Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
File: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft (raw, json)
Hash identifier: dbD9bV+cTUsAC8+Wzl+AeUj77M1rBy4FUZrhWOF8tV8=
Subject key identifier: 73:B3:3E:F3:95:C4:42:F4:DB:8B:55:6E:50:71:ED:4B:77:A2:B8:C5
Authority key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
Certificate issuer: /CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Certificate serial: 01987418EF4E46B75221B7A439ADE3FA7613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
Manifest number: 135B
Signing time: Mon 04 Aug 2025 08:00:47 +0000
Manifest this update: Mon 04 Aug 2025 08:00:47 +0000
Manifest next update: Tue 05 Aug 2025 08:00:47 +0000
Files and hashes: 1: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl (hash: ua4pL7h3DfEZrcitAa3+AMmB1f2lf6ABtzpTa2bIRTM=)
2: 5tz1cuLC3Spal7LSIEjI-Qlcl6U.roa (hash: XSoR4/ODhnGd0USG7NRxHx6V9kNwJuT3OUfa19EcNCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:ef:4e:46:b7:52:21:b7:a4:39:ad:e3:fa:76:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Validity
Not Before: Aug 4 08:00:47 2025 GMT
Not After : Aug 5 08:00:47 2025 GMT
Subject: CN=73b33ef395c442f4db8b556e5071ed4b77a2b8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:d1:f4:2f:07:5e:15:53:e2:7c:56:46:3f:
3b:ba:00:59:0b:99:1e:e0:01:18:d4:64:7d:d8:15:
65:2c:34:fc:61:97:25:44:12:9f:02:c8:6b:e5:43:
c5:56:89:c2:d6:27:65:fa:ff:cc:78:45:7c:dd:03:
99:ed:6f:6c:4f:a0:75:d8:df:1b:99:f3:38:18:b0:
ac:9b:f6:61:65:e6:fa:92:77:04:92:72:d4:2d:c0:
6a:c5:7e:af:07:a3:fe:c4:10:6f:b8:2a:d5:bb:da:
47:84:71:eb:ac:3d:72:75:fc:6d:67:f5:81:b9:e8:
77:2e:69:d1:25:d5:86:9a:be:22:02:90:c1:05:21:
a4:05:77:36:7b:40:53:8c:1e:3a:33:df:7c:31:1a:
42:15:4f:f7:82:b8:18:d3:23:bb:48:68:18:0c:9c:
39:0b:e4:c5:13:b1:17:eb:01:1d:6d:f6:2e:4f:00:
27:0d:80:f6:55:b0:bc:c7:82:59:25:ef:f2:af:61:
0d:12:b3:01:c0:01:7f:05:45:c5:8e:07:39:2a:ef:
74:4e:b1:f5:e9:16:b8:57:86:47:9b:97:dd:88:c2:
2b:c1:33:9f:15:70:62:84:ae:f6:ae:d5:a1:a3:84:
e4:0e:5d:9a:ed:6e:f4:f2:bb:52:27:a7:dc:5e:66:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:3E:F3:95:C4:42:F4:DB:8B:55:6E:50:71:ED:4B:77:A2:B8:C5
X509v3 Authority Key Identifier:
keyid:D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:19:70:8c:82:fb:ee:05:78:be:c7:07:75:f1:c4:69:07:89:
c9:8a:1d:dc:ee:e4:8f:bf:de:dc:a2:2a:26:b3:40:0f:08:42:
91:09:03:a8:1b:87:14:a1:ff:4d:36:26:89:8d:a4:41:07:8a:
56:8d:8e:e5:21:10:dd:03:b7:23:ea:78:dd:ff:3d:65:28:90:
fa:b4:0c:69:07:40:5c:3a:4d:19:5c:01:db:bf:1e:53:1a:d4:
fb:bd:b1:62:c3:ee:18:c8:ee:fb:59:df:c2:76:c3:47:18:fe:
09:21:4a:f2:0f:8f:63:02:3b:c3:81:f9:9a:e1:c1:3d:94:bb:
13:c3:8a:69:ba:c9:53:1f:84:29:89:9c:e2:57:53:5c:4e:de:
22:ed:37:18:d8:11:75:95:aa:03:ae:72:c7:ea:44:f0:92:d9:
b6:eb:32:bf:df:05:43:09:13:e9:7b:c7:24:f6:52:ea:17:56:
3e:0c:06:47:1f:af:a6:04:f5:8e:18:9a:c5:a9:db:56:1e:27:
38:58:d8:6f:c3:ea:00:d7:08:5e:96:a1:47:e3:9d:40:2d:0e:
ce:cd:3c:29:33:a1:c5:b9:e0:28:f0:87:26:65:21:92:04:d3:
eb:8c:ba:dc:06:22:42:8c:d7:14:db:b0:8d:c1:9f:c1:b5:9d:
da:52:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:07 2025 by rpki-client