Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
File: 0GmJqc1r0vLDwN7GCKKL49O6ToE.mft (raw, json)
Hash identifier: 8w3WXV6BjfdFWciwEpCK6E67v1divHuz2eUpgH2SVSU=
Subject key identifier: 4E:08:71:1B:D0:FC:60:68:A3:EA:9D:41:EB:BB:6C:CA:15:4D:BA:29
Authority key identifier: D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
Certificate issuer: /CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Certificate serial: 0198D8845CFC1669E2D3E3661E8EC8FB4F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 20:00:09 +0000
Manifest this update: Sat 23 Aug 2025 20:00:09 +0000
Manifest next update: Sun 24 Aug 2025 20:00:09 +0000
Files and hashes: 1: 0GmJqc1r0vLDwN7GCKKL49O6ToE.crl (hash: Oj5oMvf/6HXdEg+TFAXoQfm75ZRi2sGE6P7o84pPn8k=)
2: QxqcS0TVGSUgUZVV2ZivYzu4jmI.roa (hash: ZdHOHVJoAbkKGlM6IZatNPTQ3rdTLS0gUgU+DGM3k0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:5c:fc:16:69:e2:d3:e3:66:1e:8e:c8:fb:4f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Validity
Not Before: Aug 23 20:00:09 2025 GMT
Not After : Aug 24 20:00:09 2025 GMT
Subject: CN=4e08711bd0fc6068a3ea9d41ebbb6cca154dba29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:69:02:06:86:b8:5f:3c:c7:ea:c8:d4:53:
db:3c:5b:f7:fd:df:f4:10:76:aa:24:1d:eb:bf:a7:
eb:b5:42:19:80:64:97:ff:5f:98:a4:f3:b3:c3:da:
6a:6f:4b:07:68:f5:1e:ed:87:aa:5d:65:e6:40:fa:
92:14:bc:4d:63:4f:a3:fa:22:01:eb:a0:f9:11:0d:
bc:24:cb:63:29:68:d3:06:40:d7:b6:eb:ce:6d:00:
83:ed:b6:2a:55:30:83:3b:d1:8e:a6:09:0b:53:6f:
a0:88:78:9d:45:ed:05:eb:cd:d6:0b:fa:4e:04:8a:
cf:41:94:7d:0e:9f:0f:9b:00:f7:be:42:49:8d:47:
c9:17:42:60:bb:d6:09:57:cf:99:8e:5a:df:a2:de:
8a:4b:bb:48:b3:d0:e7:00:12:ea:27:f5:8c:85:41:
99:3d:e6:d2:b1:ed:bd:14:13:0f:50:80:c5:9d:c2:
c1:d0:81:db:f5:0b:f3:fe:2a:37:4b:d4:a3:9d:0d:
6b:c5:33:9c:36:42:49:eb:3b:51:05:41:17:f4:76:
e6:0e:e6:29:a2:0e:32:77:6c:e7:38:f3:d7:b0:6d:
9f:3a:52:b3:5b:f5:ab:68:2c:63:ad:ac:97:b6:bb:
5e:70:12:c1:d0:32:28:74:c4:50:d9:c8:c4:30:dd:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:08:71:1B:D0:FC:60:68:A3:EA:9D:41:EB:BB:6C:CA:15:4D:BA:29
X509v3 Authority Key Identifier:
keyid:D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2a:fe:ad:b2:79:14:8d:e8:c3:4b:56:1a:25:8f:91:6f:9a:
29:c4:12:11:6f:e6:bd:e2:b6:bc:e6:62:b4:e8:aa:a7:ad:e5:
b1:b0:04:2e:a6:3c:2c:a1:d4:59:f0:61:f4:1c:07:e9:bd:02:
f7:18:2e:da:83:cc:26:cc:14:18:a2:ed:ba:ff:6b:35:40:b7:
8b:b1:85:79:1f:7d:a5:14:0a:d2:17:2a:39:73:80:a3:b3:80:
14:e7:4b:8e:fc:a7:cd:59:c8:0a:0b:21:6d:b9:bf:ce:05:88:
ad:d8:e5:5b:ae:60:f2:20:42:a6:76:21:57:a4:30:72:18:0a:
90:ca:33:5e:c1:19:c7:d4:65:b6:8f:f1:70:8d:e1:1f:91:e2:
dc:c4:7d:a3:12:16:d5:8f:85:36:71:78:a2:7d:89:60:29:c9:
6e:44:b8:68:34:19:92:39:a5:4e:05:c0:a2:60:01:a0:2b:3f:
77:3e:69:1e:cc:b8:14:35:89:7c:42:49:e6:e6:aa:94:5a:a0:
41:8d:83:c5:cc:ac:a1:f6:24:19:38:b3:24:32:ad:32:b6:5d:
38:f5:61:30:bf:60:6c:45:ca:f7:e0:68:01:27:83:bb:80:99:
0a:76:46:a9:c8:cd:17:0d:0f:b8:c9:52:8b:bf:01:70:e0:bc:
9d:f4:f2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:10:51 2025 by rpki-client