Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: MERhQA0c66+jlRW9Yq+J5Sk5hs2vv3gMbMwaCu4zDws=
Subject key identifier: 84:50:64:52:27:E1:B6:17:C2:30:7F:F5:C1:0B:1E:5E:69:60:78:9E
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 01987418E7B10594B6966332E40AB50833A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 133D
Signing time: Mon 04 Aug 2025 08:00:45 +0000
Manifest this update: Mon 04 Aug 2025 08:00:45 +0000
Manifest next update: Tue 05 Aug 2025 08:00:45 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: CWyjdjyt9W+7DbcDU64CoJ+A4Ex+NX9FcsUeKrXmF6Q=)
2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=)
3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:e7:b1:05:94:b6:96:63:32:e4:0a:b5:08:33:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Aug 4 08:00:45 2025 GMT
Not After : Aug 5 08:00:45 2025 GMT
Subject: CN=8450645227e1b617c2307ff5c10b1e5e6960789e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:c3:4b:ab:60:2c:41:01:22:42:18:8f:c5:
ad:cd:35:57:42:0a:2b:cb:7a:22:3b:be:2b:0f:3b:
48:12:3c:3f:d9:17:65:45:0e:d0:7a:a8:6a:e4:34:
0e:54:6c:1b:c6:51:56:ec:2e:af:85:3f:73:5c:95:
de:ff:f1:31:5e:1d:31:ff:42:ac:91:eb:8e:6c:62:
06:f1:8b:57:e9:94:cb:a0:1b:37:be:5e:28:81:bb:
93:9a:f4:7f:26:0e:e2:c5:c6:de:26:18:f5:76:48:
09:2a:a1:46:89:a4:75:83:e9:8d:0c:b0:11:33:70:
a5:f5:e5:fc:99:28:ac:da:b3:40:f0:65:a5:91:0e:
90:47:93:15:7f:da:32:0d:98:8b:24:85:d1:1a:62:
4e:42:2b:a2:a4:1e:d3:83:57:7d:1c:3b:e8:b1:79:
83:6b:8b:fa:54:47:4c:51:a9:b1:fa:e8:e3:80:9d:
09:95:64:c4:bb:04:ad:aa:44:5d:d9:6b:5b:b5:46:
c2:4e:f2:76:36:aa:e1:23:e9:8c:d6:d3:b4:9f:2a:
4e:ba:57:0d:37:6d:9c:24:e8:56:e1:69:78:7c:50:
2e:f9:bf:e9:e2:ea:f8:d7:98:4b:e0:e1:7d:55:f5:
df:f2:58:54:21:07:ba:53:52:a6:fb:24:16:97:ee:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:64:52:27:E1:B6:17:C2:30:7F:F5:C1:0B:1E:5E:69:60:78:9E
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:21:97:10:58:00:02:f4:ac:f0:e7:2d:b8:a1:b0:5a:d8:b6:
29:e2:cb:0b:f9:2b:d9:0d:73:53:f7:c8:40:9b:6c:24:59:17:
c9:b1:d2:3f:63:87:ab:00:f9:3d:9a:cd:c9:2a:83:9a:e3:22:
d9:a5:57:1e:79:1d:d9:6b:2a:0e:8d:46:8f:7e:f2:09:19:e1:
1b:83:30:5f:aa:85:ad:5d:f1:b4:85:c8:37:68:2a:5b:64:aa:
8b:90:83:b8:78:49:c5:d9:5d:b7:6a:5e:df:ec:e2:83:50:45:
e0:67:a4:d7:77:f3:c0:fe:23:37:ec:1c:a2:56:6f:a8:27:96:
ee:4f:74:54:e8:8d:68:15:a4:38:a2:f0:c1:79:5f:6a:00:f8:
38:fb:be:18:f8:e5:5b:82:87:a0:de:db:93:37:be:84:18:d4:
83:63:a8:7c:87:08:1c:95:06:52:98:1c:07:2c:81:65:90:d5:
0b:41:38:41:cb:67:89:72:e9:4d:22:dc:86:e9:71:3c:a4:32:
6d:b3:12:c3:e7:bb:5c:25:42:9a:30:8a:6e:68:1a:de:8c:23:
a6:14:a8:b6:db:4a:4d:ba:a9:cb:92:52:25:53:ec:c3:02:92:
8b:2c:41:4a:7e:e3:ef:ec:2b:95:99:0e:a3:f7:3a:c3:3f:f0:
80:4f:ed:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:19 2025 by rpki-client