Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
File: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft (raw, json)
Hash identifier: LzU0cKEmok8aVjxjvHOBWU03O3+kv8MbnE1cMfFKGxU=
Subject key identifier: 41:13:82:B7:6A:69:2C:88:85:34:EC:7D:EE:37:F4:DE:24:51:F0:F1
Authority key identifier: D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
Certificate issuer: /CN=d291741252bb9c4cda80047dfb01ce98c219d180
Certificate serial: 0198D4E01E640E69F702D9C75E3ED04D6667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
Manifest number: 14FD
Signing time: Sat 23 Aug 2025 03:01:54 +0000
Manifest this update: Sat 23 Aug 2025 03:01:54 +0000
Manifest next update: Sun 24 Aug 2025 03:01:54 +0000
Files and hashes: 1: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl (hash: yBSTsqdfmBt1UJQwxc+afjFpCZOCUH+8FePLArpSgoI=)
2: 24F3NWEaUDo-ywzWotAmlAOE0aY.roa (hash: ERf1+Eo8kcPOcjF9iXtlxaEqblrqJRaC4jpu9Wj4DSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1e:64:0e:69:f7:02:d9:c7:5e:3e:d0:4d:66:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d291741252bb9c4cda80047dfb01ce98c219d180
Validity
Not Before: Aug 23 03:01:54 2025 GMT
Not After : Aug 24 03:01:54 2025 GMT
Subject: CN=411382b76a692c888534ec7dee37f4de2451f0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:86:1e:ee:53:35:b1:b4:66:9f:c5:a7:59:
65:8e:68:a7:56:b1:4a:7a:05:d2:c1:9d:76:84:d9:
e8:2b:cf:06:99:b3:23:f2:67:a8:76:9c:17:35:01:
ba:33:2e:e3:9a:9f:8f:3c:64:c5:16:92:36:93:c7:
28:d5:b8:09:4e:0c:c7:1f:d6:70:92:da:d9:c8:78:
98:59:c1:24:4d:b0:d7:d3:00:c2:23:f8:da:da:48:
2b:5a:2e:f0:b6:65:f6:48:72:b1:34:94:18:e0:c5:
8e:cf:85:4d:0f:dd:af:ab:3b:5b:dd:02:fe:bb:65:
27:dd:2a:22:20:d9:0e:78:84:be:39:69:37:21:1f:
ac:3d:ac:9a:91:3f:86:36:ee:d4:bb:12:9a:c5:7e:
97:1b:ef:33:3d:92:3d:0c:25:81:77:8c:a4:bb:04:
39:bd:2b:72:65:01:01:4c:20:0a:80:5e:4a:ac:ce:
60:ad:b9:47:8c:59:c8:bb:a7:dd:1c:ea:05:8e:34:
f8:b9:be:5f:82:4d:0d:33:c2:68:6b:46:be:3c:b6:
2a:48:f2:37:05:cf:0b:9b:e3:81:ee:5c:37:66:da:
be:ae:9e:b0:7e:29:53:70:07:1f:35:bd:48:10:e6:
ed:d1:d0:fe:d8:89:75:ea:b9:2a:1d:f7:5c:9e:3c:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:13:82:B7:6A:69:2C:88:85:34:EC:7D:EE:37:F4:DE:24:51:F0:F1
X509v3 Authority Key Identifier:
keyid:D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5a:ac:d2:ca:e3:e0:b8:c4:1b:96:f1:e0:8f:23:e3:50:2f:
ce:24:b1:b2:1d:e9:b1:7f:b2:cd:dd:6d:2c:ec:ca:25:34:90:
6a:f6:f7:c4:21:9c:fb:a3:ed:4e:bf:ac:42:d0:33:28:5e:01:
a2:79:06:50:65:19:04:9e:fe:35:75:38:0a:0d:3a:0b:ff:d6:
66:8a:7a:87:18:1f:3b:4f:df:bd:bc:5f:2a:c5:ee:b4:35:f9:
ec:47:5f:1b:a4:11:f9:16:55:ce:f1:78:32:b9:c4:c4:cf:30:
12:fa:7b:6f:6c:1d:3b:29:71:6b:fc:98:81:1e:a0:fc:69:60:
6b:3b:ad:3e:4c:e1:70:72:f2:8e:d7:c9:ce:a3:89:fd:bc:2f:
e1:ee:eb:52:fa:e4:af:f4:71:83:1f:c0:7d:67:4f:23:f7:d7:
71:9b:6f:6d:6d:13:4c:c7:00:3d:c4:25:e1:e2:3b:fe:13:b1:
15:b1:b6:fa:09:f6:fd:ca:a9:c2:54:59:7a:be:c1:bc:25:ca:
2d:d0:79:5d:bb:8c:6b:b7:4d:3d:50:b6:29:44:66:05:3f:f3:
6a:a6:91:db:a8:65:94:fd:06:18:b3:fb:3e:3e:87:14:5c:31:
46:67:9a:1f:2d:d9:8a:1e:51:00:e2:f0:6d:cc:ce:47:54:1a:
cd:2e:52:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:20 2025 by rpki-client