Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: wTD8z64fu65VFgK+UJDwAzl1OSv1a2qzFvMhR/w2DGM=
Subject key identifier: 86:28:3D:86:47:02:1A:04:CF:5B:B4:15:9E:3E:BA:7D:31:AC:F5:0B
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 0198D705AFC078FFC118B66717B5EF666253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 1381
Signing time: Sat 23 Aug 2025 13:02:10 +0000
Manifest this update: Sat 23 Aug 2025 13:02:10 +0000
Manifest next update: Sun 24 Aug 2025 13:02:10 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: GRADwUia8CZPWcHndDPkcA+a7fKOBtJBDV/e1gbQE0g=)
2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=)
3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=)
4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:af:c0:78:ff:c1:18:b6:67:17:b5:ef:66:62:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Aug 23 13:02:10 2025 GMT
Not After : Aug 24 13:02:10 2025 GMT
Subject: CN=86283d8647021a04cf5bb4159e3eba7d31acf50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:d6:5e:f8:69:17:ba:1c:56:93:59:fb:95:
3d:51:f4:39:8b:de:35:68:44:8e:f4:8a:2e:a3:1e:
22:33:11:1a:5b:e6:a2:2b:bd:cd:0f:1f:04:b9:ac:
94:4e:1f:41:04:8b:b2:1d:c2:01:ef:66:c5:1c:b9:
dc:1e:42:36:ee:bb:5d:7c:af:54:1b:a2:39:f5:a4:
9c:4a:34:25:fa:b7:05:de:9c:ca:8c:02:81:37:36:
89:d2:87:82:0e:c7:87:7b:65:63:2d:7b:81:31:03:
5b:a6:6d:cc:e6:c7:ae:5d:ef:51:b4:2e:72:0a:80:
29:b5:9d:4a:d8:20:82:34:93:aa:ca:a7:9b:44:0b:
d8:9b:43:9d:dd:c8:11:1d:a3:16:24:e5:85:d0:03:
4c:46:ff:52:e8:a5:a6:d5:d8:69:53:79:05:53:d1:
8c:70:c9:00:69:58:5b:84:66:d3:90:93:71:ce:2c:
ee:8c:48:00:70:04:6f:5d:d8:92:f1:d1:1b:18:79:
69:f6:6b:98:f2:14:30:9f:95:0f:f0:ca:11:cc:51:
25:d1:90:d6:fa:1d:c8:c4:00:c7:a3:a9:35:9c:cd:
ce:af:57:45:32:c6:41:e3:2c:e6:e1:e8:32:95:11:
a5:77:3d:65:eb:18:92:ab:12:b9:5e:6b:32:5d:08:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:28:3D:86:47:02:1A:04:CF:5B:B4:15:9E:3E:BA:7D:31:AC:F5:0B
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f8:9d:3b:cf:d6:ca:68:2b:1d:73:0e:1c:de:0a:78:5c:68:
72:46:12:20:29:cc:a4:01:d6:97:ff:04:13:a4:87:2d:5d:82:
14:74:24:83:45:89:80:4b:b7:c3:68:bf:a5:21:d1:a5:fc:66:
61:f1:04:bb:7e:80:2f:52:c3:5d:5e:be:57:28:ab:ce:3f:71:
65:e1:b5:5d:41:67:06:02:a8:f0:59:74:08:5f:08:83:a0:76:
13:44:a7:66:7d:e1:da:0c:17:bd:a5:16:74:e0:2e:45:be:95:
4a:8c:5e:af:f3:57:5e:ae:99:80:6d:5d:a8:b7:fb:d8:b6:28:
f8:17:cb:f1:b8:54:aa:b4:85:9d:4c:45:aa:d2:6f:43:89:b1:
04:56:2c:0c:a0:28:a3:39:23:78:32:1d:83:6d:98:b8:54:d6:
92:8e:83:3b:45:df:5b:e3:b2:3f:a6:4d:ac:3c:36:f7:25:52:
dc:10:a8:fe:7c:11:b2:42:0c:05:94:74:0f:8d:25:02:fb:d4:
ee:35:f7:4c:c4:4c:f0:0f:66:79:bc:b8:ec:dd:ee:38:8a:86:
60:ca:d9:14:60:6d:d2:4d:8c:3d:9d:5c:6d:b5:07:33:7b:cd:
8b:d8:5d:1d:43:77:ed:17:b6:b4:76:b1:71:9a:23:ff:0e:5e:
a3:62:14:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:57 2025 by rpki-client