Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier: sJGWmFWKOHIfE44ZvHTFnfbhfMuTjSLilN8rwO+BGEY=
Subject key identifier: 18:A8:B0:65:A0:9E:B5:26:5A:64:2F:A7:12:1F:92:C2:43:82:27:7F
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 0198D583A9CE4E46D16244B90E14C0996BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number: 0A4E
Signing time: Sat 23 Aug 2025 06:00:32 +0000
Manifest this update: Sat 23 Aug 2025 06:00:32 +0000
Manifest next update: Sun 24 Aug 2025 06:00:32 +0000
Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: ZbwPLleCuxqpHSFkFmRXleL4k0ONcDLBonKiy5gsR44=)
2: sW1FbXnmMLs31PJCKJCZsxmeKF0.roa (hash: gPwTFuA8vjPg7PCIOrBM62Yfp57prUWNjPVJTmJKnuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a9:ce:4e:46:d1:62:44:b9:0e:14:c0:99:6b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Aug 23 06:00:32 2025 GMT
Not After : Aug 24 06:00:32 2025 GMT
Subject: CN=18a8b065a09eb5265a642fa7121f92c24382277f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:37:97:12:1b:51:bc:19:ba:fa:d7:5e:53:f6:
78:33:a7:52:45:73:00:70:90:64:22:2e:65:aa:4d:
31:ee:2e:72:93:73:b3:28:7d:ac:1d:6d:24:4e:58:
bd:0e:24:f0:00:34:76:f6:5b:49:f1:af:61:df:f3:
34:2a:1f:0f:65:82:0a:f6:1b:ae:39:6c:6e:9a:28:
9a:0c:72:d5:06:8e:58:70:ae:3a:13:47:20:89:ee:
b0:46:9e:8f:dc:f2:35:80:24:5c:40:9e:a5:0c:20:
9d:06:fc:f4:72:2e:c4:fb:21:d6:76:bc:cb:2e:a6:
f3:85:c7:36:d0:b9:90:5a:a0:fd:07:84:11:90:93:
c3:36:80:42:98:cb:1b:91:d2:d6:e4:f9:67:ed:fb:
b1:e1:ae:dc:2c:c3:79:d8:30:f6:6e:42:2a:e7:da:
2c:be:c4:a9:63:2f:4b:8c:70:dc:bf:c6:78:89:a6:
75:6d:bc:ab:06:3c:bc:b9:e3:1b:c5:2c:13:bd:12:
6f:6d:50:b1:bc:4e:1a:82:8d:d0:21:7a:c7:7c:f2:
30:2a:07:b4:36:11:4c:a1:8d:9d:b4:d2:c8:81:2c:
4f:a6:d1:79:81:d0:72:4c:7e:c9:d0:c1:3b:8d:ff:
51:5e:d7:d2:aa:e0:da:af:02:3a:53:e4:c2:df:99:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A8:B0:65:A0:9E:B5:26:5A:64:2F:A7:12:1F:92:C2:43:82:27:7F
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:05:7c:01:28:76:f2:01:a3:f5:a4:75:9d:ae:78:a7:2e:2d:
d3:de:6c:b2:3f:5b:4d:92:72:5f:1d:33:01:e4:23:67:da:83:
f5:98:81:4a:4a:a6:2b:39:25:65:ad:34:3a:18:d5:cc:50:4b:
fd:1d:42:83:06:07:49:d9:fd:06:50:1c:47:4f:88:a9:44:72:
38:59:c8:9c:fb:4f:5c:ab:65:be:aa:2c:38:cc:1f:91:ec:5e:
24:f8:c8:53:9d:9a:ef:41:12:d7:57:38:00:01:e1:9c:1b:eb:
d6:4b:fc:19:e2:f2:9f:63:8a:66:15:ce:de:b9:47:f8:84:7d:
e8:1f:0b:c2:46:31:2e:d1:5b:96:f1:fb:6b:79:c7:ce:23:fa:
a5:ab:6c:c2:1e:2e:69:ed:72:2a:b2:d3:99:7f:ac:8a:45:07:
bf:09:31:2a:ea:91:64:d8:c3:b8:31:d8:ef:0b:ae:27:44:b0:
f9:2f:7b:64:17:d5:52:61:68:4f:ed:1c:89:f4:6f:86:88:6a:
82:11:3d:27:e6:41:53:8b:13:4b:af:db:eb:f1:34:b0:0d:b5:
ab:98:37:a1:64:fd:96:75:50:56:fd:bf:20:ce:36:5a:1f:86:
3e:5e:5a:05:a9:68:45:53:44:e7:6b:14:9b:44:bc:42:af:9f:
12:2a:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:13 2025 by rpki-client