Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
File: C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json)
Hash identifier: jllTiyr9ZH+SCygnu7SppApZuh14rmi/gOr6+b51Lak=
Subject key identifier: DF:2F:43:BA:5D:B4:5A:DC:9D:26:9A:4A:62:26:2E:29:00:A9:89:12
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial: 019873E25B61092FC39FA672FE548C112F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
Manifest number: 095A
Signing time: Mon 04 Aug 2025 07:01:10 +0000
Manifest this update: Mon 04 Aug 2025 07:01:10 +0000
Manifest next update: Tue 05 Aug 2025 07:01:10 +0000
Files and hashes: 1: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: fNaHK7xPKqJcQhAcO460UScMJcaQh+GqnFYLKfmoJpM=)
2: UU6Ajbnzeazafi4l48g1tcKGRUI.roa (hash: KQmPC74H1FQ13P7UCyXAnVfU+3K0608TgOWrBgoQHJM=)
3: yulW-otMfkyGmJLnHI79DDPaQLw.roa (hash: WE2VgpQHWy+IPNQdlSJJR+Md9SJ/EE1J8coUpGG6dmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:5b:61:09:2f:c3:9f:a6:72:fe:54:8c:11:2f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Validity
Not Before: Aug 4 07:01:10 2025 GMT
Not After : Aug 5 07:01:10 2025 GMT
Subject: CN=df2f43ba5db45adc9d269a4a62262e2900a98912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:29:a0:b1:69:a5:ba:6d:e4:f3:cd:81:58:
0a:ad:bf:a5:fe:cc:87:ba:e9:84:f8:1f:85:20:78:
cf:d2:0b:9b:4e:6c:48:b6:ee:7c:fb:f2:61:9d:fa:
61:9f:9b:36:f1:25:ce:da:ba:9d:00:6e:6b:c9:0f:
c2:5d:a3:93:27:36:f3:c2:08:23:37:06:a9:ee:c0:
87:fb:82:d7:40:d4:1e:7c:d4:d1:db:7a:48:19:56:
86:5c:41:14:98:79:30:7b:d5:7e:a1:27:3b:c2:80:
34:44:6c:76:fc:fa:a1:e4:bf:2b:52:d9:79:9a:7d:
4b:09:8b:e7:85:9e:6f:a8:ff:28:3e:a8:ed:cc:c5:
d2:d9:90:5e:b2:f2:90:5a:0b:8c:69:70:bb:86:d1:
09:c8:43:d7:ce:99:22:1a:7f:c7:2d:1f:ce:8c:1d:
8e:c9:49:61:05:26:52:26:10:f5:19:00:1c:7b:36:
36:fe:67:4e:b0:a1:68:3c:86:8f:2f:79:89:7a:c3:
74:64:b1:e4:c2:43:99:87:04:55:0f:21:8f:17:66:
07:32:eb:78:e8:a6:ce:24:b9:60:c3:46:01:6e:e2:
1a:cb:38:24:cc:01:5f:87:40:dc:87:f4:90:31:9b:
15:9a:39:b8:f0:51:4c:9f:e1:64:63:a0:c2:4b:b1:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2F:43:BA:5D:B4:5A:DC:9D:26:9A:4A:62:26:2E:29:00:A9:89:12
X509v3 Authority Key Identifier:
keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d6:7d:03:a3:8b:65:ee:8f:b6:40:de:b3:e5:34:0f:eb:dc:
2f:cd:04:aa:88:96:ea:77:72:6b:2c:3d:9c:3e:96:ba:0e:f7:
04:ed:8c:a0:e9:5f:cc:9a:ec:5e:a4:2f:12:66:3d:c2:b9:7a:
79:7a:a1:91:74:cb:22:67:11:fd:91:0b:98:b1:ca:ee:89:c0:
63:9d:da:4b:be:f7:20:36:fa:ec:61:da:77:cf:b2:09:b7:bc:
d6:fc:fe:60:b7:25:45:ee:a8:28:2f:e3:8c:20:02:03:94:9d:
bb:72:77:9a:47:2b:fe:ee:47:ab:08:cf:74:21:c3:f1:39:fa:
25:b7:3a:1d:6b:5a:88:6e:22:7f:f7:d3:e6:05:18:1f:72:d7:
18:7a:8d:ad:46:2e:c5:b7:af:af:48:2a:5c:75:ba:c5:92:6d:
ef:5e:63:fb:5d:4b:e7:b7:61:00:45:01:17:a4:00:f3:f8:2d:
53:8c:00:17:04:87:97:51:dc:17:11:19:ec:91:d3:f0:ee:9e:
e9:cc:18:4e:66:72:fc:2d:d4:5a:e4:3f:18:67:93:84:bc:b0:
fe:bd:1e:be:cf:e7:3c:b3:a2:73:9e:0e:50:8a:94:65:d2:88:
6b:9f:77:f1:9f:2b:bf:60:4b:b6:78:f0:b5:60:1c:07:c6:eb:
ba:02:b1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:14:42 2025 by rpki-client