Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier: mLmpM4xyw2mxaFPWpu/Atju+IW+kCzr3SxT8XTp9V3w=
Subject key identifier: 3E:9A:8C:E1:15:8B:64:28:53:00:27:31:A0:F6:F5:D5:BC:1B:80:28
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 01988F59BD02DB70D334D6AD788E55AF8CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number: 07E0
Signing time: Sat 09 Aug 2025 15:01:19 +0000
Manifest this update: Sat 09 Aug 2025 15:01:19 +0000
Manifest next update: Sun 10 Aug 2025 15:01:19 +0000
Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: DgX7asD0TfyPeAcn3+qWO+oYZTCl5IgHlh+syqerpSE=)
2: 50bo-j7HR95aUFz7is7MBLLkMsc.roa (hash: aYgErZR0B+wLx1tDGd7DRHlBnCECIPjEQvva1IOrhbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:bd:02:db:70:d3:34:d6:ad:78:8e:55:af:8c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: Aug 9 15:01:19 2025 GMT
Not After : Aug 10 15:01:19 2025 GMT
Subject: CN=3e9a8ce1158b642853002731a0f6f5d5bc1b8028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:5d:a5:35:66:c6:72:40:85:ea:da:cd:2b:
a1:af:a8:e9:53:5c:81:17:d6:21:30:ff:4c:a7:f2:
29:a7:f3:d3:27:d1:0f:7a:b8:77:86:7c:d4:e8:75:
7c:4c:aa:35:fe:d0:da:0b:ad:81:11:f6:52:50:4e:
e1:21:f2:4d:5d:32:3f:b3:c1:f0:a5:9c:39:ad:07:
49:4e:b8:77:9d:4f:9e:b5:91:80:30:10:d4:f0:e8:
e7:62:e5:85:b4:c7:17:15:26:95:6a:08:53:40:78:
43:4d:85:c0:e1:6b:46:55:aa:7c:4c:7a:25:ad:e5:
4b:6c:6c:18:b3:10:69:db:69:e5:0c:82:8a:36:97:
49:ab:86:e3:e0:ab:29:c7:9a:1c:e6:f9:ea:74:fb:
e3:20:21:67:ef:cf:aa:1e:82:72:a8:d0:3a:6c:78:
60:2c:4b:f4:eb:34:99:14:c4:27:3d:32:97:60:b8:
83:3c:9a:0c:7e:a2:5f:c3:c0:d2:10:0c:07:eb:51:
cf:bb:a6:5b:e0:f2:b5:44:e1:e4:7d:a0:95:b4:66:
0a:41:f0:fc:f6:25:aa:f8:6d:91:1c:80:78:a2:ff:
99:f0:ce:4a:34:31:66:53:43:21:e3:32:5b:32:79:
53:de:5d:f7:28:69:3e:c4:77:8e:57:c3:db:74:ec:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9A:8C:E1:15:8B:64:28:53:00:27:31:A0:F6:F5:D5:BC:1B:80:28
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:45:3d:1d:9d:f4:38:06:7f:60:c6:60:48:12:1c:7c:ee:1a:
ef:0c:72:4b:af:60:25:8e:41:9d:35:2d:50:a6:9a:a7:b9:57:
cf:32:ad:67:f7:21:20:13:f7:cf:e9:3e:76:cf:b6:fc:2c:b4:
92:da:cd:a1:29:7e:40:ca:ba:46:2f:55:18:25:bd:c7:fe:c1:
e5:ad:b4:bd:df:f8:a6:b1:3b:86:f1:88:3c:c2:c2:e5:21:ca:
45:76:62:d3:29:29:d2:07:9f:ec:aa:c4:fc:08:98:74:03:8d:
bb:10:f3:03:5f:20:dc:f7:02:57:ee:70:9a:28:c4:4c:5b:c0:
65:9e:e3:fc:44:97:96:c3:71:85:64:dd:be:9b:d3:f8:65:5c:
3f:90:7b:56:ad:f3:fc:cd:d8:29:e7:bd:97:58:a5:9a:9c:9c:
fa:6d:a9:39:39:b4:17:84:d2:96:ce:07:51:1c:d8:bc:fd:1d:
d6:91:48:30:40:fb:3a:24:ea:5d:0c:60:04:1c:cd:52:dc:c2:
03:1a:60:2a:a1:c1:14:b0:fd:f4:0a:7f:87:8f:f4:45:06:53:
ad:9f:75:58:fb:d9:84:07:5b:4c:90:ca:e3:85:ad:a8:55:d2:
ae:a6:73:8f:92:f1:87:c2:7b:5c:60:da:8f:8e:b4:cb:18:b8:
43:a2:cd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:47:42 2025 by rpki-client