Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
File: 0HCWDtmg2hybfiRX6ry2YEeNCK4.mft (raw, json)
Hash identifier: dCEv4bogumwxiuyzL7khaLazozFtlJ9+FxEKVqEO++g=
Subject key identifier: 72:92:C6:06:44:AF:F4:12:4B:90:77:21:2B:C8:56:D1:A3:FB:7D:CD
Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Certificate serial: 0198D5F18D7247BF721DD23EEFADC9441C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
Manifest number: 072A
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: 0HCWDtmg2hybfiRX6ry2YEeNCK4.crl (hash: nk8J3RA/MZXevffmpNy3N4HhV4kjCV18uU992AoSyEA=)
2: ZYblDAaDwwmnrchNjFrf0zm4tO0.roa (hash: TUJh6mrSVIERTxbeRqv55tj1PiJ2BrobmYQdllbfBL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8d:72:47:bf:72:1d:d2:3e:ef:ad:c9:44:1c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=7292c60644aff4124b9077212bc856d1a3fb7dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:41:6f:41:e6:b6:ad:85:51:ba:f5:07:b8:
86:26:fe:4d:dd:54:7e:03:50:a3:c9:e8:5d:f0:6a:
05:a1:6f:3f:ab:b3:fb:d6:a1:1f:8c:68:12:f9:bb:
13:22:ce:54:99:ea:a6:bd:7d:09:d9:51:83:aa:0f:
26:4d:47:52:85:90:e0:8c:e7:f6:d4:30:02:b7:3d:
34:3e:05:ed:8e:21:4e:3c:d9:c2:37:57:a4:8c:a6:
ab:0b:0a:3e:a9:b0:08:3d:a7:a2:7f:b9:8e:71:cf:
d2:f4:07:17:fd:3a:d6:b2:de:c0:24:e7:50:e7:2f:
0f:1a:92:92:ab:41:0e:4a:cc:e7:44:18:13:35:ce:
c5:af:a7:e0:06:cd:49:9c:84:62:a6:4f:83:3b:0d:
22:0c:a8:ae:fb:ff:1c:4b:47:6e:3d:ca:71:3d:0d:
18:9f:a0:a8:d7:ca:57:5c:7f:2a:23:ef:bf:ae:e4:
bb:2d:de:42:98:48:78:85:93:4a:5b:f5:7c:d3:c5:
69:7e:78:89:31:bc:19:7a:48:66:60:2c:29:c8:9a:
0c:46:3c:1c:ae:06:68:93:57:14:87:f0:af:fe:44:
1c:89:f3:06:24:e1:a8:ae:c0:b7:74:7e:82:fa:35:
32:35:04:cc:86:0e:24:14:0f:76:33:92:ab:ae:aa:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:92:C6:06:44:AF:F4:12:4B:90:77:21:2B:C8:56:D1:A3:FB:7D:CD
X509v3 Authority Key Identifier:
keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:05:22:61:9c:0d:95:ef:2e:32:6f:06:34:a1:a4:ae:38:94:
5b:b3:e5:b3:c6:45:6a:fc:4e:65:d8:23:3e:e2:2d:07:6a:87:
cb:fc:d7:7d:8d:03:7c:be:c3:54:95:07:a7:28:7d:a6:04:e0:
e1:c1:19:49:f4:f1:30:f8:5c:6b:02:57:6a:d6:7d:6b:91:5f:
41:d1:cd:d8:a6:1a:3a:83:ff:5b:15:3d:0f:9a:40:ba:53:3f:
65:57:04:69:5e:8b:6b:9e:bb:c1:d8:66:52:a6:ec:d6:f3:9b:
1a:3a:f5:7b:42:97:73:a1:29:b1:ff:c1:21:c6:9e:91:03:82:
ff:2f:0f:0b:c9:6b:8a:87:2d:b9:a9:05:d5:00:d0:6a:56:e4:
9e:ed:6e:02:04:69:c0:e2:09:99:80:6c:6c:11:9a:a7:6d:5f:
7d:f5:13:32:5f:10:16:01:b1:f0:aa:ae:2b:ac:9d:d3:4b:17:
cf:c9:3d:de:c1:c6:79:b8:2c:b3:39:7a:a0:c9:37:a0:f7:26:
44:33:72:8a:a9:95:b1:f2:9c:a5:cd:21:92:47:91:37:2a:a4:
36:87:11:01:ab:22:d4:73:d5:3b:8c:96:35:57:ab:1e:16:6e:
9c:68:12:ec:22:dd:b5:38:29:a6:15:5e:8b:be:36:6e:58:a4:
c7:38:fa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:22 2025 by rpki-client