Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File: 0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier: Mmgbz80T09OX/kXkaAFokZK0hQLL6dHdrFijHts0GcE=
Subject key identifier: 0F:CB:96:8E:97:66:2E:04:AE:8C:96:ED:DC:93:6D:F1:9E:B9:F3:1C
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer: /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial: 0198D6612F7066BA9353FFDA154B43F44DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:30 +0000
Manifest this update: Sat 23 Aug 2025 10:02:30 +0000
Manifest next update: Sun 24 Aug 2025 10:02:30 +0000
Files and hashes: 1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: bBo//WjbAcvxY0ycQk9WFn6scClB1ZjNH4e4hxBFfEY=)
2: YlrLpRr6jHVjZjhSp57OuuJNoDA.roa (hash: 3sLpE4GcZV46VhUEypK4IVzC6Mp0SDmiK7VScSwFOfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2f:70:66:ba:93:53:ff:da:15:4b:43:f4:4d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Validity
Not Before: Aug 23 10:02:30 2025 GMT
Not After : Aug 24 10:02:30 2025 GMT
Subject: CN=0fcb968e97662e04ae8c96eddc936df19eb9f31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:e6:0d:23:d4:77:f4:4d:6f:71:35:a7:c7:
8e:13:df:5f:76:61:24:c2:2f:66:d6:58:ac:3a:3c:
ae:88:53:75:f7:79:6f:3d:90:64:de:ac:0b:c0:86:
76:2e:f3:07:03:f5:42:49:77:a4:2c:b9:fe:40:59:
88:62:c8:e7:fa:94:79:99:84:fb:53:65:d1:e6:07:
38:0e:4d:fc:49:e3:7a:4d:80:68:b9:5b:6a:44:ae:
4e:4f:b4:47:65:17:d2:9f:14:f3:1d:a6:07:e2:90:
4e:5d:64:4e:5e:09:67:67:b7:6b:67:fb:b2:97:ee:
ea:8f:30:6d:9c:59:2c:37:67:2e:48:c5:79:d0:49:
b9:7a:eb:e4:ab:ce:2a:b6:d9:fc:5e:4c:c4:a7:51:
07:fd:bf:b1:7b:c4:9e:50:f2:39:3b:5f:17:1f:d3:
a4:94:13:31:73:73:78:3b:68:9c:7c:3f:42:34:88:
d6:cf:90:d4:29:e3:fa:83:47:c4:3d:8c:67:8b:32:
bd:08:81:8e:e6:2b:d9:42:3c:e6:ad:48:30:84:c0:
60:90:e3:d6:c7:a1:81:93:aa:05:42:36:63:15:c1:
51:83:58:23:d0:05:ef:c0:30:45:5e:2d:20:30:f1:
39:b0:78:90:f4:ef:5a:9d:68:db:43:6d:50:04:66:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CB:96:8E:97:66:2E:04:AE:8C:96:ED:DC:93:6D:F1:9E:B9:F3:1C
X509v3 Authority Key Identifier:
keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d8:a6:9a:9b:40:8a:ba:33:8f:c8:07:1d:21:f0:6f:ca:ca:
0a:ac:a3:18:70:3a:86:3c:7e:91:2d:fc:c3:2e:96:99:c6:e9:
57:6c:e1:3e:39:c3:41:16:67:c6:a8:28:49:fe:60:2e:54:0b:
59:14:01:48:b8:00:c8:3b:5a:04:b0:8c:58:0e:54:9b:5c:1f:
4d:0b:38:80:b0:a4:a2:43:db:96:69:b9:e3:4e:9e:6b:1b:cb:
2a:b5:d9:f9:23:47:25:3f:d1:9e:82:b6:81:a9:63:ea:82:aa:
0e:9c:7d:0e:c1:d6:f7:a3:c0:a5:e5:61:7d:e4:4a:fc:a3:2d:
99:8a:d1:5a:7f:4f:7a:64:e0:6f:5f:f4:62:5f:c1:e3:2c:c2:
92:b5:2c:12:eb:a6:12:5d:6a:7e:22:45:12:f5:3e:95:73:15:
49:48:08:30:e2:1f:dc:ca:ee:67:31:df:b2:4d:41:53:64:d7:
47:a8:a0:35:8f:80:83:30:e7:52:d9:f2:11:e7:20:a6:43:07:
06:f3:91:ea:36:dd:38:7f:20:3d:77:3e:2f:40:8b:d0:05:e8:
89:df:35:d3:a9:c7:f1:a2:0a:a1:81:ed:1d:44:b0:37:73:59:
45:73:22:cf:d4:1e:1f:f3:5b:87:a5:44:2c:37:09:1a:2c:56:
db:c0:53:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYS9wZrqTU//aFUtD9E38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZDg1MjcwMzI5NWVjZjhiOTcyMDFmOTE2MzEwZjg4ZjRj
MDhhYjcwHhcNMjUwODIzMTAwMjMwWhcNMjUwODI0MTAwMjMwWjAzMTEwLwYDVQQD
EygwZmNiOTY4ZTk3NjYyZTA0YWU4Yzk2ZWRkYzkzNmRmMTllYjlmMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynDmDSPUd/RNb3E1p8eOE99fdmEk
wi9m1lisOjyuiFN193lvPZBk3qwLwIZ2LvMHA/VCSXekLLn+QFmIYsjn+pR5mYT7
U2XR5gc4Dk38SeN6TYBouVtqRK5OT7RHZRfSnxTzHaYH4pBOXWROXglnZ7drZ/uy
l+7qjzBtnFksN2cuSMV50Em5euvkq84qttn8XkzEp1EH/b+xe8SeUPI5O18XH9Ok
lBMxc3N4O2icfD9CNIjWz5DUKeP6g0fEPYxnizK9CIGO5ivZQjzmrUgwhMBgkOPW
x6GBk6oFQjZjFcFRg1gj0AXvwDBFXi0gMPE5sHiQ9O9anWjbQ21QBGb7vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/Llo6XZi4EroyW7dyTbfGeufMcMB8GA1UdIwQY
MBaAFNDYUnAylez4uXIB+RYxD4j0wIq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEt
YThhYWY4ODZjODIwLzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEtYThhYWY4ODZjODIw
LzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActimmptA
irozj8gHHSHwb8rKCqyjGHA6hjx+kS38wy6WmcbpV2zhPjnDQRZnxqgoSf5gLlQL
WRQBSLgAyDtaBLCMWA5Um1wfTQs4gLCkokPblmm5406eaxvLKrXZ+SNHJT/RnoK2
galj6oKqDpx9DsHW96PApeVhfeRK/KMtmYrRWn9PemTgb1/0Yl/B4yzCkrUsEuum
El1qfiJFEvU+lXMVSUgIMOIf3MruZzHfsk1BU2TXR6igNY+AgzDnUtnyEecgpkMH
BvOR6jbdOH8gPXc+L0CL0AXoid8106nH8aIKoYHtHUSwN3NZRXMiz9QeH/Nbh6VE
LDcJGixW28BTcQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:53:41 2025 by rpki-client