Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: RsGpsfXPunMAJ0zgfI7x4ktw7kyYy231ub0FWotrVjk=
Subject key identifier: A4:3A:AD:0B:D8:8F:03:36:BE:19:71:64:7C:1A:94:B0:39:CB:B2:59
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 0198D515D538450CA228C2D49481238BC464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:34 +0000
Manifest this update: Sat 23 Aug 2025 04:00:34 +0000
Manifest next update: Sun 24 Aug 2025 04:00:34 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: rJGCMlJut/Hy1uqsEa3/jbJJFoHK8oQ52p2M1SL6gsA=)
2: FJ052FCXxgY8148DvYkO__En3kw.roa (hash: JLmqR8aNA75wEnRdZMPO0CuZGQnOp6G+B6BOZat9Lxk=)
3: ja-2ssrlTJp2pStih2G9Qb0Qy5c.roa (hash: QTsSWZKA6bZq44kgpQ1aopr0h9GiEKlR3CEv28RO574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d5:38:45:0c:a2:28:c2:d4:94:81:23:8b:c4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Aug 23 04:00:34 2025 GMT
Not After : Aug 24 04:00:34 2025 GMT
Subject: CN=a43aad0bd88f0336be1971647c1a94b039cbb259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:8d:5b:bd:15:16:2f:60:43:cb:a4:b8:22:
c6:65:ad:52:e2:ea:f5:f4:9e:b0:3c:73:db:74:d0:
5a:d3:35:8b:a9:61:13:e2:78:a3:9e:a2:c9:f9:7e:
81:8b:20:ea:9b:23:62:ec:44:58:9d:6e:4e:86:b5:
51:55:fb:9d:36:5a:86:7e:9c:11:14:fb:52:d5:c0:
65:71:fa:3c:1c:62:73:69:81:c0:c9:ab:18:95:e4:
f0:94:a7:1e:d0:29:c4:3a:2f:fd:17:32:d4:3e:89:
66:fe:7a:9d:c2:a0:2d:07:54:a8:ee:3e:34:0c:12:
20:48:23:3e:3e:58:5a:7e:9e:09:6c:4d:66:11:56:
31:dd:83:d2:24:6f:b4:2e:ba:8e:07:e5:e0:8c:49:
d1:73:1e:4a:1a:c7:a6:40:77:75:19:67:cb:ec:7a:
7c:c7:5a:37:3f:43:91:f1:3f:9e:00:0b:1b:9d:1a:
f6:46:09:5e:7a:71:8d:4e:ba:bd:b0:7a:e6:6c:c7:
eb:68:99:1f:59:5b:59:01:59:4a:7f:b6:7d:e3:25:
b4:d3:7a:79:e5:10:21:d0:77:e3:b7:96:d2:ce:ef:
ef:e0:e8:bb:01:e3:1a:fe:7c:13:91:4e:a5:dd:00:
e4:05:87:e3:bb:f5:bc:30:05:00:80:7e:af:76:49:
d9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3A:AD:0B:D8:8F:03:36:BE:19:71:64:7C:1A:94:B0:39:CB:B2:59
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:64:03:04:93:13:77:1d:1e:72:2b:1e:1e:81:09:b6:21:36:
20:53:d7:a7:ec:dc:ba:cb:4c:d5:a4:fd:6a:f7:e9:86:8c:48:
8b:a1:ec:bf:11:6e:19:03:a3:71:89:74:af:83:1d:8d:bf:29:
46:d5:e8:20:3f:c0:3e:42:9c:4e:8b:df:bb:3b:4c:f5:ac:5d:
8a:8b:c9:c9:d6:3f:c6:50:db:54:a4:ad:4f:fb:bf:ca:e3:a7:
98:1e:39:12:8f:90:bb:18:21:88:fd:18:9e:1d:4e:c0:ab:8e:
2e:4a:50:f5:f3:7e:a8:9e:bd:1a:66:cc:7d:d7:2d:4c:57:49:
0d:a6:d6:b7:c0:31:3f:10:d3:9c:34:c7:41:2a:20:b1:3c:76:
f0:c3:5d:a3:0c:e8:a7:c0:43:a4:70:50:f8:3e:81:cf:00:ea:
7f:ad:7c:9b:b0:e5:6a:7b:96:0b:36:57:59:38:94:fb:58:61:
19:ae:dd:34:64:a4:0c:cf:f5:b3:3f:a0:69:c6:36:83:6b:26:
b2:20:bf:1d:96:30:f8:25:4d:68:88:cc:76:af:15:49:19:05:
89:80:63:c8:08:0f:3a:a9:38:a6:37:09:0f:f7:69:04:47:b4:
3d:04:c7:3f:1d:02:b8:8a:55:9e:87:a1:5d:3e:bc:0c:45:57:
b6:ea:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:31 2025 by rpki-client