
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: sF7T+DXp5CteAYQp3SKJLUM63eLk3+lC+mabBVg8WKI=
Subject key identifier: 3F:6D:54:88:3F:73:44:4B:D3:38:D8:1C:2B:01:22:38:90:AB:8E:B9
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 01988B0E78E407C505747BE7E25286659126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 14FC
Signing time: Fri 08 Aug 2025 19:00:37 +0000
Manifest this update: Fri 08 Aug 2025 19:00:37 +0000
Manifest next update: Sat 09 Aug 2025 19:00:37 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: hdMK+FTdz4OP6kdDjcOHMWJcsTHG/JRw7R2qfv5RDE8=)
2: FIvNNxujkeosaQmK-8zL99U8I-8.roa (hash: xdptKNwYHkOXesPFH1LxyuhIbU4UE4ZRfmuf1MyhTcI=)
3: Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa (hash: KQQ09ojl8xnv8sB90M9HtEN2nEY3TEzVcMAwOp9asR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:78:e4:07:c5:05:74:7b:e7:e2:52:86:65:91:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Aug 8 19:00:37 2025 GMT
Not After : Aug 9 19:00:37 2025 GMT
Subject: CN=3f6d54883f73444bd338d81c2b01223890ab8eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:67:aa:c6:37:26:b4:18:0b:06:2a:e4:59:
e5:6a:3c:9d:22:2c:ea:8d:3b:82:f4:26:5a:1b:60:
1a:06:9f:70:e8:dd:58:01:c5:52:d0:31:c8:b3:36:
81:e1:1d:2e:e0:3f:98:2f:45:41:2c:64:a4:b6:ae:
8a:89:b9:d7:9f:d2:f6:d5:34:74:33:c6:ca:dc:8f:
f1:85:01:83:8e:a7:b7:6a:dc:c9:ab:b5:b4:bd:b7:
86:10:67:ca:8d:21:04:82:0d:46:78:a4:a3:87:0b:
34:d6:bd:07:88:c0:19:db:60:b2:9e:84:f1:26:05:
d6:0b:be:99:00:85:89:fd:39:e6:ad:54:35:48:9b:
25:1c:b3:42:93:85:cc:e2:11:8d:29:ee:cd:dd:66:
72:7b:88:8e:1c:d5:24:da:98:a9:30:d9:b3:8e:e6:
ee:2f:77:61:d3:22:81:60:b8:97:5f:9d:84:5e:c4:
ca:75:0c:18:09:5f:36:35:c8:ab:c5:3e:82:37:ac:
b7:82:2c:6d:2a:f5:39:0c:77:46:7d:8b:6c:57:d5:
d4:35:2b:39:18:27:35:3a:89:e4:7b:1d:23:b7:b1:
b0:fb:2b:f4:c4:59:d4:43:78:ef:25:3d:b9:62:6b:
b2:f2:e7:c4:b9:3a:ae:51:09:72:85:56:87:b0:b6:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6D:54:88:3F:73:44:4B:D3:38:D8:1C:2B:01:22:38:90:AB:8E:B9
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8b:f6:c8:29:dd:6a:36:f8:d4:a7:cb:e9:10:57:59:18:4e:
63:8e:7b:4a:96:5c:c3:13:ca:6f:2e:90:74:22:cf:5f:1c:d8:
b6:c2:7f:77:a0:be:59:27:ce:99:98:8f:c8:d2:39:45:fe:fc:
b4:c4:f4:c9:71:50:8e:92:41:8b:21:d5:ab:82:af:5a:00:4a:
f3:e5:9d:a2:2b:28:c4:8a:bf:7f:1e:65:34:b1:9e:fd:09:8b:
4b:d7:0a:60:48:0a:3e:6f:8a:b5:d2:30:d7:12:9e:3b:74:68:
e5:bb:73:43:e3:2a:0f:4e:73:fa:e3:f7:db:bc:04:01:6a:5b:
ce:a3:15:a5:27:89:9c:b7:93:09:88:ed:86:be:ed:5f:51:49:
25:33:ea:e4:7f:f5:c5:3a:d1:7c:9d:dc:6f:4a:34:c5:37:b8:
5b:12:25:65:f0:5f:e6:48:58:79:39:5d:cf:7c:f6:49:68:8a:
c2:40:67:85:0c:96:eb:e8:f8:64:b3:78:5d:00:90:50:0e:df:
51:8b:c6:67:2f:19:97:87:2e:37:c7:f7:3f:0b:b6:42:33:86:
04:54:81:c3:07:0b:ad:ed:f3:43:e1:32:55:12:c0:9c:51:cd:
82:93:5f:99:ac:a3:fd:49:ae:7b:46:80:b6:78:cd:c9:01:24:
5b:42:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:47 2025 by rpki-client