Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: K56EvciAwwYzgxWIx9y8CYCLlz2kyGwXKHdCVlvqooQ=
Subject key identifier: DE:BA:56:3B:19:8D:C7:54:D3:DE:67:CA:07:E1:A9:CB:19:B6:1F:17
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 0198D705B17527F07AE1B2A621AC0E6978BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 13:02:11 +0000
Manifest this update: Sat 23 Aug 2025 13:02:11 +0000
Manifest next update: Sun 24 Aug 2025 13:02:11 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: 4ovU3VNN1tJtW3kGypDdWCQ41dAUpP3EpCFPRBoPOtA=)
2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:b1:75:27:f0:7a:e1:b2:a6:21:ac:0e:69:78:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Aug 23 13:02:11 2025 GMT
Not After : Aug 24 13:02:11 2025 GMT
Subject: CN=deba563b198dc754d3de67ca07e1a9cb19b61f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:26:0b:c3:67:01:20:ce:1b:2c:db:ba:5d:
59:0e:66:b8:69:16:c8:53:ea:d8:50:aa:b7:79:47:
7d:ab:06:b9:8e:e8:e2:d2:3b:2c:78:95:2a:34:ff:
b3:9f:2e:e3:05:b5:0a:55:c6:96:99:51:ec:65:40:
2b:21:d3:da:eb:8d:bf:90:ef:1f:d2:f0:c5:9f:0a:
be:e3:20:d3:9a:e5:47:f5:8d:92:06:4e:95:2b:ee:
a2:a9:dc:5d:18:18:1a:40:e9:62:85:6e:d2:0c:94:
2c:c5:1d:36:a1:79:03:f8:c8:6d:0d:7f:31:62:e0:
21:ac:39:e7:1f:45:21:35:c1:90:22:9f:50:69:2d:
9e:b1:f8:bd:5e:5d:65:da:8f:db:6c:d6:c2:db:3c:
b7:83:89:65:03:43:ed:75:ee:91:e7:e9:8f:fd:cb:
75:0a:b7:aa:07:fd:4d:0b:3f:8f:3e:cf:8a:63:85:
81:fc:a5:6b:de:79:c9:9a:36:b1:8c:5a:7d:a1:8c:
f0:83:c1:48:42:66:38:dc:06:41:2c:eb:b3:26:84:
8f:be:b8:9a:d7:a1:1d:ba:06:f0:32:16:c7:e4:44:
5f:0f:83:5e:7a:f8:47:d5:3d:02:05:01:8c:5c:d5:
cb:fb:28:28:77:41:5c:cd:c7:50:8a:e6:06:7e:54:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:56:3B:19:8D:C7:54:D3:DE:67:CA:07:E1:A9:CB:19:B6:1F:17
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2c:23:50:b2:7b:e8:3e:04:7e:76:4c:25:47:45:f2:6e:90:
4c:b4:de:12:37:3d:66:49:43:55:a8:6e:e0:f2:fc:fe:55:2f:
9b:f3:d7:33:bf:85:b3:68:eb:11:a5:20:aa:8f:20:f0:70:78:
a8:59:d1:67:b3:ca:55:7b:db:bc:0e:3d:2e:7e:9b:53:c0:f2:
a0:f5:52:76:7c:47:6a:1b:ba:e5:9f:1c:d4:24:28:97:6c:d7:
52:73:45:8b:ac:0f:4b:8e:b7:6d:6f:3b:99:6d:53:d7:79:77:
a4:2e:e2:df:95:42:0b:72:87:f9:c7:89:ee:a7:04:29:f7:fd:
e9:5a:1d:25:40:0b:5c:8a:50:61:1d:ee:c0:cf:52:f7:af:eb:
a7:96:52:42:29:00:6d:20:6d:d5:3b:47:03:91:e4:e4:ce:42:
83:80:88:4b:a8:c5:71:b1:b2:d5:13:f3:e3:17:48:6f:10:f3:
69:97:16:1a:db:b5:5f:9f:60:06:73:75:6a:8e:7e:37:e5:90:
38:ed:f0:cc:39:a7:c0:0d:7d:04:7d:34:60:54:78:a1:42:a0:
d1:b4:19:3c:70:39:6e:0f:9c:15:ed:16:75:a1:85:d9:d7:30:
87:ba:50:7c:fe:1c:98:7e:ae:0e:89:5d:b8:cc:aa:65:70:45:
e1:07:3e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:29 2025 by rpki-client