Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
File: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft (raw, json)
Hash identifier: RemJXo9IWlbV6mdcm//pSeTdNngf4TAYadKYvMXnt2Y=
Subject key identifier: 00:49:63:90:08:1E:3F:46:B2:0F:D4:75:A2:84:B8:80:E0:84:95:3F
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 0198966DB0BAF48DED36729D024B46D1DCD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
Manifest number: 1331
Signing time: Mon 11 Aug 2025 00:00:27 +0000
Manifest this update: Mon 11 Aug 2025 00:00:27 +0000
Manifest next update: Tue 12 Aug 2025 00:00:27 +0000
Files and hashes: 1: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl (hash: T+rB8WtnaAuReHk1g4+++FSoKDkyPMB88rLopebK+GA=)
2: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (hash: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=)
3: QaIK-rl-UO6iCpNPezV_L0xU2YU.roa (hash: xhqiUIeuQiCwC9en8JMr8aD8gps5b0AVPyZ6zETgu08=)
4: pv2iRcEvGYzf08DLjeydaW_V3IQ.roa (hash: o0ame8S62inoRctHTPezl4cm8Q5eMbsn9LNmNr1Kn64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:6d:b0:ba:f4:8d:ed:36:72:9d:02:4b:46:d1:dc:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: Aug 11 00:00:27 2025 GMT
Not After : Aug 12 00:00:27 2025 GMT
Subject: CN=00496390081e3f46b20fd475a284b880e084953f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5f:2f:e0:66:10:3a:de:c0:f0:6d:9c:de:2c:
59:95:a7:07:ad:06:b6:7f:e8:40:b6:90:0a:0f:14:
54:19:0d:c7:66:be:36:01:a8:28:f9:cf:85:95:fa:
a6:95:63:37:c5:07:c9:57:99:dc:0d:32:37:f3:c9:
ee:02:4d:fd:26:42:2c:ce:7e:23:63:fb:45:61:9e:
3a:ff:10:23:a0:b7:e9:dc:66:a6:17:cc:37:e9:d0:
f4:f1:f8:b0:2d:5c:ab:06:3a:71:06:0e:60:23:18:
9a:6a:7b:db:00:3d:00:4b:2d:8c:bf:b2:66:d3:8d:
80:40:2b:fb:c7:03:c5:f5:26:65:ee:27:d3:9b:57:
d7:cd:97:1e:65:04:43:12:23:aa:2f:e1:0f:3e:f3:
ea:65:ae:1a:69:c3:66:7c:65:40:7e:a3:64:37:01:
e4:ca:69:b3:88:75:e8:04:2f:43:5a:0a:89:3f:be:
b2:1e:d8:f7:15:97:66:ca:2d:28:df:dd:76:08:87:
87:2a:97:0a:36:fa:92:4a:ab:06:19:be:eb:2f:0f:
be:9f:46:fa:df:05:d7:de:07:53:9e:e4:f5:1d:67:
83:85:3d:6b:57:c4:7f:fa:43:b9:5a:d5:38:6a:b1:
fd:8c:c3:62:e7:14:ac:3f:b4:81:25:96:63:16:43:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:49:63:90:08:1E:3F:46:B2:0F:D4:75:A2:84:B8:80:E0:84:95:3F
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1f:25:fa:ee:65:9a:ad:db:45:ab:92:36:9c:82:0d:e3:b4:
c7:98:b1:23:87:8f:9d:8f:17:12:9b:31:ea:0b:f7:3c:b5:bb:
1c:7f:14:08:23:e4:eb:72:1c:a5:b5:96:ca:b3:6f:80:1f:c0:
43:5e:2e:8b:3d:5f:57:2f:27:fd:41:07:f5:7d:e7:cf:ea:46:
61:11:82:e8:cc:cf:b2:18:aa:98:01:a6:57:4f:25:3c:4f:ad:
00:2a:ad:21:41:db:d3:f6:7e:f4:17:0a:24:d5:07:7d:08:f8:
20:e9:57:ef:83:00:de:a7:fb:7b:bb:9e:e6:82:a9:df:4d:30:
2c:75:c0:85:fd:79:64:6b:1c:e0:d4:15:e2:ca:0b:9d:2d:3e:
65:84:47:da:ea:f8:b2:44:49:6e:74:12:b6:fe:54:cc:e9:a8:
91:32:41:f0:d5:44:bd:58:e3:0a:4b:09:c4:4b:e4:b0:ca:44:
4e:a2:d7:59:fc:32:7b:c6:07:43:34:35:07:f2:4e:4c:f4:b1:
55:33:a8:2b:cb:a1:30:b7:2a:10:15:c8:f7:e4:79:72:e2:be:
04:88:8a:dc:7a:46:7b:e8:58:15:94:c1:dc:f8:c2:05:a2:69:
a2:bd:a4:9a:4c:33:15:2a:cb:1d:bd:ad:6a:c8:91:08:57:98:
6c:1a:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:53:45 2025 by rpki-client