Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier: ntgNiDYsXoqgcrZKQI8GFrHLRPryMcPztvx4kELeJ8o=
Subject key identifier: 2B:6A:F5:CD:B6:10:4F:09:52:40:0D:A6:3E:B7:9C:45:4C:DF:7B:6B
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 0198A196ED0E1FCAB4269F80D94BF888BBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number: 14
Signing time: Wed 13 Aug 2025 04:01:19 +0000
Manifest this update: Wed 13 Aug 2025 04:01:19 +0000
Manifest next update: Thu 14 Aug 2025 04:01:19 +0000
Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: ZlxDqQAtXooUbB5A9V7SjWlvyX16BgLba5HQqKxLafU=)
2: 1-7rqPeApfWB5OeXme1R2dxaURkI.roa (hash: G1AfCo2TRIj0s8Iv4o94YSbEJ+sCCm2M5yCwI2QU6Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:96:ed:0e:1f:ca:b4:26:9f:80:d9:4b:f8:88:bb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: Aug 13 04:01:19 2025 GMT
Not After : Aug 14 04:01:19 2025 GMT
Subject: CN=2b6af5cdb6104f0952400da63eb79c454cdf7b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:c5:b2:d6:45:e3:d2:ba:4a:61:0d:d3:6c:
6a:d0:cd:0f:6a:69:8e:0b:e0:9b:1e:2d:6a:f8:ea:
62:1d:3d:e7:3e:fa:ba:17:1a:37:d7:b2:21:c0:dd:
10:63:5c:e4:40:4a:5c:b5:2d:36:0e:75:b5:db:6c:
92:89:48:f8:f5:95:e5:c5:2b:ed:01:38:af:11:95:
1d:0a:8e:20:9b:0a:c6:4a:4e:93:b4:82:28:58:21:
3d:2d:8a:13:cb:40:e7:a6:07:6c:a9:1c:06:00:18:
09:bd:fe:75:2c:b4:81:08:02:34:0c:6b:7d:21:1c:
43:1e:49:c4:1f:1c:5f:23:94:fe:6c:08:70:9c:dd:
cb:17:5f:4e:29:d0:8a:a3:fd:de:6c:55:f8:a1:4f:
1e:cc:97:68:1c:be:7b:a4:a6:c4:20:1e:b8:fb:1f:
23:02:b4:65:c1:0f:a1:28:0e:fb:d3:79:81:89:e9:
03:e3:5d:ad:13:8b:8c:21:f1:b4:76:e0:b6:9f:79:
cc:99:fe:da:93:bb:c6:63:d4:65:e9:45:e7:95:e4:
c8:20:42:3f:22:5f:59:68:4e:b8:11:15:4f:1d:b3:
23:b9:58:c4:d7:f2:3a:ae:d5:9d:4c:a7:69:56:8f:
3f:35:0c:f2:29:df:cd:87:18:bb:82:d8:36:cc:ea:
b4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6A:F5:CD:B6:10:4F:09:52:40:0D:A6:3E:B7:9C:45:4C:DF:7B:6B
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b1:3e:41:d2:2d:eb:2d:fb:43:c0:34:9b:44:66:a0:1d:07:
e5:4c:c5:04:2e:0a:91:de:27:d9:f6:1f:65:0f:86:a9:ab:0d:
d4:4e:bd:6c:ff:0b:da:d2:27:c9:31:3b:b4:d3:83:a3:43:ac:
77:ff:72:6c:f0:b5:4e:78:e8:68:79:02:6d:65:30:86:f3:9c:
fc:fc:3e:6f:86:45:47:06:15:63:8a:43:2e:c4:e0:23:64:2b:
1d:8a:57:62:4d:3c:44:99:1a:cb:13:a3:67:81:d5:2f:14:77:
a1:a4:a2:64:26:1a:69:5b:e5:86:c0:01:82:64:17:74:0d:11:
a5:4e:4f:18:0a:8e:ff:42:d2:3d:67:b7:2e:56:00:53:1e:4d:
51:ef:64:75:81:d4:89:6b:8f:35:21:46:a9:e3:ab:3e:c2:84:
c6:58:78:9e:6a:d8:ff:d9:a1:21:21:6e:b7:ec:0c:ea:1c:79:
30:0b:51:1a:c2:90:17:e8:27:a9:de:18:87:24:85:4b:06:8e:
aa:1f:ad:20:cc:58:28:3e:71:c3:ec:9d:c6:ec:78:7b:fa:91:
44:d8:f4:1b:b2:91:84:a9:df:f7:9f:85:80:18:0d:13:c1:2c:
fd:b5:e8:82:0b:67:67:54:86:1f:72:6e:c2:4e:a3:68:65:85:
3b:a8:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:47:15 2025 by rpki-client