Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier: X06r6RbKS+9LML1QIBXExZFEtZ6dC/ZCdFvbT3qThxY=
Subject key identifier: 57:45:AA:C0:5A:59:52:18:B9:0C:4A:CC:37:1A:3F:63:25:29:B3:C6
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial: 0198D5F1B75F1963BBFF0B5C07B6B2B5BEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number: 0833
Signing time: Sat 23 Aug 2025 08:00:44 +0000
Manifest this update: Sat 23 Aug 2025 08:00:44 +0000
Manifest next update: Sun 24 Aug 2025 08:00:44 +0000
Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: bA/93Vw1JElk5lU+OWvEThPWjsfsn+BGbt+14tvHKyI=)
2: 1Ae_yfQHDKRNnQDwOPRaMQCngyQ.roa (hash: +NTp7Q1pqxAx2whls9B3Uy3bHdVw5DZ30CWN9JliAkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b7:5f:19:63:bb:ff:0b:5c:07:b6:b2:b5:be:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Validity
Not Before: Aug 23 08:00:44 2025 GMT
Not After : Aug 24 08:00:44 2025 GMT
Subject: CN=5745aac05a595218b90c4acc371a3f632529b3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:87:fc:e5:8b:ba:c5:64:0c:a0:da:08:61:
2e:2b:d6:2c:c2:ba:a8:53:cb:d3:ea:21:9d:df:b2:
a5:a8:7d:7b:f7:c0:b5:4b:a8:94:04:23:69:47:42:
0f:8e:54:1a:86:76:5e:09:ef:55:9e:42:aa:b4:17:
f5:09:97:5a:6a:ff:72:26:7b:17:b2:7b:d4:88:fe:
e6:6e:fb:9a:3d:38:cf:95:41:11:96:4b:7c:97:39:
2a:06:de:d5:8b:7d:73:67:09:32:a8:84:de:49:18:
31:85:c3:9f:62:db:1c:ae:48:05:20:0b:dc:a9:23:
b2:ba:aa:77:10:f8:45:72:00:96:3f:12:c4:f4:c1:
36:80:00:2d:f3:a9:65:a2:59:c4:19:02:dc:80:ea:
45:6e:08:43:2c:6f:a4:80:b5:ad:bd:3c:d8:37:a5:
c3:43:5d:d8:54:93:3b:3d:3c:8e:6b:64:cc:3b:fc:
06:44:a7:20:b8:1e:aa:8d:df:4c:64:a2:09:1b:fa:
9b:99:08:79:9b:69:3e:0b:41:a3:89:bb:c1:6c:0e:
9f:fd:e1:05:93:dc:ff:23:e1:fb:42:05:a7:6f:e2:
28:01:47:ce:ea:2e:21:34:ad:aa:73:26:e9:56:9f:
97:13:76:67:eb:b6:ff:64:0a:ca:7c:af:67:a5:84:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:45:AA:C0:5A:59:52:18:B9:0C:4A:CC:37:1A:3F:63:25:29:B3:C6
X509v3 Authority Key Identifier:
keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:85:6c:29:4a:f1:24:13:f2:8c:a1:d7:c2:23:f8:c9:32:
8b:1a:68:a4:56:6e:48:19:37:2c:14:c3:d1:a7:d1:0b:6a:12:
94:98:e7:db:fe:ef:d8:a7:b1:a8:33:44:c6:f5:78:c8:5f:3c:
02:8e:f3:ee:35:d7:4b:f7:6f:69:64:7d:58:3d:e0:28:fd:b0:
de:8e:7c:80:d5:25:01:f9:80:29:d6:56:60:ad:84:8b:b5:d2:
21:76:ae:72:29:07:72:23:cb:7a:b0:98:59:e6:f1:15:c4:97:
c0:cb:73:2a:6c:51:0a:8e:a7:47:86:ff:84:64:1d:54:f6:a2:
59:20:18:68:ce:7e:d0:51:8b:d6:69:76:9f:1f:42:39:8a:c9:
aa:88:3b:b3:17:b1:97:40:53:f5:a2:b0:3c:45:db:b1:30:d6:
84:42:2e:a7:4f:a3:e3:61:31:c2:37:d7:10:bb:d0:cf:b7:b3:
e3:19:88:0d:ba:0e:08:29:63:75:31:b8:a2:23:a3:cc:43:f1:
87:36:c0:1f:eb:c1:21:86:10:b5:35:d1:49:cf:18:f9:7e:32:
ea:bc:47:14:cd:1c:33:92:5e:42:52:7f:52:26:fd:30:f7:ab:
a3:65:7f:ce:a2:1b:35:a4:64:4b:c4:22:98:60:fc:a0:ad:a6:
36:08:e5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:24 2025 by rpki-client