
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: vXBc2waTbGK1EoDP9thieEoHix8FW0SjRBaW/P3gaJ0=
Subject key identifier: E1:24:AD:EC:45:23:45:6F:64:3F:D9:AB:13:65:31:B4:8A:65:8C:E3
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 019894EDACBDCDAA09F09DCA28560849029C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 091A
Signing time: Sun 10 Aug 2025 17:01:00 +0000
Manifest this update: Sun 10 Aug 2025 17:01:00 +0000
Manifest next update: Mon 11 Aug 2025 17:01:00 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: UbgC/2ozxgVsVzZGOadaeTP4iUmt8h/iV8lRVD4mpXs=)
2: 3t2rbtcOEw5sD7uRjCXTPR4SMU8.roa (hash: oLSU3YNaGRS7ljQgete6uiDJRLwSKNoaWdOvOIOXxdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:ac:bd:cd:aa:09:f0:9d:ca:28:56:08:49:02:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Aug 10 17:01:00 2025 GMT
Not After : Aug 11 17:01:00 2025 GMT
Subject: CN=e124adec4523456f643fd9ab136531b48a658ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:51:64:6a:50:3d:dc:21:4e:af:72:47:8e:f1:
72:c6:43:58:00:9e:cb:45:13:00:fa:3b:09:63:4f:
5d:c3:a3:ef:4a:2e:c0:21:81:d8:bb:08:5b:7a:9b:
1d:1d:0c:5b:d3:c2:62:ea:d9:f3:8c:4e:1a:fb:fa:
a6:b5:12:1e:98:38:dc:69:ac:e5:9c:cb:3f:e8:6b:
fe:8b:10:c0:31:51:c1:ef:f0:99:1d:11:bc:e9:c1:
a5:82:db:b7:7f:4e:d5:1a:86:0b:08:28:17:1a:95:
19:d6:02:e3:16:43:4b:c0:e6:61:88:16:4d:2e:3e:
cd:5a:af:81:c6:3a:81:c9:b8:cd:f0:dc:71:7e:b6:
df:c6:d9:90:b4:b5:ea:85:86:1c:d0:1a:b6:73:6a:
f3:83:0b:31:45:08:13:c0:f7:67:48:9c:6a:29:ff:
ef:e2:08:b0:7b:8d:26:d6:57:1a:7a:bb:21:39:c3:
29:4c:e7:79:d7:4e:36:e9:a5:5a:0b:76:bd:2d:5c:
f0:7b:b3:12:e6:43:07:50:1b:92:76:ad:09:c5:ec:
1d:d5:4c:4e:24:58:c8:97:3e:ab:27:b4:b8:88:03:
2c:c2:42:48:32:b1:00:3f:18:31:a5:04:dd:20:7d:
5c:72:09:c5:59:f8:0a:c2:63:50:85:61:ef:af:f8:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:AD:EC:45:23:45:6F:64:3F:D9:AB:13:65:31:B4:8A:65:8C:E3
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1a:ed:fa:34:2e:57:31:2f:40:6a:09:f2:28:6f:8d:2d:89:
01:b7:37:df:e5:56:8d:78:41:46:05:11:73:e0:ac:4c:d9:85:
ea:ba:7c:4b:20:b3:d0:7a:c3:ef:31:f9:d8:4b:da:b6:3f:65:
2f:7d:4b:70:7d:23:09:36:89:ff:77:6a:a2:28:f5:7a:a3:e8:
46:1b:2b:fb:45:d0:b7:31:3a:57:6c:6e:84:50:9f:99:89:a2:
c8:81:d7:66:65:a7:6c:2e:4f:5b:e8:9a:84:86:ca:7a:34:a3:
9d:79:77:44:e7:cd:18:42:87:cb:59:76:24:eb:a4:f6:7e:34:
6f:3b:29:2b:ae:66:b1:68:fb:e6:ab:12:94:73:ad:30:03:34:
ee:17:32:15:1b:7c:08:da:b7:02:82:ab:2e:ea:8c:1b:bf:e0:
65:99:dd:2c:f2:a9:97:af:a2:4b:ba:2d:fb:f4:26:3b:e0:7c:
d4:ce:dd:5d:24:f7:c6:08:76:f5:f9:cd:9a:9b:7e:f7:84:ed:
8d:ee:29:c0:87:8a:22:75:4c:3d:73:97:52:93:e0:51:b5:6e:
68:77:97:d6:03:47:b7:d2:c0:d1:a9:86:a7:c0:ba:a4:52:2b:
45:4d:8b:ae:00:13:f0:88:3c:bb:54:68:de:2c:93:e0:2e:98:
a8:20:e9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:32 2025 by rpki-client