Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: 0CgbNpX5YNfV4agChSmB7his2mTD8qOXc0mM0mXHz3w=
Subject key identifier: 9B:AB:51:8F:1A:7D:FB:8E:59:F7:ED:7E:2F:5D:90:83:9C:71:4E:A7
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 0198D65FB9563F7264680AD86E1EA97E5F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 11E0
Signing time: Sat 23 Aug 2025 10:00:54 +0000
Manifest this update: Sat 23 Aug 2025 10:00:54 +0000
Manifest next update: Sun 24 Aug 2025 10:00:54 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: BjVVFzt4H/VkktfzPAeNY91+Mrt2q3YsTOL5DWLitBU=)
2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b9:56:3f:72:64:68:0a:d8:6e:1e:a9:7e:5f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Aug 23 10:00:54 2025 GMT
Not After : Aug 24 10:00:54 2025 GMT
Subject: CN=9bab518f1a7dfb8e59f7ed7e2f5d90839c714ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:78:d7:df:94:26:b3:64:00:cc:57:8b:38:
ff:83:05:4d:b8:ab:a0:9a:42:f0:ce:6b:bf:cb:f4:
18:73:42:69:f4:c1:bb:9e:c4:2a:6a:74:ff:63:98:
f8:ea:a2:07:bf:cf:32:d2:15:a9:b5:03:d4:e8:10:
6b:57:78:a6:3f:d4:18:1d:66:a5:9c:bb:d1:9d:e2:
f7:9d:8c:c4:5c:27:46:57:42:0e:a0:b9:5e:fd:2d:
0a:d0:51:be:0b:aa:c3:fc:49:95:54:5a:e6:18:fa:
1f:d4:dd:0a:31:58:3c:3c:01:76:df:8e:56:20:1e:
b0:3b:78:f4:cd:17:08:e8:38:b1:73:df:fa:a2:dc:
06:82:74:17:5d:d6:b9:a8:ec:58:27:1f:f9:8c:47:
64:d8:26:43:f4:2e:ff:a7:22:fe:ac:43:bd:99:cb:
2f:1e:91:d0:4d:ae:48:ed:2a:8e:ff:72:ec:51:1b:
bb:c5:c3:62:f4:07:15:c6:34:4a:d2:1e:7f:47:af:
b6:1e:f1:f0:9b:f5:66:4f:0c:e7:6b:98:33:62:cc:
f8:dd:ac:7d:b3:38:52:aa:1f:94:3a:fb:50:8b:85:
23:d3:d2:00:69:82:10:ab:59:55:41:e2:0a:c5:19:
03:2f:1a:65:e2:a3:42:50:aa:4a:2c:eb:68:89:e0:
b9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AB:51:8F:1A:7D:FB:8E:59:F7:ED:7E:2F:5D:90:83:9C:71:4E:A7
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7c:23:86:ea:d9:f8:0e:59:2e:e0:56:38:08:a9:0b:70:ee:
5c:af:a2:c7:ac:77:e4:2a:71:46:4c:a7:ff:e8:12:cc:ab:fb:
ad:f7:35:4e:30:ac:c4:0c:bc:bb:ff:51:c4:53:a6:1b:29:26:
cd:78:0f:6d:a6:c9:89:1b:30:53:7c:98:b4:4a:dd:72:b2:51:
15:69:3d:39:e1:0a:ac:8e:df:0b:97:52:f7:c5:2e:78:ef:f4:
bd:77:1f:a9:ff:46:7c:d7:88:15:54:f7:5d:e4:75:dc:71:79:
63:1f:a9:66:9c:22:a9:f8:85:95:a4:78:bf:b4:99:97:ac:e2:
56:dc:1f:cc:6a:c0:8b:aa:db:d0:b5:e7:93:72:ac:fc:5e:00:
d2:c5:df:22:b1:04:89:68:2c:47:b5:a8:97:23:19:04:33:e9:
85:57:b2:0c:44:84:a5:4b:d6:8d:5e:06:b1:24:6c:26:9b:47:
3e:1c:a4:bd:02:21:88:85:69:c2:9c:44:cc:28:81:a6:59:9e:
95:ad:15:ce:49:f2:9a:63:c9:c6:10:8a:4f:c3:39:23:41:3d:
62:a6:3f:9d:f4:80:e4:ad:ba:b2:99:e2:45:27:21:24:1d:27:
d2:7d:42:7a:a5:10:91:13:e2:57:fd:ba:68:8a:1d:4f:26:1c:
0b:f2:8a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:55 2025 by rpki-client