Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File: 0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier: uGHUKHpMdP0sB/fLnBZgiZf4/wHKTVsx/cyHpfpioxg=
Subject key identifier: 48:A0:FB:E4:FB:44:09:00:52:C3:D0:77:10:72:87:BC:42:8A:67:3E
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer: /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial: 0198D65F93C92EEDC27087C4F4C22C4A4995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number: 0C14
Signing time: Sat 23 Aug 2025 10:00:44 +0000
Manifest this update: Sat 23 Aug 2025 10:00:44 +0000
Manifest next update: Sun 24 Aug 2025 10:00:44 +0000
Files and hashes: 1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: ImExaYi9hpW17BQMrtiLE5KmE/ZmEJA/KfOPyYMsYsI=)
2: 1qLqqTllve4zCxVAYOzBHvpeKI4.roa (hash: vb9EDboxZKlgHYFjRAGPCvT6HrDSb4Ej+FgPnOTiZKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:93:c9:2e:ed:c2:70:87:c4:f4:c2:2c:4a:49:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Validity
Not Before: Aug 23 10:00:44 2025 GMT
Not After : Aug 24 10:00:44 2025 GMT
Subject: CN=48a0fbe4fb44090052c3d077107287bc428a673e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:7e:70:65:6b:9c:0f:c2:c0:1f:3a:64:5f:
3d:20:da:d7:09:33:0b:10:b8:bd:3d:cb:a1:fd:46:
ef:d7:c7:f7:a8:82:e2:59:4f:88:e7:5e:c0:8a:53:
de:e4:66:94:0e:7c:c7:c8:b8:5d:5a:42:df:3f:a6:
6e:4c:a1:f0:9a:e4:6d:4b:44:45:d3:1b:ae:a2:6f:
af:78:4d:24:c2:f0:2f:04:6a:50:d0:2c:7a:03:8f:
b6:56:35:e6:b7:31:45:4f:73:05:f3:ea:1a:25:91:
23:43:7d:ed:91:40:ac:50:67:c9:ad:c9:5a:c2:09:
f0:bd:ab:89:cd:e1:97:c8:4d:01:59:8f:f0:e4:1a:
20:9d:69:da:67:c6:34:cd:5b:63:54:08:5a:30:ab:
08:f7:a4:f6:47:0f:0f:a4:28:fd:fb:62:29:59:54:
6c:11:c4:a5:ca:93:30:e1:cc:a2:c9:8f:db:7c:9d:
1c:0f:fa:c5:59:eb:10:fc:e4:4a:90:f1:8f:e3:33:
b3:18:3a:08:ee:29:a2:fd:8e:6a:34:3b:03:d6:97:
0b:df:61:6d:c0:42:ab:e3:d1:fd:3a:9f:c8:79:15:
38:19:79:48:5b:0e:64:bc:64:9f:67:4e:65:c3:28:
d9:05:0f:b1:b8:b5:41:1e:2c:f0:1b:e1:b6:60:e3:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A0:FB:E4:FB:44:09:00:52:C3:D0:77:10:72:87:BC:42:8A:67:3E
X509v3 Authority Key Identifier:
keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fe:25:8b:b6:b1:04:19:88:42:ed:84:64:53:fb:90:da:1e:
ed:f2:7d:dd:79:68:f7:5b:dc:ca:04:cb:30:e9:80:45:22:1c:
48:93:ce:90:a2:f7:aa:ce:28:a9:cb:9a:7f:d3:29:49:2d:de:
5b:b1:10:4f:68:8e:4d:fc:a3:9e:cd:bc:58:cb:ee:5d:24:74:
f6:f7:53:f5:45:67:21:ae:80:42:44:15:5e:30:b8:50:e6:db:
a6:a3:64:bb:ce:a0:97:1d:0d:43:81:af:a8:37:b0:88:21:29:
aa:79:01:1d:50:a1:c8:1b:ca:06:23:07:35:74:42:35:5c:59:
44:02:71:11:4b:3d:52:b8:09:da:1e:d2:33:f6:7f:4a:a7:35:
aa:12:92:10:ff:4e:ed:bb:38:e1:67:01:9c:3d:ec:26:85:a1:
f4:ca:2b:cf:bc:a6:54:2d:4a:e6:50:69:dc:5f:bf:14:7e:d8:
a8:04:78:fe:e6:ab:10:c5:6e:95:93:c6:68:40:4e:23:23:5d:
ed:95:a9:a5:58:4a:6a:48:ed:2e:f7:b9:58:6e:fb:c2:e4:52:
7c:9f:77:47:ed:34:56:38:54:b5:70:99:5d:7a:ad:22:2e:45:
57:11:8e:05:82:67:4b:7a:e4:00:85:c7:b3:c2:eb:eb:c8:53:
cd:c8:51:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:11 2025 by rpki-client