Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: TPtXoUFhc/N6UP1i5ajs+IbXRYacm3BBGsXKw3KwYEM=
Subject key identifier: 36:AB:B8:79:7F:B3:39:E0:21:44:2A:BD:70:12:2C:04:93:B4:55:ED
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 019873E225C4819A0991A00A67BB59EE84B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 11AD
Signing time: Mon 04 Aug 2025 07:00:57 +0000
Manifest this update: Mon 04 Aug 2025 07:00:57 +0000
Manifest next update: Tue 05 Aug 2025 07:00:57 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: zcSgKRivXfezsThvDf6KBoYq5iJX7668w2TT07esT+s=)
2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:25:c4:81:9a:09:91:a0:0a:67:bb:59:ee:84:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Aug 4 07:00:57 2025 GMT
Not After : Aug 5 07:00:57 2025 GMT
Subject: CN=36abb8797fb339e021442abd70122c0493b455ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:bf:2a:7d:4d:a6:28:9d:49:e9:70:ed:81:
83:0a:6a:8c:05:94:89:a4:47:dd:05:e9:b0:38:a9:
ce:2c:e2:a0:76:6c:b3:bf:a4:da:4f:a8:a1:d9:6b:
60:13:13:3a:a9:1e:d9:08:86:59:c9:28:c6:6c:f0:
2a:f8:f7:f6:c5:7d:1e:69:99:a7:b3:b6:5b:a9:61:
66:09:6f:d2:e3:90:b6:07:01:bc:f2:ed:04:71:31:
bc:dd:4b:e0:aa:05:2f:82:2f:1d:a0:81:a7:9a:ec:
3e:b9:3c:85:2a:37:c1:81:cd:59:ec:76:bb:6d:ff:
68:da:cf:df:85:72:09:51:05:ef:9b:ba:33:cf:b2:
0c:de:32:51:48:e2:68:79:fa:f2:3d:76:e7:73:b0:
3c:67:25:cb:01:8b:b4:5b:b5:da:78:c0:3f:2a:32:
de:06:26:53:13:cc:25:b3:57:46:4c:8a:ed:51:04:
8d:23:04:fe:84:56:27:f8:c4:4f:5c:c3:63:e6:f6:
29:7e:a7:e6:e4:7d:a4:7d:a3:ab:23:2a:33:a0:77:
3f:33:70:eb:f3:12:68:d7:22:cf:e7:55:bb:e3:ce:
74:4b:17:26:6c:32:54:bb:98:31:67:9b:fe:68:0f:
f0:c9:3a:d1:5d:00:1c:22:1c:5f:2e:6f:2d:e3:1c:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AB:B8:79:7F:B3:39:E0:21:44:2A:BD:70:12:2C:04:93:B4:55:ED
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fc:34:bb:ce:fa:a3:85:bf:f5:78:8a:1f:c8:db:a4:57:95:
0d:02:ec:24:fe:e5:ac:4b:0c:29:8a:82:8c:8d:10:ac:95:bd:
b8:fc:3c:06:cf:72:ae:15:c8:2f:b9:e7:00:79:9d:ef:b4:73:
b0:6c:dd:38:ed:32:a5:cd:77:c5:94:89:22:eb:36:ed:4c:b5:
a1:42:4f:76:3d:04:e0:2f:57:c1:62:29:bb:5e:9f:58:c1:75:
ad:dd:72:23:fb:e4:4f:8f:bd:33:6d:f9:cf:62:02:a1:63:a6:
8f:d0:c9:55:6d:40:77:75:02:ad:c5:a9:c5:98:cd:5f:d7:93:
db:59:0d:d8:17:35:96:cc:fd:57:b7:1c:f2:51:00:7c:f9:71:
56:eb:f8:8c:69:39:e7:14:ae:77:66:cc:08:2a:4e:79:13:78:
8a:7f:e1:6d:60:79:44:10:f2:b9:ab:d7:ec:bd:b4:82:c0:0a:
60:10:b0:06:32:85:19:c8:b8:6f:c3:45:86:9c:f4:77:99:f0:
c2:79:cb:5a:b1:c7:78:99:b6:1b:a6:7d:2f:4f:47:8b:90:c6:
36:6a:ef:79:9e:82:e6:e1:72:94:38:3d:00:30:4e:44:71:42:
71:f7:1e:4c:7e:d6:66:7b:c3:96:b3:5d:c2:94:98:27:da:37:
e7:bd:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:42 2025 by rpki-client