Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: fIJnuSBuf9c4jDNW4jY1vIe914YLfyD9Xf1qAK/2wxM=
Subject key identifier: 15:6C:35:59:CB:AC:35:9C:BF:1A:E3:C3:DA:52:63:DC:70:61:60:6E
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 0198D65F86B211D6A2CB79CC715AEDD64493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:41 +0000
Manifest this update: Sat 23 Aug 2025 10:00:41 +0000
Manifest next update: Sun 24 Aug 2025 10:00:41 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: fyVck+jk/i6a+gNVs+NWptyQ3kRMx/bPENVZzCrtmmU=)
2: KzJRm4blhpQ22QWdKYNtwSo9hec.roa (hash: VvdDpNHANgnzHXSd6NFNAPGvygHgdOqLpMuWRNVTc78=)
3: baZe32PKXIeppnY8Yaja4T-a3tY.roa (hash: tWsZkF/TWyoJvpRhiK8XSrqOZGwxm+EMQruE+7kHGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:86:b2:11:d6:a2:cb:79:cc:71:5a:ed:d6:44:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Aug 23 10:00:41 2025 GMT
Not After : Aug 24 10:00:41 2025 GMT
Subject: CN=156c3559cbac359cbf1ae3c3da5263dc7061606e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:f1:92:31:56:ff:34:e7:b5:89:22:b5:77:
fe:17:dc:a2:d8:ac:08:b2:6f:a6:9a:f3:65:25:3c:
45:44:2d:9f:03:4a:90:51:e5:38:df:7f:61:aa:f6:
58:4b:6a:ce:8b:5e:d4:7d:09:6c:b4:7f:b6:f2:09:
71:d0:f6:c2:94:c9:ea:e2:5f:39:17:c6:32:8e:68:
42:f0:ea:a3:27:30:c8:a0:b6:8e:20:d7:41:36:32:
84:89:cf:45:1a:78:2e:01:fd:81:c0:77:64:67:3b:
38:e3:7d:2a:ad:0f:dc:0b:29:ba:39:cf:c3:b2:35:
41:1f:1f:e7:79:34:70:9d:9e:6b:62:be:f0:57:92:
fb:f8:67:ea:11:17:f3:fd:0f:3d:91:71:62:a4:db:
49:8e:93:9a:fe:97:46:75:a7:20:37:0e:3b:46:56:
83:7b:71:f0:ff:e0:91:11:29:0b:64:74:d5:c0:7d:
6f:42:61:0c:0f:a4:3c:3b:0c:24:4f:04:5d:a7:2b:
8a:fe:7e:f2:01:3a:ae:ce:9c:58:f9:00:4d:5d:9f:
0c:10:54:56:83:39:59:b2:82:d3:76:8d:a0:c8:b4:
a8:a9:1e:0f:d2:87:f7:ba:dd:56:02:b6:0b:91:0c:
40:dc:df:16:61:be:84:2b:75:93:18:72:2d:dc:3a:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6C:35:59:CB:AC:35:9C:BF:1A:E3:C3:DA:52:63:DC:70:61:60:6E
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:87:97:38:2b:d4:a1:d3:dd:7e:53:35:9b:c2:44:88:68:a0:
ab:14:71:d6:76:5b:80:94:21:35:05:60:7e:be:17:cd:87:c4:
c3:3c:29:95:63:98:24:5e:52:de:9d:ad:9c:5c:87:5c:c1:d7:
4c:a1:c1:ee:5c:1f:13:66:2f:23:c6:cd:c2:0e:dc:0f:ec:3c:
d5:8d:c8:28:85:03:b8:d6:c1:68:d7:cc:81:ed:38:23:68:57:
e1:34:6b:cf:20:bd:95:bb:7e:d0:91:98:e4:38:de:45:a7:d3:
03:e1:fb:1b:0b:02:eb:bb:62:bb:ac:49:1d:77:4c:0f:16:20:
fe:0d:5c:b0:48:77:1a:c7:49:c9:4f:89:a9:ed:2e:39:de:ba:
85:a3:95:48:9e:8b:6f:c5:d8:00:39:f9:f9:c5:ad:d1:ef:d0:
d4:92:38:e8:54:48:5d:df:21:b1:2c:e1:cc:50:af:c5:49:62:
45:09:85:9e:17:0e:fc:38:96:86:e9:1d:81:51:37:8e:c6:de:
15:a9:5f:8a:a5:1c:b7:d5:dd:2f:a3:bf:82:46:64:a2:da:b0:
b2:63:85:f6:70:c5:ab:67:c8:cf:ed:d6:b8:b1:4f:00:95:1b:
41:04:ca:e0:a8:3f:7f:9c:86:11:42:c2:8f:6c:cf:a0:ba:4d:
67:67:00:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:04 2025 by rpki-client