Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier: +B016u3XffZoG4Hru3NL7uH717oK60yTISJPXSSr86o=
Subject key identifier: 5C:72:78:E3:EC:76:E3:09:32:BA:6C:03:B7:AB:23:26:BC:8A:D3:48
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial: 0198D4732B121E66B46F30F01C39A278F5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number: 0BBD
Signing time: Sat 23 Aug 2025 01:02:53 +0000
Manifest this update: Sat 23 Aug 2025 01:02:53 +0000
Manifest next update: Sun 24 Aug 2025 01:02:53 +0000
Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: Bxo+RedsF2BeiV6yDWTM4rObA5Di5eJJlp/cTy5JYWk=)
2: RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa (hash: xBu31AarPg6SaGrJFYKlAHmm3Mw8LW1iAP2FYDxCvXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:2b:12:1e:66:b4:6f:30:f0:1c:39:a2:78:f5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Validity
Not Before: Aug 23 01:02:53 2025 GMT
Not After : Aug 24 01:02:53 2025 GMT
Subject: CN=5c7278e3ec76e30932ba6c03b7ab2326bc8ad348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:47:99:47:6b:92:ad:2e:08:0b:e3:f6:13:
06:b1:d1:05:be:f5:c5:f5:38:cb:48:76:2b:53:2a:
5b:e0:38:36:9d:2c:bd:86:b4:a1:ea:14:91:93:76:
6b:a5:23:73:06:a9:b5:6a:f2:d3:e1:22:7c:f7:58:
7e:f8:8d:e1:0e:a3:3b:dd:6b:ca:be:dd:49:ee:b2:
b3:59:7c:e4:2a:a3:7a:6f:96:17:45:e5:23:aa:e8:
65:d4:ce:65:da:68:e4:c5:52:d1:f1:ab:5c:90:4c:
9a:35:9b:12:c0:ef:49:0f:54:87:06:52:bc:52:d2:
70:59:41:b0:f1:8e:7d:4c:47:dd:dd:cb:c6:bd:13:
c4:16:a9:1e:bb:c6:2d:2b:2a:03:97:e1:36:b7:9c:
b5:23:0f:c0:0b:bb:ab:4a:88:92:05:f7:cf:c7:7e:
e7:1e:21:32:8f:63:6a:fd:53:90:d5:84:23:54:54:
ea:c8:89:c7:a4:c1:3f:81:c0:bb:af:46:db:40:86:
52:50:7d:53:d1:c8:4a:5c:5a:79:8e:8b:5c:a7:20:
a0:83:18:16:24:8b:55:21:11:22:35:3e:1c:4f:fb:
b4:42:20:88:21:c2:f8:65:7c:de:0c:72:e2:9a:a3:
6f:75:a2:09:8d:78:75:e9:76:2c:6e:0d:26:a9:d4:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:72:78:E3:EC:76:E3:09:32:BA:6C:03:B7:AB:23:26:BC:8A:D3:48
X509v3 Authority Key Identifier:
keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:53:31:30:63:67:0c:9d:38:4c:46:84:64:3a:ca:f5:68:f9:
68:f8:2a:37:53:70:fa:df:9f:c5:02:ac:0d:b9:81:ae:e4:bd:
eb:11:50:66:c0:3b:8a:f9:56:a2:02:7a:a2:b5:da:f3:40:59:
51:22:54:ba:46:19:02:d8:dc:8c:0b:02:a5:38:0c:b1:db:3e:
d9:f4:d9:a2:80:68:16:10:49:d0:10:87:70:d0:ee:66:f2:34:
c0:cf:12:7e:1b:a3:8d:8e:1c:7f:4b:7a:c2:fc:a2:01:86:c6:
63:42:15:17:f7:89:18:da:18:c9:32:03:89:9d:38:82:f3:27:
aa:62:88:b1:10:8d:7d:11:3a:18:72:25:89:de:4a:85:67:89:
cd:7f:37:04:f3:5d:c1:70:e7:bd:de:05:9f:6b:57:e5:aa:d3:
24:cc:6c:4e:f5:85:31:ba:62:b0:52:ca:90:d0:7a:64:76:ac:
1c:fc:f7:1d:4e:32:fc:28:92:aa:06:0c:a4:eb:da:be:b0:e4:
55:4c:0a:5b:7d:db:13:65:de:b8:48:cc:1b:04:e6:78:28:26:
ab:e2:af:83:9d:a6:96:1d:a3:33:be:14:c1:6f:e9:1c:4e:fc:
96:94:87:b3:06:5a:4a:0f:b7:0f:28:68:2a:b5:97:ba:bf:22:
c3:54:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:22 2025 by rpki-client