Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: +UO7i0AAJ5CdyshgT8pipAFn5gfOfcY7tcC2BYns9ds=
Subject key identifier: 23:9A:14:E5:3D:97:42:E3:D6:CF:5C:E8:56:22:AD:89:F3:8C:95:A4
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 01989712AE80BCC0350151EAA2AE6B3CADAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 03:00:40 +0000
Manifest this update: Mon 11 Aug 2025 03:00:40 +0000
Manifest next update: Tue 12 Aug 2025 03:00:40 +0000
Files and hashes: 1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: WNfqkdyzDbmb7zgoj4uhU/4AfCfMb0hvpWvWNbw//4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:ae:80:bc:c0:35:01:51:ea:a2:ae:6b:3c:ad:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Aug 11 03:00:40 2025 GMT
Not After : Aug 12 03:00:40 2025 GMT
Subject: CN=239a14e53d9742e3d6cf5ce85622ad89f38c95a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:c5:1d:ca:bb:8b:33:29:57:c3:ca:a4:59:
12:c4:8d:d2:f7:03:ef:1a:64:1f:30:11:eb:63:0c:
8e:1b:d0:ce:57:06:49:20:74:c3:76:2c:29:0c:eb:
5c:e2:cd:2b:06:38:ac:c2:2b:89:6c:e9:91:b7:c8:
76:9d:bf:8c:35:df:58:40:07:9d:66:24:d3:e5:ee:
eb:a5:8f:f3:43:07:33:bd:ab:6f:da:96:e8:0a:88:
ff:76:2f:a5:80:12:58:65:b5:5a:57:be:66:cb:a0:
99:a2:85:67:78:77:c6:2e:30:c2:2b:6b:6b:29:c8:
5e:56:de:26:30:f5:a4:a5:eb:3e:ff:d5:13:9b:e0:
8c:1b:04:0d:36:60:a3:75:ef:bc:39:e1:b0:0c:a6:
6f:80:81:ad:22:70:23:b8:78:7f:fb:8d:a4:07:cd:
cc:51:65:06:9f:50:a3:59:de:cb:db:88:f6:b6:c5:
97:b9:63:49:bc:23:6b:f3:3d:51:ef:c5:8f:4b:21:
25:26:e5:cb:98:90:d9:56:81:fb:6b:2e:2e:bf:71:
cd:b2:19:c0:b5:f3:60:b4:03:97:a4:61:90:c1:58:
d9:50:1e:63:e5:ff:eb:e1:15:76:7b:8b:4d:c2:9d:
10:dc:59:79:38:e0:28:8e:83:b8:15:db:b3:b1:96:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:14:E5:3D:97:42:E3:D6:CF:5C:E8:56:22:AD:89:F3:8C:95:A4
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0a:e4:c2:d5:78:bc:3e:98:10:e2:f4:d1:61:dc:41:77:8c:
8a:e0:66:5a:05:5b:90:95:3b:8e:82:83:0f:a1:34:79:d4:c8:
bf:8f:56:f1:51:df:f1:01:9d:36:26:9d:a5:d2:6b:39:ba:1d:
13:be:f4:84:cf:d3:5b:94:a2:e5:44:ae:67:a5:54:a9:6d:85:
e8:39:55:09:a6:9e:6a:55:54:41:5b:ef:c2:b1:dc:15:83:c3:
54:3c:8b:69:3b:31:03:27:b1:ae:1e:16:6e:47:9d:c0:7f:64:
f6:64:fb:f8:ff:21:97:d0:04:5b:db:5a:e6:3d:d1:9d:ce:7c:
0e:12:3d:75:c5:e3:45:42:80:36:04:fb:92:1d:c8:c2:3c:d3:
e2:6b:32:0d:03:50:d8:eb:04:4f:d9:64:b6:98:4d:3d:41:48:
8a:30:31:57:3b:85:67:79:85:2c:38:03:cb:e3:0b:ed:85:21:
82:24:75:d4:f3:89:82:0c:1e:4f:60:20:6a:36:4e:c9:fe:52:
e7:16:f4:b1:9e:0e:a8:80:ab:46:8b:90:0d:c8:18:86:07:31:
37:24:03:77:1b:fc:71:78:a6:c4:82:d7:f8:19:04:3a:3d:91:
cf:61:36:94:58:ce:ae:10:b5:df:24:c2:2f:f1:54:a5:c2:67:
dc:c1:c0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:47 2025 by rpki-client