Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: WK7hPdAyFh+WkQisYXpD9adWFgqQIlVFIygkDLphuDs=
Subject key identifier: BE:49:60:38:B6:09:40:C1:26:4C:C1:65:F2:56:F1:30:F4:49:B4:CC
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 019872D01C853CBFB7AEA5C6BB0E816B3E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 096F
Signing time: Mon 04 Aug 2025 02:01:37 +0000
Manifest this update: Mon 04 Aug 2025 02:01:37 +0000
Manifest next update: Tue 05 Aug 2025 02:01:37 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: og23rqNCVgrTXDIDmX+88AeW1SqodDmzFbC9Lj+1IHk=)
2: 8LyQu6M29k1339l_CEp2NXxrXCM.roa (hash: sefzNsDqr2VAFaOlXDNefpIYjAbww43X8pxj4t3RtgQ=)
3: TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa (hash: lpAiG+1V0l8l8KBHMEE2mx4+9kmKvUMXZxyrbPf7z7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:1c:85:3c:bf:b7:ae:a5:c6:bb:0e:81:6b:3e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Aug 4 02:01:37 2025 GMT
Not After : Aug 5 02:01:37 2025 GMT
Subject: CN=be496038b60940c1264cc165f256f130f449b4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:39:d0:eb:fb:44:c6:54:76:af:17:94:79:
49:1c:21:9e:bc:b2:3b:17:04:e6:f7:4e:ae:88:d4:
38:01:82:bd:f9:09:8a:53:69:a5:6c:9e:c5:69:f2:
13:2e:d0:0c:32:51:31:d6:5a:1f:21:f7:4a:bb:b8:
b8:87:b0:f8:81:88:7e:3b:82:0d:1f:e3:c3:3d:92:
67:08:8c:5f:1b:0c:a4:75:0d:fd:e3:32:eb:69:c2:
cf:60:6c:f8:9e:ad:a6:0d:a2:1d:de:a6:08:c0:f2:
c5:b4:4e:f3:a3:39:9c:0f:30:82:2b:d8:b9:47:0b:
6d:5c:95:7b:2d:3e:ba:8f:ec:68:2e:bc:5f:5a:42:
be:91:a5:a8:48:e4:7c:be:11:53:85:01:6c:15:6d:
24:1f:c2:ab:36:46:ec:cc:fa:bc:55:24:31:34:04:
00:05:10:09:76:fe:a8:07:46:a7:3d:1f:b6:83:3e:
90:88:f7:c5:fb:87:af:03:85:d1:24:f1:1d:a8:83:
c3:cc:bd:88:4f:a3:ff:29:19:e9:e3:92:90:b6:63:
e5:ad:8c:38:16:2e:35:41:ba:44:ad:74:56:59:2b:
d6:cd:c7:5f:86:2a:00:94:f7:5f:31:9b:8e:1d:8f:
92:1c:62:81:fd:86:4d:34:3b:60:5b:54:10:02:a5:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:49:60:38:B6:09:40:C1:26:4C:C1:65:F2:56:F1:30:F4:49:B4:CC
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6c:7c:f5:95:b9:00:2a:3d:23:59:a0:66:70:ee:30:ef:4d:
ca:ad:65:a3:f6:86:1a:d2:f6:4a:9d:b8:74:29:d5:b5:1b:45:
92:e1:81:31:49:32:aa:9e:ff:74:b0:15:ea:28:1b:b1:8c:29:
5d:a2:31:a9:67:ac:f4:9a:66:4d:a1:f3:2f:30:48:13:8c:37:
98:92:19:08:e9:82:90:45:78:5d:a1:c9:f7:9f:f9:ab:dd:c2:
f2:de:b0:52:a0:e8:08:ae:bb:3c:53:d2:79:fd:09:ff:c0:0b:
d7:9a:3b:71:bf:25:3b:3a:b9:e5:76:ac:67:50:f1:67:48:85:
02:2b:dc:52:89:92:38:3b:11:e4:36:a9:74:a1:c1:84:26:c8:
a1:5d:ac:83:a1:42:e1:5f:6f:a7:c3:c4:82:19:88:9b:d8:b8:
2d:2c:ca:4d:58:85:f2:a6:bf:68:35:80:8f:90:47:0d:37:f2:
e9:d2:32:8d:5a:31:e3:11:d7:b5:31:bc:a9:2c:1f:ab:41:ed:
e6:44:a4:a3:3a:fa:bb:95:82:3e:7b:0d:5c:7c:5e:03:45:b2:
d5:82:92:a9:5d:0a:59:59:ba:66:07:f3:59:61:ce:e0:21:bd:
73:89:3e:83:67:a1:7c:b2:11:a2:a8:03:4f:b5:bc:fe:66:7f:
f9:33:d2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:07 2025 by rpki-client