Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier: 1GjtDQzoB065Ip3qfJHLkseoYNpq8vsf68ci+ApfH+o=
Subject key identifier: ED:8C:49:E2:BD:92:91:65:3F:6B:4E:06:53:94:AA:5B:D0:05:5D:D5
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial: 0198D5834C7AF7B5197E77A4C63C77CDA925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number: 0432
Signing time: Sat 23 Aug 2025 06:00:08 +0000
Manifest this update: Sat 23 Aug 2025 06:00:08 +0000
Manifest next update: Sun 24 Aug 2025 06:00:08 +0000
Files and hashes: 1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: YTea86lYJtKK8K+r4/DB5Z/04R69mBick4SHgt78RVw=)
2: NJkr6UX1dyZbz9hAAHSEva9N1dU.roa (hash: dH1+iQ8jrIWNeK4bcaaw6PWPrPpzci2xfb2T6H4KeWY=)
3: nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa (hash: b96JAOO8n31SIeeTv1ll8vmQplePANc0Xbj3yOfw8j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4c:7a:f7:b5:19:7e:77:a4:c6:3c:77:cd:a9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
Validity
Not Before: Aug 23 06:00:08 2025 GMT
Not After : Aug 24 06:00:08 2025 GMT
Subject: CN=ed8c49e2bd9291653f6b4e065394aa5bd0055dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:a4:54:19:f9:1f:d0:22:9d:af:98:ea:92:
10:45:22:a3:48:a3:53:b6:47:0d:73:96:a5:1f:02:
0e:45:91:de:34:30:3e:98:84:d3:18:9e:ec:83:fe:
5b:10:90:ce:ba:3a:f9:77:a3:2e:cc:5d:c4:88:aa:
cc:a9:f2:07:0d:c1:5a:6f:63:a2:05:e7:8a:0f:03:
1b:50:88:f7:e4:83:bb:12:dc:fa:c1:8a:ed:ab:52:
c0:9c:f4:ed:06:99:7e:40:11:c7:d4:4c:43:34:a4:
98:c6:08:e6:35:50:64:cf:2f:90:e4:64:59:7e:1a:
9b:b7:5f:e6:0f:ce:7d:bc:eb:41:e4:d0:54:af:dc:
65:55:7b:7a:f0:b4:23:b4:c3:f0:4c:82:f0:b2:a4:
e4:33:51:25:0f:8f:69:6f:44:46:74:2e:fe:bd:24:
6d:12:88:77:e1:a4:4d:62:8b:35:19:4a:7d:49:c3:
a3:72:83:32:60:40:ce:f7:c9:49:d4:68:f7:a1:4e:
ea:5a:bb:85:7c:99:ff:0d:20:e2:08:14:c5:dc:00:
d3:09:f8:58:e3:4b:ae:5f:5c:3f:0b:f8:b9:1c:5b:
41:a4:1d:ba:00:97:6e:67:2c:38:41:b2:2b:47:f2:
a8:6f:06:1d:2a:90:03:2c:33:0c:96:c8:42:87:4e:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8C:49:E2:BD:92:91:65:3F:6B:4E:06:53:94:AA:5B:D0:05:5D:D5
X509v3 Authority Key Identifier:
keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a7:1d:cd:b4:e7:d5:53:b8:f4:67:0e:8c:d0:e6:c6:9e:6e:
21:b7:9d:c9:9c:21:63:bf:90:52:47:57:fc:d8:96:55:31:06:
fa:f7:cb:a2:75:31:08:ed:c1:14:63:d3:fb:78:07:cb:56:23:
0b:f2:39:f4:9c:ca:cb:34:fb:ef:47:9c:9f:b4:fa:1a:b0:c4:
34:e2:3a:6a:30:2b:2c:d0:6d:7c:5d:42:24:6f:b3:70:07:4f:
4c:62:38:38:04:37:79:ad:47:af:22:b4:0b:89:d4:c6:2f:ec:
3a:5f:fa:c7:a4:fc:da:4e:4d:80:78:a6:0b:62:7a:6e:ab:89:
92:f2:c5:ab:95:81:f4:01:41:db:88:cc:e8:33:3e:71:98:7e:
bc:f3:d5:4d:71:bb:70:5b:26:2b:50:4f:fd:98:80:98:bc:8c:
51:ac:41:b2:aa:33:ea:c8:9a:24:d5:39:a2:1f:89:54:47:33:
8f:b2:36:c2:5c:b0:58:18:b2:5f:f2:25:3d:d3:ac:a7:3c:5a:
3b:27:ce:63:36:23:03:51:f2:88:4f:4d:50:4f:3c:83:9e:cc:
05:e2:d2:a1:06:30:b9:9d:57:90:d3:87:0a:b4:bc:a2:43:e0:
df:03:82:98:08:10:74:37:73:18:02:61:1f:f8:63:93:4b:17:
82:2c:a0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:56 2025 by rpki-client