Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: k8AH3BqqPxg83KfEcbXrUAQ3KCAmoFvljmw+W5Uoe2g=
Subject key identifier: 89:92:50:88:78:24:04:D1:24:99:FA:8B:1F:84:90:4B:1B:2F:4D:7B
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 0198D77388AADB65508EFDC17FE6FF3A193F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 0DC6
Signing time: Sat 23 Aug 2025 15:02:09 +0000
Manifest this update: Sat 23 Aug 2025 15:02:09 +0000
Manifest next update: Sun 24 Aug 2025 15:02:09 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: 5odvHIyQmR5uo2b5BmwBgF76wCeZma31inSB6DJ+ir4=)
2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:88:aa:db:65:50:8e:fd:c1:7f:e6:ff:3a:19:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Aug 23 15:02:09 2025 GMT
Not After : Aug 24 15:02:09 2025 GMT
Subject: CN=89925088782404d12499fa8b1f84904b1b2f4d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:4b:46:23:c3:4e:c2:d1:b9:4e:e7:d8:8b:
a1:86:2e:f4:96:90:ef:a5:6c:b9:9f:62:5c:cf:e8:
6c:be:ba:c8:7a:73:53:7a:5b:9d:e2:34:f5:ca:ca:
80:45:36:94:64:9e:83:9c:fc:f9:93:cd:44:64:96:
36:8b:e8:4c:c9:c1:ee:fe:38:4f:c9:c7:42:98:69:
aa:c5:8e:d7:26:d4:08:40:95:7b:6b:d2:ba:85:43:
b1:40:a0:e2:55:6b:7d:7b:9f:87:97:46:2e:bf:72:
6a:40:3e:19:2f:fd:1d:7b:b6:6d:94:78:23:9b:ef:
53:91:86:17:30:e1:42:ff:40:fa:36:dd:3b:37:7e:
78:a1:39:68:ff:e9:ba:a2:95:8e:32:02:5d:83:11:
03:01:00:4c:67:31:33:08:55:eb:92:b7:fd:97:c2:
9f:04:53:12:ab:11:a3:15:a9:2e:62:66:a0:0f:b0:
21:2f:a2:84:37:b5:e6:09:f9:a5:a4:50:08:d9:59:
cb:b2:ac:5d:c3:0d:f2:72:bd:5c:ba:1b:10:92:a4:
49:bc:3a:c8:b1:f3:55:f8:bc:d4:c7:ae:5f:88:d5:
9b:d7:95:1a:70:03:21:17:13:92:ad:ae:31:3c:c3:
2e:c2:af:89:1d:7b:72:fb:35:c1:74:62:fd:2e:24:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:92:50:88:78:24:04:D1:24:99:FA:8B:1F:84:90:4B:1B:2F:4D:7B
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a6:4b:bd:53:1f:22:62:17:67:be:55:d1:6b:8e:2a:2d:78:
63:38:22:68:45:67:9f:5f:02:5a:42:14:da:6e:8b:f8:e6:86:
b2:e3:0e:d5:86:26:e0:97:66:95:17:67:4b:e8:f1:c2:9b:39:
27:82:fd:04:b3:64:f1:c0:1b:dc:7b:2e:c4:2e:58:10:72:81:
db:79:12:db:a6:91:75:35:7e:69:e8:ce:20:f5:9a:cc:b9:8a:
30:08:a7:7f:13:c3:b0:de:c2:47:e0:ed:46:c2:73:3b:01:cc:
e2:69:b7:92:4b:14:bf:97:df:6f:64:50:5c:48:e2:c2:27:5b:
ba:73:2a:45:86:cc:35:96:24:59:42:95:86:0b:54:be:af:67:
b6:cf:db:dc:35:95:f7:3b:65:83:24:e8:66:3b:9a:50:a9:a0:
a5:8b:91:37:4e:60:0b:4d:4e:0f:e5:d1:9e:30:94:7b:5c:5d:
21:8a:70:41:68:13:ce:30:dc:d4:4f:8f:4f:0d:9d:e8:a7:45:
6e:19:76:16:82:84:b4:b8:a6:98:1c:be:64:ca:1b:50:93:ac:
19:1e:bb:f8:2e:b4:e6:32:a9:4c:c0:a8:63:c8:3c:99:01:9a:
fb:e0:28:5f:eb:ba:08:af:8a:36:a4:b8:70:2e:05:10:f2:68:
7e:fb:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:46:47 2025 by rpki-client