Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File: 0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier: xgITBPnT3EnxYK6wuHlGiSkyognk30+mkgOl+O4i8rA=
Subject key identifier: BF:C2:85:D7:72:BF:71:9B:ED:39:49:55:7B:40:B6:88:BB:37:C9:03
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0198D5BBA82F3FE97BF8E36CC9ABB19CC720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number: 09F4
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: Qd4cCK7TCqtUpo6+GprA9udMx3CV15O18pHUmqOtPEw=)
2: 43DBoHyjiorpYt6dv-j4uRvTolk.roa (hash: zlvrEcO2nIutlS94K9wDLAiUzBmW/xF4SzfRWP7kA9w=)
3: 73fgtycAM2crZ_LHwWRiB0oEU9Y.roa (hash: flrMOVA6rk3M5Itkv7RZo+kAVGvmhl0NxmnJ1f7lgFI=)
4: Bt-AqMlv5AGS23NSAHAOENpSz_w.roa (hash: Om38jAdn/FiagKwN0JD11FdBcj5g/guHfAWt957SB1c=)
5: Eey_cZJG1JzbE89yJ5-3WKAQnps.roa (hash: Sd/BEYaeo7DwAgjKLvAs+URaNM8tk1wO8kSwFI5eaf8=)
6: G6xf-2_9WqQfQEDF7v7pcNM6cBg.roa (hash: hCbc2HcFchj9v9WZR4JcZ3aDEye7Ter5KkTxwI9k97k=)
7: PgrI5bji_zwFyBCi5RYyHzPbacA.roa (hash: d/pIIetAFcKmg7G7UtiuiDXJsY/AL/TAdDoGjhTKvgo=)
8: YcTIc32XZA-ghsWcGzLeleFcTdg.roa (hash: hArIQsrZH8U5ODHNwYYROkxmUYJ8DizJuV1l/Z6DTPE=)
9: hu5_32WjJAn1luXKxXFJFRq4Qxo.roa (hash: H0Bfc/kNNNmVdaDFa9D40SANomRhQUovf2U0QQGgQtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a8:2f:3f:e9:7b:f8:e3:6c:c9:ab:b1:9c:c7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=bfc285d772bf719bed3949557b40b688bb37c903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:a7:a7:f4:48:dd:f1:6e:af:a9:21:85:52:
c6:74:df:ec:ab:87:ab:69:15:8f:34:d1:a0:7f:6e:
78:c9:87:b3:65:84:a6:31:4e:c5:a5:28:70:58:48:
6f:54:16:16:dc:af:99:52:79:cf:3b:85:45:2b:47:
93:fc:b2:a4:5a:5b:ba:b2:2f:5b:a9:cb:09:fd:5a:
5f:a3:57:f8:5e:fa:3b:29:db:4d:a2:88:e8:9a:62:
9d:6e:f0:ec:78:a4:aa:8a:fe:64:a4:22:36:8f:86:
c1:27:c8:ac:45:b1:c4:c0:4e:4d:e9:b6:e1:b2:06:
be:a5:ce:77:cd:0a:45:72:a6:4e:e7:9a:74:e7:45:
7d:f1:ad:92:99:7a:48:e2:17:2a:72:62:67:5a:02:
82:f2:d5:27:04:36:76:d5:4a:f6:2a:8b:0a:81:de:
9f:1c:87:ec:d7:16:cc:29:ca:c0:70:44:fa:7a:d6:
56:90:93:1b:f4:fa:8a:17:6d:dd:6f:de:bf:6d:b2:
cf:91:1c:61:f9:24:1a:9a:14:fb:0b:cd:67:cd:5a:
9e:4e:e9:62:7f:f9:ec:89:96:65:c2:d3:82:b1:83:
f7:42:ca:0d:f6:5c:91:71:2e:b1:95:8e:02:2e:41:
38:0b:21:cb:da:1c:1e:86:2d:a9:cb:11:b0:6b:94:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C2:85:D7:72:BF:71:9B:ED:39:49:55:7B:40:B6:88:BB:37:C9:03
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:3e:8b:e2:bb:46:f6:bd:11:62:a3:2a:b2:91:fd:56:df:cc:
8a:a0:76:e1:69:69:9b:2f:99:9f:7e:a2:89:4f:8b:62:b4:5e:
d6:99:03:a5:39:c2:92:fb:ca:fa:85:7a:22:91:3b:92:ed:d7:
ee:f4:50:00:8b:fe:47:4b:92:91:1a:4d:ed:ce:51:76:c9:92:
8a:4c:c1:c1:4d:86:a9:93:a2:35:b4:5d:1e:ef:3e:08:3f:81:
5a:23:1a:11:fa:62:4e:6f:1f:8c:16:4d:b8:b3:80:e4:a1:b2:
46:93:c9:60:ad:c6:dc:78:5e:eb:7d:bd:4d:38:6c:39:cd:de:
90:3e:79:f8:00:fb:5d:3d:ba:0b:5a:e4:3d:51:76:b5:f4:1b:
77:f2:22:f2:52:a8:36:e7:c3:d0:c5:22:c8:4b:83:71:52:c4:
73:6d:a4:54:45:b8:05:9b:ea:15:26:ca:64:81:b1:65:82:d3:
a6:b1:b2:49:d0:0a:5e:a4:24:9d:43:27:e9:3e:8b:3c:d7:04:
e3:fd:2c:ca:62:a1:17:2b:ff:11:b6:11:6d:64:d4:49:39:f2:
07:fe:24:52:4d:66:53:e9:40:39:49:c4:b5:cb:6e:b2:79:a3:
e8:06:a8:20:64:4e:21:b1:62:14:42:02:f7:cd:20:27:c9:36:
ef:9f:e6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:36:02 2025 by rpki-client