Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
File: 0VoQmMXIU1yXWPEo2KCC33z4UQs.mft (raw, json)
Hash identifier: p2cI9RYfU+6VHEwSPD08LwgVWJlAISfpLLpFroiguXk=
Subject key identifier: 8C:66:3F:CA:58:1D:96:A6:D7:80:F4:03:54:7E:CC:E0:9D:90:0E:99
Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
Certificate issuer: /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Certificate serial: 0198D660DE5806545F411166935FB0CF7AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
Manifest number: 0902
Signing time: Sat 23 Aug 2025 10:02:09 +0000
Manifest this update: Sat 23 Aug 2025 10:02:09 +0000
Manifest next update: Sun 24 Aug 2025 10:02:09 +0000
Files and hashes: 1: 0VoQmMXIU1yXWPEo2KCC33z4UQs.crl (hash: 7I0jYrU067OYmn9skD9fzMzQ49scwrB5V8XA3gmLXHs=)
2: 7KXXDbOmDOJ4LQN1JyFA-k-Tm80.roa (hash: FyGaqVFk+vnx+I1kj3NwUg/UfIFUtqEhpx9/rpeS44U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:de:58:06:54:5f:41:11:66:93:5f:b0:cf:7a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Validity
Not Before: Aug 23 10:02:09 2025 GMT
Not After : Aug 24 10:02:09 2025 GMT
Subject: CN=8c663fca581d96a6d780f403547ecce09d900e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:a5:8a:40:11:36:45:da:8f:46:66:af:78:
0b:b1:87:8b:bb:80:4b:3f:25:25:41:25:17:ba:76:
09:dc:2e:c5:85:45:3c:a1:0c:6a:9a:74:c4:a2:33:
70:7b:fe:b3:dd:5f:7d:80:5b:31:83:51:e1:d4:be:
de:7d:b2:fd:03:2b:1f:e2:80:e6:a5:63:9a:34:e2:
a1:b7:cc:ba:b2:e3:d0:12:56:29:cf:cc:d5:ae:01:
c1:e3:ae:f4:ff:87:35:86:ab:73:f2:54:b3:a3:cb:
2d:68:12:65:44:ac:5e:bd:d9:2f:e5:72:16:08:04:
b9:5c:da:a8:e2:b4:57:2e:9d:1b:00:44:6a:17:a2:
b9:a9:98:b0:d0:0e:ed:d6:12:0b:c6:9c:fb:c1:ed:
c0:bf:14:27:ab:de:2e:1d:6d:85:43:5a:9b:9e:fc:
c4:2a:7d:82:66:88:be:7a:c3:ed:c8:ff:c6:fc:8c:
e5:a9:be:cd:2f:a0:81:0c:4a:6a:bb:18:02:d5:4d:
9b:9a:8b:bd:27:74:03:c5:1f:ec:ba:3d:84:3b:c9:
e4:04:d3:28:06:83:55:74:fb:5f:be:84:90:1e:25:
86:b6:04:38:d9:f0:92:a6:2b:3f:56:53:7b:12:08:
10:ef:8c:ff:30:4b:7a:3c:42:36:df:2a:40:ab:d9:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:66:3F:CA:58:1D:96:A6:D7:80:F4:03:54:7E:CC:E0:9D:90:0E:99
X509v3 Authority Key Identifier:
keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:77:02:9f:a8:07:c6:2e:81:3b:90:3b:78:6e:4d:b5:a3:a8:
d3:6b:3b:80:48:fb:77:ba:a5:3a:77:a2:0f:c6:09:d7:27:c0:
43:dc:25:c4:b9:d6:e9:1a:25:24:01:9d:ff:16:15:f4:01:c5:
d3:55:34:e8:71:ad:f6:a6:93:3a:eb:e5:be:1a:6d:ee:11:0c:
03:7e:a6:e2:d8:0d:4b:3c:be:4f:0b:dc:b3:53:8b:92:7b:c9:
5a:19:3c:c8:c8:b9:2a:d7:28:88:9d:40:db:2c:e0:43:7d:60:
c5:0a:48:74:c2:29:1e:3f:a3:ea:76:cf:e4:92:cf:da:9a:f9:
55:2e:10:dc:88:bb:8f:7a:43:de:12:24:89:85:9d:fa:dd:3f:
96:74:b5:8e:6b:ae:fa:cd:11:f1:c7:35:8f:c9:c7:55:ae:bd:
93:71:a2:c6:1e:97:0b:cd:f3:db:40:51:c7:ae:e9:36:15:d8:
8e:09:b0:3f:69:71:6e:43:8f:2a:0d:c5:c5:64:9a:8f:15:f0:
91:50:3d:0b:8c:a7:20:77:53:20:2c:31:3b:bd:7f:89:13:c9:
ed:92:48:4d:f5:23:ef:ce:af:1a:06:3f:94:bf:f4:84:c8:e6:
f1:f3:6a:0c:f6:85:78:81:6a:cb:62:c5:40:2a:6f:d6:fc:37:
2a:53:93:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:32 2025 by rpki-client