Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File: 0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier: cgXn/aSUJxjDAPDHh8PVRrQ7iVoCq8qYfmZbc5ZtpX8=
Subject key identifier: C2:16:FF:B8:01:40:B7:73:78:D3:B8:60:1D:8C:AE:8B:31:52:26:0D
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial: 0198D54DDB2D75EEDFA69D3B2EF5896D7287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number: 1523
Signing time: Sat 23 Aug 2025 05:01:46 +0000
Manifest this update: Sat 23 Aug 2025 05:01:46 +0000
Manifest next update: Sun 24 Aug 2025 05:01:46 +0000
Files and hashes: 1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: WkbpLvf6OazqQwerOTq89fhdeE0G71m1MtxS0N30yZw=)
2: n6mO0jwfMCGtBTJz4z0BBFhaaaw.roa (hash: depvn6FAlXY00NO5eAYz1KXbUInLhBp+Jz+PGCqafeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:db:2d:75:ee:df:a6:9d:3b:2e:f5:89:6d:72:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Validity
Not Before: Aug 23 05:01:46 2025 GMT
Not After : Aug 24 05:01:46 2025 GMT
Subject: CN=c216ffb80140b77378d3b8601d8cae8b3152260d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:61:57:8c:1d:8a:e6:7c:6d:35:78:d4:95:6f:
6d:b8:31:94:c5:fb:78:04:55:47:3b:da:e4:3a:7d:
50:a4:3e:fc:31:3e:33:3a:3e:38:ab:d2:ec:24:86:
a5:c3:58:3c:df:49:28:84:59:03:dd:67:20:c0:76:
2c:06:85:78:fb:20:64:13:54:25:52:03:26:45:34:
a8:03:ba:6c:0a:89:d8:83:25:65:d3:aa:d9:cf:3e:
f7:eb:69:af:31:06:76:f2:bb:05:c1:a4:6a:33:4f:
36:7b:8d:b2:41:7a:0c:ce:57:51:6a:e3:0a:37:80:
27:ac:8d:e3:ef:f4:cb:a7:54:06:a1:8b:ab:e8:29:
de:70:f9:23:78:85:d7:a0:0d:ad:43:a6:7b:88:85:
13:93:a7:8c:e5:39:f2:b0:98:e0:e6:44:b6:86:51:
8f:52:dd:9a:d3:cd:28:8a:70:56:cc:be:15:0f:33:
69:ba:0d:c7:2a:3b:2b:59:3c:89:c4:51:32:cb:0f:
18:11:7f:85:89:b5:90:65:8f:87:9e:b6:96:bd:31:
f7:06:0f:d2:d7:fa:4d:f7:17:35:23:0c:05:f5:03:
d6:9e:79:4d:e1:cc:67:b2:a5:51:4c:3b:38:67:07:
cf:29:ce:1d:11:62:d1:cb:32:93:2e:74:5f:a7:a8:
cc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:16:FF:B8:01:40:B7:73:78:D3:B8:60:1D:8C:AE:8B:31:52:26:0D
X509v3 Authority Key Identifier:
keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a4:14:c9:47:e0:9f:ac:1e:4a:0b:9b:06:ad:5b:a7:91:95:
36:80:3e:37:c8:f9:44:46:cb:a6:ba:e8:fc:5c:e9:13:5d:89:
e0:da:c1:58:4e:51:b1:13:65:2f:07:b3:92:5f:79:9c:81:19:
c0:ba:9d:48:33:ef:a1:18:ec:38:97:0e:e9:5b:c3:5c:e7:9b:
c3:de:65:1e:1c:04:32:7c:ed:41:11:e5:f7:7c:33:1a:15:c8:
4c:5a:95:aa:b0:be:5c:6c:42:d5:52:15:93:c7:4a:d3:e0:2a:
e9:0b:e6:91:20:ad:37:de:0d:d0:69:79:7c:b4:b0:0f:33:bb:
ac:d7:05:b7:63:14:36:9b:cc:22:91:5d:fa:ad:2b:7b:cf:31:
bc:19:48:aa:40:72:84:d7:07:c0:a3:f8:73:fc:d9:32:e6:17:
7b:e2:0f:43:f2:56:1a:13:ab:3c:71:e0:ef:5e:f7:d5:16:f2:
64:72:9a:e7:c5:b0:61:73:02:86:ec:2e:4d:c2:42:ad:dc:95:
bf:7a:b1:f8:67:bd:08:1a:54:af:2b:30:49:92:51:97:26:30:
1f:d6:49:10:4c:e9:d0:94:0b:67:be:5c:bf:dc:d1:b1:97:99:
a6:52:27:cc:fc:1d:db:57:57:fb:f2:e2:ce:f7:95:97:c8:ce:
21:bd:d3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:57 2025 by rpki-client