Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: /bw7HEBRN6kS5vt6G660ZacTlwTcPHG150G/NKKTdkk=
Subject key identifier: 03:EB:14:4F:55:F5:F5:49:40:B5:D1:6C:B3:2B:99:3D:54:EE:8F:B4
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 0198974A0B065D8136F0AEFD84FF4D338ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 13EE
Signing time: Mon 11 Aug 2025 04:01:08 +0000
Manifest this update: Mon 11 Aug 2025 04:01:08 +0000
Manifest next update: Tue 12 Aug 2025 04:01:08 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: ATbpgXwc5yyUEjMCbTiFD0OnmMFZ8ufvGMCymQknVp4=)
2: tE13-Z8TEXFI2N_Q3eslEjXwYJ4.roa (hash: 7axnrMAdFOe7EcvPvTZA4mgDnvv0sfD7w1s1AvMo3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:0b:06:5d:81:36:f0:ae:fd:84:ff:4d:33:8a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Aug 11 04:01:08 2025 GMT
Not After : Aug 12 04:01:08 2025 GMT
Subject: CN=03eb144f55f5f54940b5d16cb32b993d54ee8fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:d5:98:98:b7:63:7b:52:18:91:30:ef:20:
cc:83:64:49:14:40:15:4e:cd:ec:11:76:15:f1:ca:
9c:ca:1f:dd:a4:4d:0b:47:5e:21:9e:81:1e:d6:49:
d1:19:f6:b6:df:e1:24:db:ff:a4:de:42:e8:91:63:
8a:49:8e:db:7b:df:65:fe:7a:97:42:5f:f2:a6:d6:
4e:14:73:7b:2e:74:e8:44:d5:8e:80:25:81:df:d9:
e6:f9:d4:37:18:db:0d:48:ff:17:96:ea:6b:27:4e:
1a:16:1c:7b:0e:87:ca:e4:ec:63:a8:6b:e9:45:17:
5c:07:4f:93:e2:ee:73:bb:ac:9c:23:1e:21:ff:80:
98:52:88:b2:30:1c:79:85:7d:fa:bd:ae:0a:c3:98:
62:98:06:1b:d5:b6:c3:a2:e6:1b:49:fd:6f:d9:e3:
66:03:e5:8e:a0:14:36:c2:b4:f8:d9:4f:92:e4:52:
cf:2f:ea:bc:10:d4:0f:3e:97:06:32:80:9a:03:b3:
41:3c:7d:30:88:c6:76:94:be:72:6b:b0:88:fd:ab:
44:6d:74:4d:4c:f1:23:a8:6c:dd:5b:34:c5:18:1d:
d5:1c:c0:da:03:04:4b:c0:eb:4b:8e:ed:86:c6:a6:
da:dc:b2:91:03:b3:fa:da:cd:5e:45:d3:2d:1e:64:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EB:14:4F:55:F5:F5:49:40:B5:D1:6C:B3:2B:99:3D:54:EE:8F:B4
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:41:33:14:22:76:ff:97:76:dc:f5:71:3d:18:ae:63:38:d2:
10:46:58:14:ba:ec:53:d8:50:91:94:09:3b:75:e1:10:f5:b0:
70:7a:44:ad:d8:5b:29:5a:1d:18:5c:fb:83:79:45:2d:18:9b:
03:b6:fb:32:73:14:bd:e3:6c:46:3e:3f:e1:11:0e:77:be:3e:
23:64:8e:08:61:8e:59:2c:18:c6:a6:eb:c7:08:7e:80:19:16:
0f:6e:f3:e3:04:9b:90:bc:08:c2:b9:47:8b:6a:cb:48:23:fd:
4d:7a:7e:f6:a0:f3:c2:fc:87:16:b2:1e:25:3f:cf:6f:b1:f7:
fc:8f:dd:b4:9d:e3:69:24:80:c0:4a:ef:25:9c:1a:47:cb:e6:
23:6b:18:fc:ac:72:2b:80:89:65:4a:f8:53:06:9e:61:17:d8:
4e:d5:0d:09:54:3a:e1:c1:5d:f7:3d:8f:d6:e2:35:9d:28:de:
e3:6b:a3:1a:4e:b1:5e:93:69:53:53:c1:8c:6f:84:56:13:5f:
df:d9:bf:41:f4:6f:0f:6a:28:01:75:3b:28:06:66:c2:82:86:
8a:82:72:d5:42:12:14:9e:37:95:79:5b:ea:10:2d:0f:77:42:
d5:e8:cd:3b:e3:58:5a:78:44:bb:f6:2d:f5:79:5b:1e:d6:8b:
bf:89:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:32 2025 by rpki-client