Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
File: 0seIZkHuEBvHspX9hvGSP8KD89A.mft (raw, json)
Hash identifier: nEbVd0ZUMr/UkLJ7WgOnMJXjc3LOSes0Zd1Ri23IwO4=
Subject key identifier: 3E:D5:E1:33:09:3B:CD:D3:4E:9E:98:5D:2B:1F:98:22:ED:B0:4B:0B
Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Certificate issuer: /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Certificate serial: 019874500A111AEACB564FB726CEFC1CD5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
Manifest number: 095A
Signing time: Mon 04 Aug 2025 09:00:59 +0000
Manifest this update: Mon 04 Aug 2025 09:00:59 +0000
Manifest next update: Tue 05 Aug 2025 09:00:59 +0000
Files and hashes: 1: 0seIZkHuEBvHspX9hvGSP8KD89A.crl (hash: 7IVfBjEe7Z64ZmO2FBzwIhef4tPUc0hOnVtvPinKIQc=)
2: jQGsEYW9nQYMqDgRdjHs5yh307o.roa (hash: ZPgtlYS7YpDV/s/35ryF75mYWk1md56zE0UQWzxn7Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:0a:11:1a:ea:cb:56:4f:b7:26:ce:fc:1c:d5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Validity
Not Before: Aug 4 09:00:59 2025 GMT
Not After : Aug 5 09:00:59 2025 GMT
Subject: CN=3ed5e133093bcdd34e9e985d2b1f9822edb04b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:19:07:a9:d6:68:f8:7c:2b:4b:0c:25:34:
2b:21:08:b1:47:eb:73:95:ec:7c:14:77:50:54:29:
b6:59:1f:f7:a8:f0:af:e7:30:c4:7c:73:a1:02:d4:
2a:1e:8b:1a:f6:1f:1e:33:98:88:7a:84:a0:98:fe:
c4:62:2d:54:5e:e1:ac:2e:af:36:5d:ad:b4:5c:21:
57:6d:69:f0:df:77:86:bd:2f:a7:70:16:fa:20:d3:
42:38:38:71:1f:83:f2:ad:47:9c:74:60:b2:ad:05:
a3:ae:ca:1c:88:ff:21:8d:2a:28:4b:b7:d4:ed:57:
b7:e0:3e:29:b2:97:ac:77:2d:33:bb:d2:19:42:f5:
85:eb:0c:ec:c8:4e:ad:ce:55:5c:f1:bf:27:b8:67:
9e:20:a0:cd:51:34:17:38:fa:34:df:d5:f1:3c:1d:
41:34:f3:fa:ba:af:2e:43:31:ab:a3:65:a7:04:72:
69:19:19:90:77:93:62:e2:b2:6f:30:a4:db:a9:20:
3c:b2:e0:c1:d5:76:84:ad:ba:95:ce:2a:26:ef:a1:
72:56:1e:0b:fd:f0:05:ba:a1:ac:17:1b:15:32:a7:
f3:32:df:0a:ff:da:90:2d:d3:f9:e3:4e:13:fa:e4:
ad:e6:a7:7f:cb:1a:86:03:49:d3:9e:1b:c2:5d:be:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D5:E1:33:09:3B:CD:D3:4E:9E:98:5D:2B:1F:98:22:ED:B0:4B:0B
X509v3 Authority Key Identifier:
keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:51:35:6d:ef:ea:66:02:af:b2:d4:01:bd:f2:f1:c0:55:32:
ce:92:3b:d7:4e:db:75:52:20:a0:97:d8:49:eb:02:6d:fa:85:
2e:f9:70:40:e3:e2:a1:a4:f0:50:9e:42:15:ac:b6:dd:1e:47:
53:41:40:ca:a6:7b:09:3a:f6:87:fd:37:e0:88:9f:aa:75:7a:
02:8e:d8:55:e6:fe:97:ff:ab:b8:c8:85:04:22:72:4d:06:bb:
5f:39:70:5a:26:a5:32:ec:e0:37:37:94:b2:0d:63:8c:43:09:
d3:9e:9b:85:1c:07:14:7d:81:dd:c1:36:1e:de:46:5e:d2:87:
4e:61:aa:f6:ee:bf:aa:e7:96:5a:06:cb:33:f6:a9:6d:6d:fb:
66:7a:7b:cb:32:40:1a:02:78:0e:1b:bc:0f:2a:72:90:45:ca:
81:1c:e4:74:2b:3d:9c:56:1b:49:13:fb:ae:92:a0:3a:6c:e9:
28:d0:2c:d1:11:61:c6:b0:e4:da:98:cd:0a:d8:d6:7d:0d:8b:
d2:d1:3c:18:db:c3:9b:b2:57:65:80:5d:7f:60:8c:56:ec:86:
c1:ba:98:49:52:ad:41:78:d7:43:fa:02:fc:03:ea:30:f4:31:
a5:10:f2:06:03:ad:5b:6b:07:71:52:d4:78:f5:89:bf:8b:59:
37:c4:24:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:45 2025 by rpki-client