:07:00:56:70:34:9c:
45:2e:c5:a9:a6:35:61:04:c6:2b:62:ea:04:db:13:31:69:ab:
08:11:ae:69:4f:91:b9:97:6d:7f:28:15:db:35:29:6f:67:34:
a5:71:39:b3:fb:a3:18:1a:5d:41:32:c0:25:17:6b:15:06:7d:
f6:e9:ea:26:cf:b7:a0:fe:36:aa:19:96:48:76:fe:83:90:d3:
97:0c:24:6f:33:d1:27:f7:fe:bf:23:44:7d:40:ed:b3:91:1c:
62:14:51:1f:49:45:24:f7:5e:3d:01:7a:f9:4f:2c:7a:c8:04:
bf:52:3c:b5:9e:dd:2e:fb:ad:fa:a1:a7:11:09:b8:7a:9d:07:
84:48:b6:e4:63:64:45:62:f4:0a:39:fb:9d:d5:8e:82:8c:07:
c2:81:b0:af:33:f8:fd:f6:ca:62:34:a3:75:de:8a:a3:bb:1e:
b8:a1:73:74:c3:12:30:ce:99:1e:4d:cf:43:25:18:ac:c2:9a:
34:94:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:55 2025 by rpki-client