Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: F8o3gmjFY8kcb2rpbK2HPG54wBbFlQbbUwExDNKrsB8=
Subject key identifier: 8B:2B:8E:0C:BD:71:86:54:FB:6A:E5:BA:C7:66:4D:D2:93:12:E8:10
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 019874BE6F4B414AE3E6962740CA61889CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 11:01:33 +0000
Manifest this update: Mon 04 Aug 2025 11:01:33 +0000
Manifest next update: Tue 05 Aug 2025 11:01:33 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: ue7YB2XUU1VCCUOQXeIItUM0rntAopx9kPgzRhBbg5k=)
2: cl3GADBIa5-t9wHD_fNk8JDv5PM.roa (hash: H9R6zlOL/gViduYKRIYyM+avR4L6nr/tioY61On5qcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:6f:4b:41:4a:e3:e6:96:27:40:ca:61:88:9c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Aug 4 11:01:33 2025 GMT
Not After : Aug 5 11:01:33 2025 GMT
Subject: CN=8b2b8e0cbd718654fb6ae5bac7664dd29312e810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:80:87:aa:a9:33:c5:fa:5f:a8:a5:6c:f1:
15:d0:67:6d:3a:07:cf:53:25:09:da:05:05:3b:d6:
91:17:75:dd:da:de:e4:7a:3e:90:85:f3:86:2a:2a:
65:22:c8:81:21:40:90:cc:e8:01:b5:1e:d6:aa:f0:
b8:85:b6:b2:76:b0:6b:71:dc:15:32:8e:6a:79:14:
92:55:55:9f:63:eb:62:2a:b5:d0:eb:ea:ea:af:77:
11:78:ee:0f:f4:19:2a:f7:29:a2:fa:f5:b7:24:e1:
13:de:0a:91:29:ad:ea:fc:e6:46:55:8f:0a:73:99:
16:d9:63:c6:bf:f3:d3:14:c7:a6:c0:2c:53:70:17:
5a:d6:77:e4:6e:ea:f4:99:b8:db:c9:b3:e9:4c:23:
c9:d3:5b:d4:69:ca:a2:88:7a:8a:6e:8f:16:32:85:
05:85:8b:04:ea:28:a9:fc:3e:eb:f0:88:1f:b8:35:
3a:d3:b1:d8:c2:0d:c1:9e:a2:2a:c0:70:63:89:ed:
fc:34:7c:93:19:80:c4:d5:95:b5:9b:32:b2:c8:1a:
6e:c7:61:51:76:78:02:80:c8:9e:3e:03:e5:f8:11:
98:94:7d:ab:7d:c7:33:e2:aa:30:bc:80:da:8a:5f:
4d:b7:15:94:2e:87:44:60:d1:0c:f2:c8:f6:fb:0e:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2B:8E:0C:BD:71:86:54:FB:6A:E5:BA:C7:66:4D:D2:93:12:E8:10
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:17:e3:16:72:03:84:80:42:1b:fa:69:93:e2:06:70:c4:8a:
72:52:6f:7a:31:a9:44:a4:c3:0b:90:4c:40:09:20:1f:64:81:
12:cc:57:ef:a9:3e:04:44:6c:f4:1e:00:1f:ae:96:5f:20:39:
8e:96:60:ba:e7:7c:37:59:20:ea:84:77:02:f2:01:5a:87:98:
70:d3:27:bb:50:e7:07:1e:83:0a:16:51:72:f0:9d:07:fb:ea:
11:41:e1:58:c8:0c:e9:74:18:b8:01:9b:40:84:f9:ab:50:6a:
e8:8f:5a:15:bc:eb:d0:21:ae:f9:53:e6:c6:60:96:98:66:c8:
7d:e9:8a:0d:9d:ce:c4:a1:de:17:6b:8f:e9:8f:d8:6c:d3:d2:
01:1d:58:2a:bf:aa:50:26:00:12:f6:6f:d3:46:59:4b:7d:c3:
82:34:e0:48:6c:41:c6:1c:23:ba:f2:11:15:46:76:6c:78:f8:
7e:18:57:03:69:00:3e:68:4a:7e:9e:b6:69:2e:6d:48:1c:24:
6c:6d:80:99:a2:60:5a:fd:bd:03:25:13:ec:0e:4d:01:33:0d:
ed:d3:0f:6d:ec:8c:2d:da:e2:4d:99:6f:92:45:11:f8:f6:7f:
8b:d2:5b:94:99:db:ca:8c:fd:6f:3f:09:4e:7d:84:28:61:c9:
90:82:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:36 2025 by rpki-client