Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: iXLrVt5Jt9jwGzH8C/+WCfI3SWfzMgWn3lfJboLNJfw=
Subject key identifier: 2E:07:D4:9C:94:01:62:EE:CB:2C:EF:B7:8C:36:BC:7F:8B:0A:83:9B
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 0198D54E16D93162A87EE550D40E849417FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 09A2
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: GBS81C+SnYmpE8IaIZANsQ33hPKztEcHjZK7V1rd9Eo=)
2: 8LyQu6M29k1339l_CEp2NXxrXCM.roa (hash: sefzNsDqr2VAFaOlXDNefpIYjAbww43X8pxj4t3RtgQ=)
3: TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa (hash: lpAiG+1V0l8l8KBHMEE2mx4+9kmKvUMXZxyrbPf7z7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:16:d9:31:62:a8:7e:e5:50:d4:0e:84:94:17:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=2e07d49c940162eecb2cefb78c36bc7f8b0a839b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:e9:ad:89:75:1f:15:6b:32:69:d9:9c:3c:
bc:5f:02:07:c5:85:ff:bb:7c:7f:02:55:ee:90:f2:
7c:c3:7f:13:1f:f1:c0:0a:7e:cd:8c:15:63:cc:e1:
d6:a0:a4:9b:c0:59:f9:b3:07:73:26:eb:03:df:a6:
8f:2b:d5:9e:b8:b2:ed:5a:b7:40:7d:41:36:42:6b:
46:26:b4:93:3f:78:44:36:c1:0d:4c:5a:73:a6:ec:
30:8e:33:33:a6:9c:06:e3:0b:5d:22:24:69:c7:85:
01:72:b2:47:9b:69:12:b9:d6:7d:b6:38:a2:a6:d3:
27:8e:aa:91:4c:f8:71:02:22:85:e0:9b:55:59:1b:
a2:93:34:57:15:5e:be:6b:8a:2c:96:a6:aa:c9:0f:
f0:96:9c:fd:12:79:3e:fa:54:54:05:18:93:1d:b2:
bd:b9:03:bd:8f:7c:16:82:63:62:4f:6e:ab:ac:80:
1e:51:be:e4:4d:e1:1d:ae:56:93:e5:d6:da:2f:a1:
be:4d:2a:2c:92:17:73:12:15:40:9f:95:eb:ae:90:
7e:05:39:f0:c8:dc:70:67:4b:49:bf:8e:bd:45:a9:
5a:b4:e4:9e:eb:16:ac:1b:42:c9:bf:a4:4f:fc:49:
85:28:39:9d:b4:8e:67:b2:3a:03:8b:b9:48:60:70:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:07:D4:9C:94:01:62:EE:CB:2C:EF:B7:8C:36:BC:7F:8B:0A:83:9B
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a7:49:bf:6f:80:28:0e:8b:41:32:08:66:0d:ca:6b:0c:1e:
a8:d8:6f:c1:47:03:0d:7e:cf:81:05:04:71:28:ed:d1:c1:f1:
a1:23:6f:9a:0a:f1:e9:1a:ae:ee:59:4f:11:35:01:ae:7d:19:
cf:02:ee:d9:85:a7:73:a6:13:5d:76:58:70:3d:dd:8c:e0:b8:
11:81:62:09:c6:2f:ff:c3:5b:b2:2a:6d:46:5e:73:ea:15:6b:
71:c2:a4:f3:9f:f9:14:d9:f6:65:3c:e4:17:1e:dd:99:34:25:
1e:cb:81:c2:ae:49:62:57:3a:25:30:07:c0:a9:34:79:95:6a:
a4:f2:ea:30:ec:78:5d:51:97:72:dd:96:da:9c:51:ea:ed:e9:
50:44:28:11:5c:83:56:c5:b6:e8:a8:90:45:ed:bb:0d:0e:00:
01:f6:a5:2a:20:2a:5b:20:ed:1d:98:11:2e:e3:94:c8:f1:81:
f8:52:3e:a9:e9:e5:67:0d:3b:38:30:80:2f:bc:6a:d8:03:1f:
c2:53:e2:a9:e4:48:1b:92:b8:0c:1a:d3:d4:db:e6:d6:39:6a:
f7:f8:f1:c9:c1:7b:03:bc:50:5b:b2:19:68:93:69:ae:11:4e:
8d:1b:0c:59:87:14:50:9d:41:b7:d7:61:2f:c0:97:2c:c7:f5:
eb:60:f2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:53 2025 by rpki-client