Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier: toB1z5A/T6I6ECI0QFzgC9LnokR6UG3RITJJRL5+d08=
Subject key identifier: C8:D4:28:83:2F:2B:82:B5:6A:E4:CE:AC:6F:4B:A2:38:1D:33:1C:EF
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial: 0198D4DFFDB35B18C8413484FE9DBC385A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number: 0F21
Signing time: Sat 23 Aug 2025 03:01:45 +0000
Manifest this update: Sat 23 Aug 2025 03:01:45 +0000
Manifest next update: Sun 24 Aug 2025 03:01:45 +0000
Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: zi3t7eLlbdbtg+ll1dKRiWfqpc6TwFnZkBEJqOak49A=)
2: H6uSFDtLoI4YQD04FkS4VSFpIhw.roa (hash: hv1JnxHOhWB0hv+54xUCZyY9gAEBPU8rdk2117x7KVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fd:b3:5b:18:c8:41:34:84:fe:9d:bc:38:5a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
Validity
Not Before: Aug 23 03:01:45 2025 GMT
Not After : Aug 24 03:01:45 2025 GMT
Subject: CN=c8d428832f2b82b56ae4ceac6f4ba2381d331cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6c:29:6b:00:72:35:40:fe:b2:ea:8f:07:35:
6e:50:88:34:ed:57:11:84:5b:6a:ba:f4:76:7c:28:
91:57:9c:b8:dd:22:b6:d8:ac:c9:c8:56:f6:80:51:
f2:28:f7:36:33:90:dc:24:5d:bd:95:f1:12:4e:f7:
b6:e8:a0:c6:99:24:55:ca:68:71:58:ad:fc:e4:f4:
05:a7:32:d6:3e:2d:cb:e8:d9:58:79:be:79:37:32:
7e:4d:22:62:73:85:d0:e1:40:5a:c8:d6:1c:a2:5b:
30:3f:5a:52:36:a3:83:73:29:9d:cf:53:de:ff:8b:
65:16:2b:e1:ef:51:9d:4d:54:90:bb:36:6d:4b:e8:
19:44:c9:2f:42:d7:9e:74:4e:2b:f1:60:ac:a0:15:
cc:80:5e:35:c9:cb:82:c5:4b:92:53:ff:eb:be:df:
b2:ac:90:32:ea:eb:7b:8d:bc:4d:d7:2c:73:2e:2c:
91:a1:50:69:dd:92:1a:83:17:88:d0:f6:cc:5c:58:
83:98:90:f2:cd:45:61:be:42:a4:5c:5b:d7:b8:e8:
9c:a0:6b:71:10:04:64:75:e9:4a:c8:17:b8:7d:b1:
31:c3:56:50:4c:e2:c9:16:5d:20:9c:05:f8:2a:8a:
87:e3:da:cb:c0:30:a8:92:5a:68:05:79:62:c7:58:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D4:28:83:2F:2B:82:B5:6A:E4:CE:AC:6F:4B:A2:38:1D:33:1C:EF
X509v3 Authority Key Identifier:
keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:72:b5:a7:5a:5b:bb:11:83:f3:f6:7d:bb:b0:a0:45:19:4b:
c7:2b:4e:bf:bd:02:c8:3d:1b:4f:2b:99:f0:97:2d:39:2b:25:
53:73:80:5c:74:50:4a:d5:72:a7:aa:37:e2:7b:1b:3e:b6:ef:
a8:fb:59:5f:cd:5a:50:7d:69:63:c0:3f:f9:7b:38:cf:cd:5b:
7f:42:3a:92:59:ad:12:6d:29:81:b6:25:91:9f:83:97:82:b5:
6a:cd:8b:11:0c:27:17:92:7c:57:45:38:ec:dd:a1:9b:e6:fe:
ae:d7:a8:34:a6:a2:64:f5:4b:e9:a8:63:7d:ca:e6:72:26:8c:
4d:30:56:a5:29:52:1c:d5:46:de:2d:22:b3:00:8b:eb:4c:0c:
24:a7:ad:59:0a:5f:ec:a6:09:3c:25:23:38:76:74:f0:dd:7a:
ae:c2:ef:6d:df:5b:9e:0b:17:76:a6:79:91:e9:9c:eb:8c:a8:
bb:dc:ac:87:8b:2a:f5:11:a0:d9:dd:dd:de:9f:cc:d0:1d:be:
60:32:b3:6c:20:94:c0:6b:13:3d:5d:b1:ac:f8:a1:ef:7b:bb:
5f:1b:d3:cd:17:63:fa:90:b6:70:96:c6:78:0d:44:13:ba:09:
b2:a4:ef:36:07:71:da:c5:f1:03:4a:4d:51:b5:44:22:d3:0e:
74:17:52:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:13 2025 by rpki-client