
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: YBxdQfS/OmzmdRnl0yg0gj0St5ur4vD6UZYqXHYV1wk=
Subject key identifier: 90:23:B6:91:7E:D2:21:E0:D2:BC:85:1A:F4:95:A0:42:17:27:FC:74
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 01987CAEC29F4296C7E8FDC510BEFB253966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 012C
Signing time: Wed 06 Aug 2025 00:01:24 +0000
Manifest this update: Wed 06 Aug 2025 00:01:24 +0000
Manifest next update: Thu 07 Aug 2025 00:01:24 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: oCqLCZ0KTgiXEm4CNB0YrryqTh2FkbqZVLL0oBflmec=)
2: Tdi0Hj6bQsB2NE33pvFHyR4UnH4.roa (hash: QY4nN2KRRzSRBGH5wO5xXZyBIH3qA69otudacqD4SWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:c2:9f:42:96:c7:e8:fd:c5:10:be:fb:25:39:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Aug 6 00:01:24 2025 GMT
Not After : Aug 7 00:01:24 2025 GMT
Subject: CN=9023b6917ed221e0d2bc851af495a0421727fc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:b2:9e:76:02:f3:41:53:f0:ea:0d:7e:89:
6b:1b:25:9c:10:e6:86:6f:3e:da:30:44:63:6f:c3:
cc:52:e9:b2:cf:75:ff:09:8a:ba:0e:8d:ce:00:76:
91:24:f3:9b:c7:ae:35:09:d6:92:f1:c2:61:e2:98:
e1:53:b4:9d:00:01:9e:1a:00:23:b0:bb:4c:94:5a:
f2:87:96:39:a7:67:f1:18:3b:65:f1:64:60:8a:1c:
35:61:10:0b:f5:fa:29:9f:d6:c2:81:23:16:da:82:
0c:bf:51:39:7a:af:e5:40:1d:ae:36:2a:38:45:ec:
cf:cd:15:46:f3:b8:f8:98:f2:34:1c:94:e1:d6:92:
60:ad:38:de:56:ad:ab:3a:57:c5:7e:1b:3a:8a:a5:
83:55:86:29:d5:44:9f:d5:fd:fc:e0:7c:a3:ec:a4:
77:3f:74:b0:eb:9a:6d:2e:41:43:12:10:14:99:ed:
56:50:d4:27:32:60:bb:d4:13:a7:b2:df:6d:68:18:
21:c7:d2:04:10:94:f3:68:71:90:08:4e:d1:25:f1:
c8:70:c0:a8:8e:48:46:54:ac:df:7d:ca:71:e1:6c:
94:ce:c8:82:68:b6:0e:38:18:cf:3c:da:da:1f:ce:
d3:a4:ad:38:fb:28:b7:a7:c0:2c:6b:6e:90:ee:5e:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:23:B6:91:7E:D2:21:E0:D2:BC:85:1A:F4:95:A0:42:17:27:FC:74
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c6:d8:a9:f4:e8:32:0a:1a:13:58:cf:ec:03:28:31:85:52:
2f:22:95:ec:e1:d1:b1:1c:03:88:b8:d6:24:4a:07:33:74:1b:
10:18:23:de:77:cd:80:7d:98:f4:07:50:8b:71:d5:01:b5:c9:
89:23:47:71:f5:65:26:06:51:78:22:71:70:fd:5e:0c:a5:10:
d3:d5:24:63:70:66:2a:7a:68:78:df:ce:60:bd:18:81:d9:66:
7e:bc:5a:b8:8f:f4:bb:09:62:82:60:44:56:17:26:98:74:f5:
6d:c3:fd:28:1d:87:8d:be:a6:96:13:77:2c:4e:91:98:66:b2:
59:84:66:42:8c:ee:6a:d9:69:3b:08:e3:2a:03:9d:68:24:f4:
79:9e:4c:a5:8d:46:49:57:23:f2:80:ef:9f:4a:2e:a9:cb:6d:
25:d8:78:6b:ab:bf:43:55:e4:89:61:11:97:f4:83:6c:ab:74:
ec:36:e5:8e:b9:a1:28:0a:e8:ad:96:81:0c:df:d5:40:4e:6c:
9d:86:d9:27:e2:ee:aa:73:c2:f9:94:84:13:f4:84:61:ae:8e:
04:98:e5:44:5b:bd:64:5e:a1:44:6b:cc:ac:dd:ee:ce:32:72:
e7:be:eb:80:cf:c2:d4:8c:94:1a:08:d0:c5:75:45:98:8b:ba:
d2:f6:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:19:48 2025 by rpki-client