
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
File: 0PFLigjLX4BX1IsD5T9Fi44f7tY.mft (raw, json)
Hash identifier: fRVJZxEMbDnfrbvDdtPbaKEx6Izzk1C0b5FpQ/rmm0M=
Subject key identifier: 4A:13:F7:4C:0C:58:70:BD:C0:2F:92:01:7D:27:65:E3:94:DD:12:6B
Authority key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
Certificate issuer: /CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Certificate serial: 01989524C33C3EF72589C16C6879EE9CF3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
Manifest number: 0276
Signing time: Sun 10 Aug 2025 18:01:11 +0000
Manifest this update: Sun 10 Aug 2025 18:01:11 +0000
Manifest next update: Mon 11 Aug 2025 18:01:11 +0000
Files and hashes: 1: 0PFLigjLX4BX1IsD5T9Fi44f7tY.crl (hash: y0bJHlmsh5KiT0hlbrN23LNZ9FSfdKsOfKpydJUK2C4=)
2: 5XHmlHMatoj7HuqzW-xKZFCBoCk.roa (hash: 2LwcEFXQBzd4wv+NbYjPLMlRT/J2wftX73OmJ3FhceM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:c3:3c:3e:f7:25:89:c1:6c:68:79:ee:9c:f3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Validity
Not Before: Aug 10 18:01:11 2025 GMT
Not After : Aug 11 18:01:11 2025 GMT
Subject: CN=4a13f74c0c5870bdc02f92017d2765e394dd126b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:be:ae:c9:5b:71:4c:20:12:da:ef:e0:9c:
d3:81:a1:73:4c:bd:1d:7e:4a:07:dd:c4:05:48:42:
e3:e5:73:bb:7d:c4:1b:1c:cb:3f:3f:fa:ce:2c:19:
44:4a:a2:91:50:fa:8f:b5:ea:f0:b4:7c:f5:91:b8:
d9:69:f9:f0:bc:f4:86:6a:47:72:ec:f5:21:57:fc:
a1:43:49:0c:c8:b2:af:27:08:e3:1d:90:0b:38:47:
0f:fe:f4:8e:a7:6c:e1:f6:9b:47:13:fe:21:4c:56:
bd:3f:5a:8d:3c:e0:6f:62:9d:95:59:7b:b5:f0:53:
06:be:be:6b:8b:9a:de:25:dc:12:7e:5f:b8:63:c6:
89:97:99:d8:dc:ad:73:4b:08:97:36:07:b9:2d:7d:
e8:5e:0c:5d:a7:06:f5:ac:26:dd:16:5e:ae:6b:7a:
73:ff:b2:e0:b0:71:aa:4c:54:77:23:05:c4:ae:54:
7c:b8:84:6c:c8:95:fc:5b:84:38:74:1c:3f:27:5e:
39:a0:3f:75:12:c6:b8:a7:18:74:e8:83:85:ad:d3:
75:e4:31:a4:1c:f9:02:a4:b5:b7:37:6b:95:74:f0:
c8:7b:c3:65:f3:17:ed:95:79:0b:9f:54:8f:96:07:
c3:70:ad:e0:53:b4:ba:a9:79:1f:2f:c7:40:de:c9:
27:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:F7:4C:0C:58:70:BD:C0:2F:92:01:7D:27:65:E3:94:DD:12:6B
X509v3 Authority Key Identifier:
keyid:D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:98:72:09:28:9f:ab:f6:13:f1:9f:da:8c:d5:1a:97:8f:11:
4e:41:a6:16:f0:75:b9:9d:c9:5d:d7:f3:dc:40:7f:08:fc:54:
46:ab:ff:7e:05:bb:06:c2:ed:be:4e:b1:c1:29:d9:a3:69:e8:
00:01:43:e4:dc:2d:c9:4d:82:d9:54:89:d0:5e:83:29:f3:7b:
7e:2e:6e:cc:be:2e:5c:ef:bb:03:b8:1d:ed:f3:39:27:47:23:
14:e2:98:44:05:a5:90:00:c0:b2:bd:fc:ba:bb:c5:13:51:92:
e7:40:ef:8e:b4:cb:fe:83:0e:29:9d:e1:bd:b1:c0:6f:7a:15:
00:f4:e3:85:88:7a:6b:e0:59:98:85:7f:ab:c4:b2:61:12:64:
62:2b:70:66:80:3a:02:58:f3:28:58:1d:bd:b4:84:f6:a6:ec:
dd:f1:7d:64:0c:63:e2:45:cf:f5:ee:af:4c:8b:87:97:56:6e:
30:9f:0d:bf:82:4f:54:ee:10:1a:da:47:8f:04:ce:cb:c9:10:
97:d2:04:1a:2e:fb:1d:18:77:cf:33:49:19:86:4f:b9:e9:85:
15:7f:85:7d:90:fe:20:76:a3:e8:35:0c:b1:0a:e4:ae:bc:1c:
cc:30:fc:3d:55:05:e8:37:c7:3c:9c:4f:cc:9e:56:1f:00:0c:
9f:d0:bc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:18 2025 by rpki-client