Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
File: 0AQf95gDebeYBJJWho3_OYGcJgQ.mft (raw, json)
Hash identifier: wYvgsDMbqh7D0tJt8ghR7vL3x2R5bE0YoB9j0uLozN0=
Subject key identifier: B6:58:0C:80:F5:09:B8:DB:E5:36:1D:79:A2:99:4A:C1:8D:96:9C:63
Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
Certificate issuer: /CN=d0041ff7980379b798049256868dff39819c2604
Certificate serial: 0198D6605BD391ED03B437BD1E5EC13389D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
Manifest number: 124E
Signing time: Sat 23 Aug 2025 10:01:35 +0000
Manifest this update: Sat 23 Aug 2025 10:01:35 +0000
Manifest next update: Sun 24 Aug 2025 10:01:35 +0000
Files and hashes: 1: 0AQf95gDebeYBJJWho3_OYGcJgQ.crl (hash: M15soEYkwOgy/EeSp1jk+sIRcJIeIXkCzECCuu6tkrw=)
2: M3dHm9GHrYD8lQS4ksiSXCNoje4.roa (hash: Nu6oMe2kKfWTDbq3VinP98dNG8A/F9K2WRgisYnSNqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:5b:d3:91:ed:03:b4:37:bd:1e:5e:c1:33:89:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0041ff7980379b798049256868dff39819c2604
Validity
Not Before: Aug 23 10:01:35 2025 GMT
Not After : Aug 24 10:01:35 2025 GMT
Subject: CN=b6580c80f509b8dbe5361d79a2994ac18d969c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fb:81:70:a0:6f:a2:e8:62:65:ad:cf:54:a8:
df:39:48:5c:f3:32:1a:05:66:6b:fa:11:91:20:0b:
64:38:7d:a8:1d:69:df:65:52:f0:d7:45:cb:0e:60:
4a:97:58:e2:95:29:30:2f:83:ca:91:0b:ab:e5:69:
8d:3e:80:6e:52:20:0f:ff:37:fa:b8:85:45:19:28:
b6:c0:1b:e6:0d:0b:f4:f3:99:35:31:b7:16:22:53:
ad:a4:5b:5e:ef:1f:43:3a:33:0e:1f:ba:b2:aa:48:
2b:4f:ca:78:b6:19:ca:c5:a2:6f:83:73:e9:af:f4:
f5:50:fc:7e:86:a0:0f:29:2d:3c:d5:a9:26:2c:17:
62:61:13:f8:2d:b5:50:5c:7d:e8:2a:4e:ca:e3:a1:
f6:bb:b3:4e:a7:07:53:fd:d2:4b:aa:02:a2:59:61:
72:9d:62:ec:d0:56:85:c6:4f:66:d9:fb:7a:0e:24:
8e:ad:eb:ee:e2:05:09:8d:68:a1:06:2f:ef:78:eb:
e8:b1:7f:ec:45:c6:d1:4d:0d:ef:b3:4c:b3:ea:8b:
44:25:72:2a:73:04:53:4a:8f:98:44:c6:cc:81:04:
5e:6c:fa:2f:59:21:e1:83:3b:20:68:d7:18:dd:21:
82:78:30:d1:6f:51:2b:85:d6:34:c6:d4:cf:2c:24:
2c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:58:0C:80:F5:09:B8:DB:E5:36:1D:79:A2:99:4A:C1:8D:96:9C:63
X509v3 Authority Key Identifier:
keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e9:23:52:20:74:a8:a9:c2:cc:04:9f:f6:d9:f1:75:ee:16:
b2:98:ed:41:06:4e:a9:63:b0:3e:82:46:41:cf:09:93:72:43:
9a:59:03:cf:be:2d:31:68:e2:38:d7:0a:c1:2a:4a:34:a8:e8:
97:14:3f:43:44:5a:70:27:d4:77:31:a0:c7:71:f5:83:3d:8f:
2a:be:90:a5:c3:1b:44:21:27:47:36:e9:15:5b:c8:56:f5:3b:
2a:b7:b2:1d:d5:d1:5b:63:fe:ad:82:3a:00:e7:a7:e8:f5:27:
d4:45:ff:1e:a0:9c:7b:b9:39:41:4b:45:9f:92:cd:a1:30:bd:
fe:b9:61:0c:f7:e6:84:36:42:ba:eb:c0:cc:9b:b1:35:61:7e:
85:6c:52:04:dc:36:56:39:f7:26:c1:45:f1:71:12:58:1e:b7:
c5:ed:70:bd:12:18:e2:fb:05:a0:67:74:b9:23:52:bc:ae:15:
9e:17:49:13:f1:a0:98:23:ae:ec:7a:fa:6e:8d:f5:33:cb:60:
b1:7e:54:e0:e1:51:7b:bb:65:9a:70:1e:1e:76:f4:f2:36:fe:
7f:2f:48:5b:4e:8a:1c:0e:bc:91:66:29:bf:23:9f:b0:03:0b:
b1:b7:27:b4:2c:c7:c7:6d:1d:3e:39:09:6a:62:8a:8a:4c:e4:
c0:71:4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:08 2025 by rpki-client