Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json)
Hash identifier: DSDqAJPKI2YC7rhiA4v9lvT7iQTLuxYipclunE3a9+Y=
Subject key identifier: 04:3A:66:47:D6:FA:68:DE:82:80:31:22:0A:12:8E:A0:31:4D:C5:5A
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 019896DBDB54C1EBEAC9A4A785250D1A2762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
Manifest number: 01F6
Signing time: Mon 11 Aug 2025 02:00:47 +0000
Manifest this update: Mon 11 Aug 2025 02:00:47 +0000
Manifest next update: Tue 12 Aug 2025 02:00:47 +0000
Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: aNy3Sg3mTdG8Ke4dDieUiqut743XIDJm9iGkrTi7NY8=)
2: cPxWboLauOt1xiX1g5_qcFfMwuQ.roa (hash: F49rFgzhVx+26sTntZUKS3aBxcYFzjzC7SoWYW83au0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:db:db:54:c1:eb:ea:c9:a4:a7:85:25:0d:1a:27:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: Aug 11 02:00:47 2025 GMT
Not After : Aug 12 02:00:47 2025 GMT
Subject: CN=043a6647d6fa68de828031220a128ea0314dc55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c1:2b:c0:96:e2:5a:2c:9c:48:c6:06:df:4d:
e8:13:00:9f:c5:0e:71:e4:f1:ca:84:ac:7c:db:65:
c1:a5:9a:ba:51:1b:b2:4f:e0:11:ef:32:a1:60:b2:
a0:67:d8:f3:cd:2e:04:eb:60:a6:76:79:49:17:30:
89:60:f8:3d:64:ad:65:1b:54:42:22:02:19:56:62:
4e:e6:dc:f2:a4:0e:df:03:49:35:4b:e2:75:b6:26:
66:47:29:df:ae:2b:29:58:4e:8e:55:b4:a6:27:73:
1d:fc:a3:2a:be:33:fb:37:97:08:af:34:50:3d:4c:
2e:e3:c9:ab:9e:93:c5:0d:99:78:10:d8:f0:5d:30:
3f:6c:e7:d8:93:3a:d6:05:c3:94:22:29:14:ed:2a:
dc:d8:da:0e:60:50:c9:e6:ce:bd:c1:47:84:0c:d5:
cd:9b:f7:bf:e1:25:dd:1e:a7:6f:5a:65:24:9d:f7:
98:4f:e1:95:f8:57:3d:f8:1f:7c:ea:f3:c6:15:db:
4f:8e:5a:e7:80:6c:2e:06:49:d6:2b:07:ab:da:a4:
75:23:5d:4a:99:94:5b:04:79:25:12:51:13:ef:98:
73:49:d1:e6:03:8b:a4:db:38:c0:d4:75:1f:f3:d7:
40:bc:43:79:8f:01:12:26:b0:91:a4:99:26:35:f2:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3A:66:47:D6:FA:68:DE:82:80:31:22:0A:12:8E:A0:31:4D:C5:5A
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:96:af:5b:d6:0a:d0:44:9b:a0:7d:41:3c:3a:62:fa:6c:ee:
c3:9b:66:b2:0c:1e:91:f3:20:1e:fc:b4:7f:52:5e:ce:99:7d:
08:83:2b:0b:93:a7:74:fd:3f:c7:9c:1f:16:a9:7f:0c:99:15:
ae:1b:93:25:dc:e7:33:01:9b:33:74:e3:20:2e:f3:6f:3f:e1:
e3:0b:e5:8d:e3:25:ee:79:62:72:02:0e:03:c1:44:f2:a3:5a:
1f:90:8d:7c:64:f2:b2:e8:fa:74:3c:40:fc:95:67:c5:18:4c:
15:79:6d:a7:9f:db:12:e5:4a:3b:f3:60:e4:d0:a3:8a:2a:6f:
d6:68:40:02:67:29:cd:a4:2a:d7:7e:e6:79:48:f3:e0:d8:de:
0a:55:ea:8c:3a:d8:d7:4f:60:cd:16:4f:38:ba:b4:1e:d8:01:
b1:84:07:51:b7:7e:e3:d2:76:1f:a1:e5:15:cd:d4:b0:8e:63:
43:00:47:43:4c:d1:0f:14:8f:d0:c7:d3:10:96:41:08:a1:64:
aa:c2:32:f3:7a:04:bf:19:31:7a:a3:5f:ea:66:f8:5a:d5:77:
8c:f9:37:f4:16:8f:34:4b:9e:8f:36:de:c0:1b:84:6d:55:e2:
94:fa:c9:52:d6:e4:09:51:30:10:cd:b7:10:6b:9d:86:70:15:
72:b4:b9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:19 2025 by rpki-client