Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: 5E2hO/g1Xvt8H7zZd+bbj0wZ3GeShljH4v/w23GeAJQ=
Subject key identifier: 9B:B2:B8:37:1D:65:A2:80:FF:3D:E5:32:B0:7E:0F:4C:44:B1:4B:8D
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 0198D4E03A0EA136FE752ED8A554B963D8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 03:02:01 +0000
Manifest this update: Sat 23 Aug 2025 03:02:01 +0000
Manifest next update: Sun 24 Aug 2025 03:02:01 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: vN/5+dTUhaqO9ozEj2jOK43USNyOw9Sebkp7Na0yqSw=)
2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=)
3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3a:0e:a1:36:fe:75:2e:d8:a5:54:b9:63:d8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Aug 23 03:02:01 2025 GMT
Not After : Aug 24 03:02:01 2025 GMT
Subject: CN=9bb2b8371d65a280ff3de532b07e0f4c44b14b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:27:fb:10:4d:a1:5a:e7:e1:37:27:6d:71:
79:ca:42:6d:a5:3f:f1:05:84:bc:dc:84:b0:96:09:
4f:27:a8:5f:86:16:fb:68:8a:e5:e9:2e:4b:79:06:
c6:d4:d6:c4:b9:e8:48:9d:8b:04:22:51:e7:f0:15:
9f:57:81:51:2b:b7:9c:1b:37:f8:27:6c:de:b8:59:
5d:4d:7c:a7:b8:e1:d5:5c:f0:cf:ea:cc:74:09:9f:
ce:76:29:ae:f3:09:ec:fc:73:c0:40:6a:31:50:68:
ca:b7:70:86:70:e3:c6:7f:74:54:60:9c:19:ce:92:
51:8a:9f:62:ab:1c:27:82:95:1f:89:d3:1f:a5:3f:
43:76:ec:60:c2:9b:62:af:a7:8e:93:13:65:cd:e5:
d4:a7:26:b4:ab:d6:a2:37:69:dc:f9:7b:54:f3:15:
4e:5f:7d:09:d5:ef:23:7c:08:63:7f:e8:a9:d2:09:
4e:0f:15:d4:df:db:7d:c7:cb:e9:fc:84:8b:3a:d0:
e9:a2:c2:97:f0:98:51:68:00:7a:2f:d1:e3:81:a4:
5e:f5:58:56:0e:8a:32:00:a2:18:cd:f8:72:a8:32:
5e:b5:a2:67:c7:70:0b:5f:f7:f7:7d:1e:5e:4c:f2:
79:4d:b5:43:3f:4f:e3:11:20:c7:c9:ba:d9:d7:43:
1d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B2:B8:37:1D:65:A2:80:FF:3D:E5:32:B0:7E:0F:4C:44:B1:4B:8D
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3c:fa:c0:fb:78:39:3e:e5:7c:93:b7:6a:dc:4e:1a:04:db:
aa:25:31:16:42:ab:c4:0c:0a:08:34:18:a7:3c:ae:90:ec:77:
ca:4f:05:00:13:7e:12:80:86:18:fd:47:5d:05:24:a1:9d:7c:
b7:61:c7:96:c3:b0:34:44:a2:cd:a5:fc:41:fc:1a:04:ba:e8:
75:0d:0c:0b:75:87:d8:57:81:04:2f:19:e3:6f:e8:81:18:83:
29:e4:c8:b3:cf:a1:4b:a7:a9:98:a1:df:77:2f:c3:bb:86:70:
97:bd:09:06:7f:93:8b:e7:0c:0c:d4:fc:3f:ca:6d:21:ff:5e:
d1:df:17:67:f1:f1:76:f8:06:5d:c7:82:3d:3a:df:47:0f:f2:
78:4c:44:dc:2f:47:62:5d:a2:2b:49:9a:fe:86:1e:b2:45:cf:
c4:dd:e6:9b:0a:b3:9c:e5:8f:21:ec:50:eb:c8:90:60:29:f8:
8e:e2:6d:93:85:b4:fa:df:38:dc:56:ea:37:cf:02:cc:79:f9:
04:c4:64:4e:46:f6:ee:5d:7d:f8:a1:87:ea:e6:9f:37:93:e4:
96:ca:27:ac:d9:cb:5d:ce:3e:70:63:2e:69:ae:d1:06:06:32:
9f:bc:7e:d7:2c:1e:44:e2:ab:5d:aa:04:bb:02:75:db:12:fc:
c9:01:f3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:29 2025 by rpki-client