Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
File: 0QZfT7a2eefxy92ANflnRnAQ6pk.mft (raw, json)
Hash identifier: wQB0GjzUaYHRw2LmCHkt07aBu4orPN+d1FlCAFDFzEE=
Subject key identifier: 27:F1:4D:B7:B2:31:C2:95:B6:FB:F9:04:2A:DA:18:80:1D:C5:9B:8F
Authority key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
Certificate issuer: /CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Certificate serial: 0198D4047433A190090722E8E645391C00E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
Manifest number: 0CC2
Signing time: Fri 22 Aug 2025 23:01:58 +0000
Manifest this update: Fri 22 Aug 2025 23:01:58 +0000
Manifest next update: Sat 23 Aug 2025 23:01:58 +0000
Files and hashes: 1: 0QZfT7a2eefxy92ANflnRnAQ6pk.crl (hash: iBS6i30s9MoaPtpvo2mYfhXL85bv2g67hu0mN1v0dqc=)
2: TLgddA3CgmtAKo-fV94OuzSavi4.roa (hash: tQo/EK/pm7RsFTI12Ej+RxeB7S+rUphRTa4aWGCPu7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:74:33:a1:90:09:07:22:e8:e6:45:39:1c:00:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Validity
Not Before: Aug 22 23:01:58 2025 GMT
Not After : Aug 23 23:01:58 2025 GMT
Subject: CN=27f14db7b231c295b6fbf9042ada18801dc59b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:13:0a:53:07:9a:0a:58:ac:37:e1:32:4a:
da:1e:92:61:51:b0:00:07:1b:ce:c2:87:71:e0:62:
a0:9f:9f:27:8a:cb:0d:f7:04:59:c2:e9:79:53:c3:
a5:f9:d3:6f:7b:41:e9:15:71:8a:51:e8:b8:42:25:
6e:27:31:b6:2c:42:d9:0a:0a:c1:40:1e:3b:dd:6b:
e2:71:f5:05:65:8a:94:13:1e:64:1c:4a:81:73:49:
d7:f5:4b:c3:56:74:b2:9e:08:38:f6:0b:29:97:4d:
42:dc:44:ee:29:c4:41:da:68:30:4e:2a:e6:39:4c:
79:40:28:d7:64:a5:0a:f3:f1:31:ba:2a:b2:97:45:
e7:52:5e:8c:89:a1:02:c9:bf:2a:bd:ac:d5:58:9a:
39:71:54:2c:d3:54:f2:37:79:61:d7:ac:38:fc:a4:
b6:f9:85:14:0f:b3:46:6f:01:a2:0c:c5:a7:e8:7a:
31:c3:38:2e:64:80:51:97:25:97:db:dc:b9:73:19:
50:a9:97:15:a6:95:c0:47:3c:23:48:36:5e:33:dc:
9a:f1:e9:3a:8b:5c:dc:9e:65:a2:89:95:30:d3:12:
33:96:89:5d:6e:3f:2e:fb:f3:eb:6a:73:9e:8e:8d:
d6:1f:48:1c:fe:08:68:67:60:f1:df:98:12:e0:e6:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F1:4D:B7:B2:31:C2:95:B6:FB:F9:04:2A:DA:18:80:1D:C5:9B:8F
X509v3 Authority Key Identifier:
keyid:D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:71:d0:2e:b8:fa:3d:33:c4:ed:36:7a:55:5a:ed:fc:eb:e9:
2d:fa:59:c8:63:42:3e:29:06:d5:7a:8b:7a:0b:a9:4d:14:8f:
d3:78:a1:32:76:2f:41:0d:24:66:e8:4a:2a:39:8c:9f:17:9f:
94:3b:a2:b7:21:89:4e:fa:a0:4c:13:ac:a8:d1:0d:d3:72:f4:
01:88:fd:06:cd:f3:1e:c5:8a:91:32:17:a0:93:2e:ce:5e:97:
9a:da:91:48:a5:13:90:59:88:48:6f:2c:24:88:e6:2d:7b:5a:
10:63:0c:7f:c3:08:a3:58:62:4b:8b:20:9b:fa:4d:d0:a7:fd:
42:b3:6a:47:29:d9:97:ed:42:b7:cc:fc:b0:e4:40:70:be:3e:
e4:66:6a:4b:e9:06:d1:3b:a1:e5:ed:3f:b1:ab:6b:14:66:3e:
15:09:92:a5:2a:9d:bf:d0:1a:b0:fa:62:03:be:01:d1:b8:b8:
f4:c1:84:09:26:10:16:3e:bc:3b:2e:85:22:5b:6a:e1:05:a5:
46:09:f3:44:0a:cc:c1:49:c1:8c:22:8c:2e:5e:e5:f2:32:04:
4a:ad:49:5b:9b:42:57:bd:b5:ed:46:df:79:d2:75:83:b8:a4:
f8:8a:24:d0:3e:ad:e7:20:00:6a:75:52:91:9e:4b:0c:1c:bb:
6e:6e:7f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:46 2025 by rpki-client