Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
File: oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft (raw, json)
Hash identifier: emlL+LUThhpx4tB0qEe0QgBwAZdTjOV2p9mnR2HlMMc=
Subject key identifier: 30:D0:34:34:A2:FA:D0:3A:10:DB:98:9E:9B:29:3A:95:9E:34:A1:5E
Authority key identifier: A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
Certificate issuer: /CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Certificate serial: 019891B5E05FB2E29396E7322E9ADD2E0A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
Manifest number: 046B
Signing time: Sun 10 Aug 2025 02:01:12 +0000
Manifest this update: Sun 10 Aug 2025 02:01:12 +0000
Manifest next update: Mon 11 Aug 2025 02:01:12 +0000
Files and hashes: 1: WacUruZTE83WEEePnyB3KKF0YFU.roa (hash: IGW0uLOK6yIPDXD8+jDEju++6EJZMklynz//i9x70Jo=)
2: oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl (hash: Hng/q5kz5fzlKKVeOv2KuvgbJ7/0SizCk7pT/o4zuWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:e0:5f:b2:e2:93:96:e7:32:2e:9a:dd:2e:0a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Validity
Not Before: Aug 10 02:01:12 2025 GMT
Not After : Aug 11 02:01:12 2025 GMT
Subject: CN=30d03434a2fad03a10db989e9b293a959e34a15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:56:25:d8:6e:6a:fd:99:16:18:b9:bb:d3:
87:89:05:c6:e5:68:88:0e:ba:88:c0:05:08:39:77:
9d:44:a6:56:7a:53:86:5e:3b:dc:ce:1e:b4:4b:37:
74:aa:65:bb:bd:20:25:1a:93:d4:a9:e4:ef:06:c6:
d0:56:12:4f:bb:4b:60:99:86:63:6a:8b:f2:60:8c:
50:f4:ef:c2:83:3c:cb:a4:b2:4f:1f:b7:11:0c:8a:
ee:c4:4d:30:0d:e7:ee:a9:2b:48:d4:01:5c:45:1c:
97:19:85:e1:d0:d1:2a:b7:50:34:aa:7f:2e:b9:46:
39:a0:9b:3f:d4:b5:d4:14:56:cb:1b:7c:98:ef:d3:
80:d0:69:11:ac:f9:99:90:06:b1:b5:01:60:43:41:
ae:86:c5:ec:98:21:ad:fc:42:d1:08:d2:7f:e8:6b:
ed:5c:fc:c3:c3:85:04:c8:ac:a3:87:ef:5a:50:ab:
7d:cb:7f:cd:89:fc:36:d6:63:84:41:9a:d5:d3:89:
ae:4e:dd:42:5d:48:33:b6:94:da:15:8e:18:a2:57:
ce:a7:1c:5f:64:ec:4c:0c:ed:37:9c:c9:aa:26:d3:
59:7d:39:09:d4:b0:0f:1b:a9:82:6b:ad:2a:25:af:
81:d5:36:2f:dd:19:41:f3:52:34:94:01:0d:f0:2c:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D0:34:34:A2:FA:D0:3A:10:DB:98:9E:9B:29:3A:95:9E:34:A1:5E
X509v3 Authority Key Identifier:
keyid:A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8c:a0:dc:2a:61:05:5d:40:1c:08:58:b1:5b:12:66:36:ea:
82:62:ad:47:7c:ef:bf:e2:d0:ed:c5:1a:43:83:cf:ae:ff:09:
43:bb:bf:8b:4b:84:72:b7:19:06:6e:6d:fc:ed:52:44:c9:3e:
0e:43:27:99:03:37:8b:9a:4e:a5:2e:ce:a4:d3:ac:0c:34:63:
e2:1c:ac:28:eb:aa:46:04:ed:db:c4:40:66:51:56:91:f7:e4:
f4:fc:a6:a2:a0:67:8a:44:17:e9:b6:2e:42:70:53:cd:ce:33:
b9:6a:55:9a:bb:09:6f:62:cf:22:dd:96:9b:c4:6c:51:72:55:
02:d4:84:de:59:fb:a9:80:c0:7b:40:3f:ff:75:23:1d:89:f4:
cf:8e:73:4b:df:e1:85:56:f9:b3:69:e5:ad:19:32:e6:c6:13:
8e:4a:43:2a:60:b4:b7:e1:98:09:0d:63:20:e4:c8:fe:01:cd:
9a:02:74:d9:84:d3:ca:32:cb:e7:d4:5b:84:9e:f5:7b:17:53:
21:80:e4:8c:13:b0:e5:e4:f1:a2:83:79:c0:aa:8c:ab:c7:69:
d3:57:a0:f2:64:8e:ba:55:d6:c1:21:35:77:6f:44:6c:5a:df:
45:cc:f8:ef:b3:21:46:2e:79:66:82:a3:3b:f9:f6:fe:30:73:
29:f1:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:35:05 2025 by rpki-client