Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier: qOwAmX2mkySRKCoTvuPJQyOf7joo71xPWfj7bXvhAzs=
Subject key identifier: 43:2A:9C:97:0F:1C:E7:DE:C5:E1:A0:97:F1:25:96:FF:69:37:26:65
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial: 0198D4E04FA33C75BA155B11F83A9BBCEDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number: 047A
Signing time: Sat 23 Aug 2025 03:02:06 +0000
Manifest this update: Sat 23 Aug 2025 03:02:06 +0000
Manifest next update: Sun 24 Aug 2025 03:02:06 +0000
Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: aqQTTYcu8xLN6YreSqPyAQ4A8WAdSPzI2FpPB15us9s=)
2: IjuOSUk_7icZW2FOsDmStZ5tc0Y.roa (hash: /4IVw0ESBk+fPfscovcApWNjH6K3fkBcjRs0stf1FDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:4f:a3:3c:75:ba:15:5b:11:f8:3a:9b:bc:ed:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Validity
Not Before: Aug 23 03:02:06 2025 GMT
Not After : Aug 24 03:02:06 2025 GMT
Subject: CN=432a9c970f1ce7dec5e1a097f12596ff69372665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:66:6a:9b:15:20:93:36:60:48:65:fe:db:
32:e0:45:90:85:59:56:7f:aa:f8:72:b2:79:cd:4b:
80:5f:e8:6a:d6:d3:4d:ef:98:b5:f6:55:c5:6b:56:
4d:11:0e:91:1e:37:c1:37:19:e8:fa:43:b3:56:3f:
bf:9d:73:0f:a2:47:35:24:e3:5b:58:cf:8f:b5:78:
14:14:f0:60:4c:fa:0e:46:43:20:9b:05:c4:98:66:
4d:eb:12:e8:e2:2b:d0:78:57:10:60:96:b3:97:c2:
cb:49:85:af:2f:0d:f3:51:91:f5:de:d2:69:17:65:
52:3d:0a:b1:76:b9:65:5c:d8:e1:7f:61:e0:d0:a5:
9c:a8:e9:ba:5e:44:76:ae:f3:ce:7f:7f:3c:39:67:
d0:eb:45:7f:85:9a:61:8c:c5:9d:76:a3:31:25:2c:
c9:83:ef:88:fe:2c:c1:84:72:83:21:a0:90:4a:ba:
09:5d:e8:35:10:11:ca:30:54:0c:d0:99:fe:c1:bd:
a9:a5:7f:19:d0:39:ac:33:a7:69:fe:af:71:bb:05:
61:05:7d:ca:46:d3:c1:d6:32:f9:ce:fd:bf:df:23:
1e:a1:ad:7f:1b:d7:19:9a:ed:f2:d7:96:62:de:c0:
ce:60:f4:96:1a:9a:36:5a:3e:97:54:49:76:9b:4c:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2A:9C:97:0F:1C:E7:DE:C5:E1:A0:97:F1:25:96:FF:69:37:26:65
X509v3 Authority Key Identifier:
keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fd:33:dd:f5:28:d5:9f:15:0d:02:e0:08:40:0a:71:7d:76:
2b:bb:06:00:f6:1b:c5:7f:10:4d:6b:4f:ce:8c:30:ab:03:a9:
83:1c:4f:9d:b1:33:36:52:e0:b3:6e:ce:2a:e3:05:c7:53:2f:
4e:a7:84:13:30:4d:f7:b7:90:cc:3a:74:9b:43:bb:4e:a2:42:
56:55:38:54:73:03:af:1c:78:e1:4c:75:d0:23:13:c2:61:af:
79:18:88:a9:62:73:43:8f:d6:9f:a8:fb:59:ee:e8:01:5d:ab:
e3:33:48:d0:6a:8e:de:83:24:78:df:7a:e8:09:bc:e6:66:87:
f2:a9:2e:52:12:ee:fd:c4:a5:fb:16:37:d6:26:c6:73:1b:d3:
b5:06:83:20:8e:ca:7c:47:88:c5:8a:06:ba:d9:41:bd:99:ff:
9a:b9:c5:fc:45:c0:fd:01:74:90:d7:08:63:fb:82:3c:2f:46:
da:cc:eb:3f:40:0a:95:89:23:57:32:23:56:53:83:24:cd:42:
5d:79:5e:e8:39:7d:0d:63:2e:30:d8:65:7a:f3:25:39:a4:9b:
39:2f:54:ce:19:86:78:8d:e1:e1:92:c1:ad:dd:8a:69:1d:fd:
39:f5:f3:36:a7:d4:d4:f9:bc:93:3c:ce:43:bc:dd:ad:25:64:
c8:14:33:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:30 2025 by rpki-client