Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json)
Hash identifier: cJtSRCRJEnEJ0KvvG69ALaKIfgmIZEl+xwVPpSvCVC8=
Subject key identifier: 83:3D:5A:F3:23:84:F2:D7:FD:26:A3:AA:1C:F8:ED:24:40:67:76:30
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 0198D7733D9C1D77FA927CF1BFCF2C90D7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
Manifest number: 0148
Signing time: Sat 23 Aug 2025 15:01:50 +0000
Manifest this update: Sat 23 Aug 2025 15:01:50 +0000
Manifest next update: Sun 24 Aug 2025 15:01:50 +0000
Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: UBD7XJ8oN+nh7nhQmDwIjEw8k9jwyBE0skRc2VfZk5Y=)
2: zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa (hash: ooYWSL91Gfinkq+JOzjVpKfIwzWfTooJXNIHzh0/MJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:3d:9c:1d:77:fa:92:7c:f1:bf:cf:2c:90:d7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: Aug 23 15:01:50 2025 GMT
Not After : Aug 24 15:01:50 2025 GMT
Subject: CN=833d5af32384f2d7fd26a3aa1cf8ed2440677630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:94:16:32:34:72:d2:6c:08:fa:ca:9e:41:
7e:70:83:b5:75:f2:dd:7d:46:56:09:48:2e:32:19:
43:38:f6:5c:43:19:40:1a:ae:14:01:dd:0e:52:8f:
5a:a2:15:52:14:1b:a6:7b:25:7b:7c:01:d4:fe:3a:
c2:b5:ee:9f:b0:fd:2d:aa:1c:bf:42:ff:7d:77:7a:
ab:81:a7:f3:2f:e8:06:ac:e2:16:95:f3:dd:9f:08:
ea:ab:7a:a3:fd:df:1f:7a:6b:f0:46:8d:28:5b:95:
d1:30:e8:df:c3:25:20:58:48:ec:d9:ce:f2:12:a8:
14:03:92:30:89:7c:6e:58:1d:d5:5f:80:8f:1e:3a:
76:dc:24:d7:ba:52:c0:8e:02:ce:04:2a:d5:9e:89:
eb:b2:b9:fe:11:f3:ce:4e:aa:18:2c:4d:f7:87:6f:
37:2f:33:ae:a5:07:40:79:ca:b7:1c:cc:e9:48:f7:
47:e4:1d:8f:12:16:ef:81:d1:8e:d8:fe:7a:59:75:
b6:aa:56:73:b7:96:5f:07:0c:9b:ef:e4:bf:be:09:
cb:c4:73:a8:31:f2:76:f7:ef:be:b1:06:1b:ea:8b:
3d:8d:5f:af:5c:de:60:19:4d:21:d1:34:5d:fe:0c:
be:ba:c3:28:c5:e6:dd:98:0b:7c:31:74:33:10:bf:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3D:5A:F3:23:84:F2:D7:FD:26:A3:AA:1C:F8:ED:24:40:67:76:30
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5a:69:ce:50:26:0b:31:fe:2e:2b:25:bd:bd:3a:f7:f1:ff:
2f:e5:ea:18:57:14:1e:68:2f:62:a2:79:52:1d:f7:45:38:f5:
8d:0b:e1:25:f7:15:ba:f1:b2:1b:69:42:e2:7c:8b:74:99:9a:
eb:ac:48:88:af:fa:67:eb:7e:fd:9c:19:25:c2:ef:bb:8f:88:
0e:3e:4c:c3:8c:71:23:52:5a:11:5c:37:52:9a:59:e9:6e:f5:
d7:44:9d:31:d0:f0:3b:ad:3d:48:29:6d:29:a4:66:ee:39:87:
26:e3:9e:c7:0a:ee:3c:21:7d:d8:9e:71:90:58:7d:c5:6c:eb:
33:d0:1d:2f:c1:40:0a:e0:8a:e5:13:59:7d:6d:f4:09:e1:2d:
f0:cc:06:e9:e2:bd:c9:31:3f:5a:03:6b:3d:c6:73:13:08:81:
da:1f:70:99:5e:be:14:fe:58:09:9a:f9:1e:48:ac:04:32:a5:
91:45:72:8e:47:01:63:30:2f:f2:db:43:81:4f:7b:fb:c4:d3:
81:cb:8f:04:2b:7c:85:99:75:57:68:4c:5d:96:32:a9:69:02:
d3:00:3f:ed:4b:c7:73:32:ea:cb:8e:b6:fb:65:1c:14:32:2b:
f0:8b:ca:aa:29:f6:70:ed:f5:62:f7:c8:1c:c1:00:a5:4e:03:
5a:35:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:07:16 2025 by rpki-client