Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
File: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft (raw, json)
Hash identifier: KNyWg1xd/akRYUdci7JVI1FzahTgkWRm5hvziMrHbuM=
Subject key identifier: 76:95:4E:11:5F:2D:FB:45:F9:44:F3:FC:AA:2B:79:A3:38:28:BD:1E
Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
Certificate issuer: /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Certificate serial: 01988356506F38ADD18BFAAC0CD14BB68F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 07:02:08 +0000
Manifest this update: Thu 07 Aug 2025 07:02:08 +0000
Manifest next update: Fri 08 Aug 2025 07:02:08 +0000
Files and hashes: 1: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl (hash: daB3Qk2TT3py1cNBmascRyoQNVMv/SzAIZ9eEg/k708=)
2: 4RiMrm8aaExTJ5NxhFCCQc-LTfQ.roa (hash: xT77mBm76fvxQ/4syBVoQsoquUiDMD7RefgDewlMNII=)
3: O84I_LAanBtJYvSSTZhnAsP3iQA.roa (hash: 6ivMoGITrJjRBuEurkZGNP+0M6whX3cvNI3NRDFJ7b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:50:6f:38:ad:d1:8b:fa:ac:0c:d1:4b:b6:8f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Validity
Not Before: Aug 7 07:02:08 2025 GMT
Not After : Aug 8 07:02:08 2025 GMT
Subject: CN=76954e115f2dfb45f944f3fcaa2b79a33828bd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:99:f8:93:ce:02:6d:12:0c:26:45:bc:86:
ef:dd:24:22:ad:25:63:c2:26:3e:dd:5b:e0:e3:a5:
20:ef:eb:69:14:d0:00:c4:db:e5:e6:3b:98:0b:e0:
5d:64:e9:3d:75:33:e7:3e:fd:6a:00:36:0a:4b:ae:
5d:82:a6:4c:88:e9:d2:07:79:18:6d:b5:b9:77:74:
c5:f0:a3:e3:9b:e8:54:39:3b:57:be:94:ec:33:47:
87:14:e4:ea:fb:67:ed:7a:e2:29:50:53:78:fe:5a:
f5:e5:70:36:9c:f0:c2:09:0e:bf:3f:28:54:ef:98:
c1:d8:15:ed:06:6f:34:79:0c:69:12:61:64:b7:9e:
45:a0:24:52:3e:49:2b:8d:db:f9:00:8e:7c:f6:e7:
df:af:55:db:00:e2:44:4d:26:d7:ab:3e:47:1b:b1:
73:8e:22:37:8c:9f:51:e6:b9:a2:87:d1:cf:52:46:
40:0b:05:03:d9:8d:0a:ff:49:ed:c7:04:1b:67:7d:
a3:62:17:d9:d3:93:39:1d:88:45:b1:65:85:17:39:
70:76:bb:61:69:e5:54:0c:20:80:f6:2b:68:5b:4e:
a8:40:c4:15:6d:10:20:69:76:c4:02:ba:3b:09:08:
db:8c:9f:d7:be:33:76:cc:78:94:e5:b0:b6:4d:d5:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:95:4E:11:5F:2D:FB:45:F9:44:F3:FC:AA:2B:79:A3:38:28:BD:1E
X509v3 Authority Key Identifier:
keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c8:94:63:ac:4f:1c:c1:5b:36:22:54:e8:9b:5c:8a:73:22:
96:2c:24:b1:73:4d:fc:cb:97:df:35:07:e5:de:ef:a1:de:79:
95:b9:15:f5:a5:36:1c:00:9c:2e:0e:ad:f2:1c:fc:20:f1:85:
40:66:6c:df:a6:30:e3:e2:79:1e:2e:d5:14:ed:25:60:17:b4:
fe:c5:7c:f4:1c:db:ed:d8:54:e7:08:50:79:fe:65:c5:68:08:
2f:25:b0:ba:3a:2e:4b:6d:31:31:fd:47:14:c7:e3:17:f9:8b:
d1:f3:98:01:bb:6d:a1:d2:58:f4:9b:b3:5e:4a:aa:95:cc:d7:
1a:32:dd:18:8c:17:04:bc:1b:cc:03:88:11:8e:9a:e3:b0:c7:
aa:4e:8c:9c:b2:f7:e4:36:13:17:39:19:1f:c8:20:81:f6:b4:
a6:e7:05:bd:98:c0:1d:73:d0:52:65:93:81:81:94:ec:5a:03:
dd:ad:36:b2:d4:c2:30:43:cb:c6:da:ad:25:ab:a0:59:d5:9f:
f6:06:54:a2:02:95:dd:0c:f4:3e:3c:de:9d:68:c7:c6:9f:72:
ec:74:b4:40:71:f0:77:20:bf:81:73:06:90:64:4d:b0:c6:49:
bc:a7:5b:ec:5b:1d:90:4f:3e:fc:de:5b:d5:86:0c:ad:f9:32:
e5:a1:2c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:23:40 2025 by rpki-client