Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: USEdSXU2In+89jn4VMSconr5ZmTUROnk6/hJQbR2IS4=
Subject key identifier: A5:4F:E2:CA:56:B4:15:05:EF:1A:B8:9D:8E:1C:55:19:B5:4B:C6:D7
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 019874505075482CEB0A03EFDB0F055EACE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 14AC
Signing time: Mon 04 Aug 2025 09:01:17 +0000
Manifest this update: Mon 04 Aug 2025 09:01:17 +0000
Manifest next update: Tue 05 Aug 2025 09:01:17 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: fRouLodsQsHoajBulLWYmIM2iuqQszVE4PD/Qaz43Ww=)
2: mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa (hash: omo8awS6hh3Xi+tQ6clfUM9W5KqXeL6pdkyIRs6JAvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:50:75:48:2c:eb:0a:03:ef:db:0f:05:5e:ac:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Aug 4 09:01:17 2025 GMT
Not After : Aug 5 09:01:17 2025 GMT
Subject: CN=a54fe2ca56b41505ef1ab89d8e1c5519b54bc6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:c8:02:be:50:02:0c:fb:c0:ca:36:17:1f:
82:02:74:b9:e6:72:e2:2d:b2:1b:a8:c6:fa:ca:25:
df:fe:55:e4:65:f5:b5:ee:33:d3:91:bb:ec:89:e9:
4b:f3:31:e8:89:69:db:7e:4e:92:24:58:bc:38:88:
83:4f:87:21:2f:a0:78:e8:39:ff:72:bd:3d:d2:98:
01:bb:bd:18:30:c6:20:5c:c3:9c:ab:a6:aa:e4:67:
03:8f:83:f5:f4:f3:74:9d:ea:37:13:bc:75:7c:b2:
4c:b5:2c:1d:53:09:59:76:e3:5d:1c:5f:e5:76:ed:
28:79:b3:42:eb:2d:d0:9e:95:80:bb:99:af:49:83:
69:d5:96:2c:47:1f:76:7c:bc:88:81:00:26:7d:18:
aa:fc:6f:72:40:db:da:7b:34:9c:33:a6:26:d0:ac:
12:c1:a4:02:92:a0:c1:74:98:c1:ce:a8:94:5d:a5:
c7:6e:4c:58:c8:91:ad:10:b8:17:8f:72:5d:08:89:
de:91:f4:e4:11:2b:82:7c:86:ad:64:58:40:3e:62:
8f:6b:47:0a:a7:34:63:4e:b2:78:52:fb:94:5f:cc:
71:99:36:10:15:22:6d:b2:9b:3d:3c:58:0a:dc:3e:
dd:29:7a:2f:ca:0c:ae:dc:17:07:4a:0d:5d:41:d8:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4F:E2:CA:56:B4:15:05:EF:1A:B8:9D:8E:1C:55:19:B5:4B:C6:D7
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7c:19:49:ba:4a:27:3b:56:ae:7b:71:c5:91:d0:24:27:0d:
40:fe:08:6c:df:9d:5c:df:d1:f1:7e:19:21:37:19:2d:20:6f:
64:a4:8f:92:7f:20:4f:89:11:3d:18:7d:6a:61:3d:62:ce:d6:
2b:ed:72:39:5f:6a:9f:f1:c2:28:a5:66:e3:f8:3e:65:f2:66:
49:4f:e0:47:04:d9:e8:c3:b2:e4:7a:45:1f:98:8f:e0:2f:82:
bc:47:cd:84:7a:7e:f3:b2:24:0d:9e:d6:80:e6:a8:3a:4a:1e:
08:36:f6:59:f9:99:ae:eb:68:b1:6f:d8:2a:fb:17:6d:4f:fa:
da:55:79:c2:d0:27:de:c9:db:85:5c:7f:5b:87:8f:50:d5:1c:
33:37:c4:61:33:2f:37:d6:bb:60:20:a5:13:da:b5:bb:5a:21:
c1:56:0e:61:9b:a8:5c:d1:46:ac:11:83:2d:25:bc:c2:ac:15:
88:43:32:0d:d1:9e:d2:03:93:bb:4a:53:3a:b3:bf:24:fc:66:
b1:1b:e8:51:79:96:34:60:76:41:56:45:87:1d:2b:a2:c8:68:
02:3c:9f:a8:25:3f:6b:dc:2b:66:0f:37:d2:b6:bf:70:f5:1f:
2a:74:69:7e:fa:8b:e9:c1:1c:35:8d:f7:85:31:95:17:02:c6:
d4:79:eb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:42:05 2025 by rpki-client