Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
File: 0M4bn_suc9LJfwiTBjyrsst0Z5A.mft (raw, json)
Hash identifier: uSj130yhWdeSawxPC+yBwFHBv/ffjVrLizj0xiGVJ1w=
Subject key identifier: 47:4B:F5:79:94:F7:8F:08:F9:B0:65:31:E5:49:B6:AC:59:5D:65:FF
Authority key identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
Certificate issuer: /CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Certificate serial: 0198D73ADC4BFB677079C7C2FE7F23022B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 14:00:15 +0000
Manifest this update: Sat 23 Aug 2025 14:00:15 +0000
Manifest next update: Sun 24 Aug 2025 14:00:15 +0000
Files and hashes: 1: 0M4bn_suc9LJfwiTBjyrsst0Z5A.crl (hash: 1pihdfi8HSEw7pwwS4WsTx1opid4NnQZBiX+Cjh5pGw=)
2: IjEDemst-q1ECBCro1gZY1e_lKU.roa (hash: lVdPrfdJYAgOaDiQ3SINarvDSTRfwXOI47RLJu49Akc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:dc:4b:fb:67:70:79:c7:c2:fe:7f:23:02:2b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Validity
Not Before: Aug 23 14:00:15 2025 GMT
Not After : Aug 24 14:00:15 2025 GMT
Subject: CN=474bf57994f78f08f9b06531e549b6ac595d65ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:ea:31:af:dd:5e:a1:cf:ef:d8:56:41:e0:
31:6d:bc:00:cd:91:cd:22:fe:d3:fe:85:6e:a4:48:
8b:23:e5:9d:62:5d:bb:54:3e:4d:bd:6c:4c:b4:31:
30:8d:a9:5f:42:be:49:48:d7:8a:2f:9a:2e:ba:59:
58:c4:b5:5c:44:a8:67:84:5f:13:10:5d:5f:00:11:
e6:32:99:b0:cd:9e:3f:ac:15:7a:02:42:58:95:28:
2f:4f:0f:84:c8:52:d9:fe:f5:8f:ae:7b:35:6f:4b:
f4:5a:06:1a:89:72:54:ad:93:b9:7c:6a:30:78:a5:
19:33:d0:ff:72:af:9f:1d:04:1e:27:17:ec:cc:6f:
a9:1c:56:8f:8f:19:2a:45:55:fe:89:79:1d:88:10:
b5:62:51:13:ab:26:20:42:ac:61:ba:77:0b:85:ef:
80:db:30:31:ff:11:cc:96:97:d7:68:71:dd:63:65:
b5:29:b2:f3:e2:64:df:c0:eb:8b:88:95:48:35:0f:
f5:46:0a:38:3e:da:cc:43:b4:2a:e1:38:0a:91:f6:
dc:f3:c9:33:d3:46:45:b0:fe:fa:ef:c2:00:f1:c9:
45:72:7e:3d:42:2a:9b:3d:64:3e:3d:5a:d9:fd:93:
99:48:31:94:34:88:fd:c4:05:fb:1f:1d:b0:48:8c:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4B:F5:79:94:F7:8F:08:F9:B0:65:31:E5:49:B6:AC:59:5D:65:FF
X509v3 Authority Key Identifier:
keyid:D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:81:97:ff:22:af:bd:1a:46:3c:9b:3c:3e:c4:a5:d2:04:01:
6e:6b:0a:11:73:14:ca:7a:f1:31:76:85:5a:93:6e:88:f6:79:
6d:ef:80:ab:1d:dc:cb:e7:f5:84:9e:11:d5:ad:b2:4f:2e:bd:
02:66:a0:e8:35:41:35:76:f8:ca:19:ce:03:b7:5f:97:17:44:
d3:a2:08:fd:c7:1c:8c:33:5d:e5:3b:45:64:ae:80:18:03:8e:
09:92:18:f2:49:d8:a1:57:5b:ae:da:9c:1b:21:e2:b6:c6:4a:
e4:c7:4e:ee:2c:16:e2:d4:ab:f2:ec:f8:d8:c6:2f:fd:16:5a:
05:af:b6:2d:46:a7:9c:32:70:c0:a8:62:db:28:d1:15:9e:6c:
ab:81:17:dc:95:b5:22:2f:78:c1:a5:ca:31:63:a6:60:29:19:
81:66:28:21:bb:21:08:56:41:6e:b9:5a:8f:02:71:0f:c3:41:
fe:b7:23:ad:a4:33:d9:00:bb:14:cf:82:b9:17:07:c9:4a:84:
f0:8f:d0:f9:91:a0:90:b9:c1:e0:42:2d:07:14:f6:0b:6c:f8:
ee:df:24:52:c5:42:8d:d4:7a:52:54:3e:e2:4c:5c:71:64:22:
4c:9a:b7:01:66:62:53:05:3d:5c:9d:22:4c:ab:1d:2d:69:ef:
ba:9c:61:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:33:53 2025 by rpki-client