Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: 1Aj3G4z/XB7XmWRbibAQhNnmuARdEEBDTvPQEF5+YKA=
Subject key identifier: F3:55:8A:EE:DA:3E:2D:CD:37:B9:B2:3F:D0:46:C0:E1:38:92:1C:6E
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 01988A698C259053357F7F0DC633A0114883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 1411
Signing time: Fri 08 Aug 2025 16:00:29 +0000
Manifest this update: Fri 08 Aug 2025 16:00:29 +0000
Manifest next update: Sat 09 Aug 2025 16:00:29 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: J3Wl93IWflmlTtmtnGC7De83I4HKfBnHplgNbsWQhFw=)
2: wC7Ohmh2aveKOZ7_Cl4a1vLomLo.roa (hash: hPiN8yhRbkkwhBqX7IPJBoamojlDhfcUtcDIIbpri30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:8c:25:90:53:35:7f:7f:0d:c6:33:a0:11:48:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Aug 8 16:00:29 2025 GMT
Not After : Aug 9 16:00:29 2025 GMT
Subject: CN=f3558aeeda3e2dcd37b9b23fd046c0e138921c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:90:db:5c:fe:a1:17:15:49:30:12:92:55:72:
f8:b2:8d:63:08:27:b8:d7:96:67:ad:6e:18:46:54:
f6:59:74:bb:2f:5d:23:3e:bf:c9:ef:d1:af:db:8c:
19:96:b4:47:83:f6:2d:cb:69:4d:2f:31:af:76:d0:
a9:cb:4b:45:b8:3a:6c:55:ca:bd:13:90:e8:52:37:
97:bf:46:1a:7f:97:07:e0:7b:b9:20:ff:0a:75:f9:
6c:72:dc:90:a7:66:86:c3:8b:36:fc:c5:f0:95:d9:
6e:a5:4a:21:49:a4:54:e5:4e:6e:3d:84:dd:23:f7:
39:32:b1:ae:6a:b8:ba:d9:6b:fe:05:39:a6:a9:18:
c3:e0:96:c2:a9:c1:29:91:60:02:0b:18:2e:11:6f:
2a:8d:ee:88:ce:97:92:3c:d2:15:9e:64:77:9f:ad:
0f:30:95:82:84:b8:a5:cb:5c:8e:e0:78:71:e8:4c:
54:31:c4:2a:2a:34:45:98:58:e6:74:51:9a:1e:43:
9e:e6:1c:2b:ce:27:8d:15:c3:af:09:26:b1:3c:5f:
37:bf:76:e3:d7:9a:ea:56:f2:e0:13:1e:24:ef:ae:
aa:2b:dc:00:57:32:c6:68:45:39:f3:4c:2a:1a:59:
bc:3e:3b:e9:0c:d0:b7:bd:b7:9b:69:34:f7:5e:bf:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:8A:EE:DA:3E:2D:CD:37:B9:B2:3F:D0:46:C0:E1:38:92:1C:6E
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bb:b4:65:1c:7a:e6:42:10:86:14:2b:a3:e0:09:7d:c5:44:
ea:b1:00:93:95:d3:de:d5:55:c7:e0:f8:af:12:60:d8:dd:ec:
34:21:c0:da:82:23:33:53:08:2b:b9:58:37:f4:68:ca:5b:f0:
c1:d7:71:ef:ba:30:eb:32:69:48:51:fc:dc:ad:69:82:f8:d1:
56:d5:9d:ff:55:40:54:79:15:2b:60:e5:ee:99:a7:56:3e:df:
ee:36:a9:dd:46:02:69:f1:b7:31:3a:5f:31:29:68:d7:ca:ab:
2a:2e:d5:10:69:09:0b:34:bb:11:9a:f4:3b:0a:da:bf:5f:6a:
a1:20:e8:71:0f:d0:2f:9f:39:b5:ef:27:3e:86:e2:68:a7:f5:
59:c4:e5:b5:36:f6:6b:42:0f:dc:15:b4:5f:89:9e:e9:aa:9e:
54:97:a7:9f:5f:4d:b1:c9:ef:e7:b2:17:89:4d:f2:36:ef:35:
e0:f6:80:54:4a:99:a7:fa:84:24:68:c0:07:ce:7d:b0:01:c8:
1b:44:2c:43:3d:52:95:cf:ca:00:db:cf:18:a9:b8:46:7f:91:
d4:72:de:4c:dc:c0:51:eb:6b:45:1c:6f:45:21:a7:60:c9:07:
ab:00:cc:1f:f2:51:b8:d2:27:0d:68:91:d9:30:c3:72:fe:03:
4d:d3:6b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:14:36 2025 by rpki-client