Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
File: 0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json)
Hash identifier: egXwaR39EXinhWwIgN+Syb0Q/pMv+A4WdLASg3soxcM=
Subject key identifier: 9E:CD:71:FE:39:BF:88:4D:25:91:01:BD:A8:13:4C:86:94:86:0A:BA
Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Certificate serial: 01988C5841514A7E733DFE750BCD63C27E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
Manifest number: 03AC
Signing time: Sat 09 Aug 2025 01:00:50 +0000
Manifest this update: Sat 09 Aug 2025 01:00:50 +0000
Manifest next update: Sun 10 Aug 2025 01:00:50 +0000
Files and hashes: 1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: qQti7X7EVa0lUUbkrK+yUA9ptpO4Rh1cb4QRZ3SvZ4E=)
2: BtILLkhjQwKc-cBqSY27nFkJu8g.roa (hash: j7KTEXdiX1vJGa7Y4gsoM737n4p+uU95jozk1BXznCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:41:51:4a:7e:73:3d:fe:75:0b:cd:63:c2:7e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Validity
Not Before: Aug 9 01:00:50 2025 GMT
Not After : Aug 10 01:00:50 2025 GMT
Subject: CN=9ecd71fe39bf884d259101bda8134c8694860aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:62:5e:2f:b6:07:4e:20:06:d2:8d:e5:e7:
93:e5:b3:85:ac:15:23:5e:b9:be:8f:3e:0c:8b:ee:
f7:a1:b1:b9:ac:bf:db:89:7b:c8:54:cc:4d:c1:5b:
de:0c:ec:cc:d0:f0:93:03:88:99:9b:6c:c0:9b:90:
37:8f:52:a8:da:48:a0:8a:e0:70:ef:1d:0c:dc:3e:
9f:7a:02:9d:c3:5d:87:8f:c6:7d:6a:b8:f3:59:b9:
1c:c7:a5:1e:81:a4:00:0e:16:54:db:19:b7:e7:ca:
64:1e:90:77:78:21:22:a8:91:91:6a:25:70:a7:6d:
74:22:eb:ba:ba:8e:17:a7:26:62:a6:91:93:7c:b6:
c9:59:6f:8f:0d:03:47:e2:78:d9:84:7c:85:ce:86:
92:73:6f:32:08:19:d7:49:70:d5:a6:e1:ac:5f:22:
ec:a7:a6:90:10:dd:19:e8:ac:a8:5c:e7:0c:ba:33:
30:8e:ea:f6:73:eb:37:8f:d2:14:71:2b:82:36:46:
37:8a:f1:21:6a:d2:78:f3:13:e5:e1:92:17:47:41:
12:b4:95:01:65:e3:7b:44:1d:1b:1a:7a:24:58:80:
9d:79:cd:8e:fa:12:9d:b5:8d:0c:65:71:40:19:37:
b4:2b:b9:8b:54:31:e5:e4:da:49:ac:5d:af:8c:69:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CD:71:FE:39:BF:88:4D:25:91:01:BD:A8:13:4C:86:94:86:0A:BA
X509v3 Authority Key Identifier:
keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c8:6e:8d:83:ad:ef:bd:ca:76:63:cc:4f:9a:af:bb:6c:4c:
73:80:b5:c9:b1:2d:84:bb:79:fc:cc:f4:37:af:9d:b6:a9:8c:
1c:37:fc:47:43:ef:61:da:36:ed:15:8f:1c:8f:4e:46:e3:c0:
a5:bb:21:56:ce:c8:e4:13:ec:99:f0:09:b7:dd:2c:70:ac:38:
ad:14:5d:3c:f3:42:bb:e5:33:54:dc:1e:35:ba:67:19:27:34:
a8:3a:65:f2:57:0f:bd:91:c4:cb:c1:e9:d6:29:3d:28:23:6f:
fb:73:c3:9c:22:c9:e8:f7:79:bd:dc:b9:1f:1e:10:2d:b7:3c:
6f:c0:9b:75:9b:a8:42:10:2f:e7:ff:3b:e1:77:10:a6:e7:a2:
69:07:27:85:09:48:77:bc:7f:7a:7c:5b:21:7f:88:53:85:f5:
ed:ab:35:79:df:84:9f:e1:38:e8:24:bc:38:fd:5b:7d:f8:6e:
79:c5:2b:9a:5c:e6:84:48:a4:7f:c3:bb:3d:62:4f:65:6d:c4:
29:e9:2d:91:00:a9:cb:d2:6f:cb:3c:a0:ce:a0:cd:18:80:08:
42:ee:4a:24:ee:31:94:80:2f:01:05:6f:a0:6b:9b:5f:7b:61:
46:74:3e:9e:47:d2:e8:72:63:0a:01:58:8d:41:8b:77:8d:64:
55:d0:47:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:57:05 2025 by rpki-client