Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier: 6hLhAawMnkHDtIOBHis+cJsYNrUPn4asLtAPlgtbm/o=
Subject key identifier: D4:9A:4B:CB:24:67:18:93:95:DE:6D:A8:7F:4A:9A:51:9F:0A:1D:8B
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 0198D4E0B86B50226A7658D5565494C2AF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:02:33 +0000
Manifest this update: Sat 23 Aug 2025 03:02:33 +0000
Manifest next update: Sun 24 Aug 2025 03:02:33 +0000
Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: DLUGVMsZtso1EjVaE7PhT/AxCiLz2JiMfcpa2DbJvHQ=)
2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=)
3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b8:6b:50:22:6a:76:58:d5:56:54:94:c2:af:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: Aug 23 03:02:33 2025 GMT
Not After : Aug 24 03:02:33 2025 GMT
Subject: CN=d49a4bcb2467189395de6da87f4a9a519f0a1d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:88:20:6f:21:f8:a7:b8:30:4b:63:bd:9d:
a0:d6:34:73:61:32:f7:54:04:6c:1d:d2:c3:56:6a:
f0:8a:7d:ea:ab:52:5d:8b:0e:db:9f:8e:4c:cc:22:
20:f5:65:c8:0e:cd:cb:0d:24:b5:9f:b9:e2:60:09:
42:a0:05:36:60:7a:2a:21:b2:d6:ff:b9:c8:ff:75:
35:54:80:f7:54:97:af:37:d1:c6:f0:14:6f:c1:a7:
e2:62:74:f5:b1:a5:1d:26:46:20:49:7e:18:fd:cc:
2b:db:90:23:49:0a:13:30:ef:6f:25:f3:5c:ac:a6:
04:49:e2:e6:a8:00:fe:9c:11:5e:ea:6f:66:03:13:
48:e5:28:12:f6:25:35:9b:86:fe:11:61:f2:8c:07:
5c:3b:b6:49:5f:ba:bf:06:1d:e3:ca:bd:da:ca:59:
9f:47:ba:61:4b:4a:64:66:74:0d:48:35:7b:2b:15:
70:b5:a0:47:fa:cc:44:23:53:55:e5:f9:76:9f:8c:
0e:8e:1b:5d:ba:21:dd:e7:04:75:2b:75:74:12:d4:
85:7e:a5:61:b8:6c:c0:27:07:1b:29:0e:3d:73:60:
d7:e2:65:1e:58:8d:b3:ce:b8:b2:10:1b:7f:a0:8d:
60:a3:3a:36:42:19:e0:7e:13:87:5a:9f:96:e5:f5:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9A:4B:CB:24:67:18:93:95:DE:6D:A8:7F:4A:9A:51:9F:0A:1D:8B
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6a:eb:0e:9e:0f:e6:56:4f:18:dc:f3:2a:35:48:1a:f8:ae:
e4:fb:7a:4c:fd:14:1e:94:7d:7d:df:2f:35:1c:23:94:ce:f7:
99:53:17:d3:91:ef:c4:dc:10:8a:8d:a1:d3:88:3d:a2:80:7e:
7b:72:fc:cd:ce:5a:a2:30:5e:c5:c1:cb:8f:7f:ac:d0:be:9b:
e8:43:73:d3:bc:50:73:2e:5f:9f:84:e0:72:1e:01:3d:88:ac:
d2:c9:35:2f:2c:9c:e3:82:14:bb:65:b8:44:41:0c:ed:cf:00:
b7:d6:5e:e6:ca:18:b8:84:3e:5b:8d:89:9a:b7:4a:cd:a2:11:
32:af:14:be:25:36:c9:b1:df:d2:41:58:f6:bb:99:69:4b:52:
7b:38:48:1d:96:08:e6:62:78:a7:c6:ae:bd:30:c2:53:5b:14:
5d:2c:88:6f:e3:35:14:da:d7:a2:8c:54:d6:7d:bb:8c:24:8c:
62:64:d3:1f:6f:1f:15:e0:db:8b:8a:50:33:0d:83:6d:ea:f6:
c7:d3:93:04:c4:ba:64:da:21:9f:8f:ff:09:58:13:a5:e4:57:
84:f4:c4:b9:8f:02:1a:1f:fb:f6:20:ce:88:23:82:9d:3f:f9:
bf:8e:0a:94:a2:29:02:5c:b1:f5:0a:a7:93:25:45:91:96:13:
51:41:d5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:50 2025 by rpki-client