Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: PSBoMmov0hD+Njehxcu5ZgykKZOALl4dF/IQucvZ7TE=
Subject key identifier: 91:C7:6A:86:E9:97:7B:76:32:49:4C:EB:35:5A:A9:EF:5E:7B:2D:2D
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 019897EE849286F12FF8836FD775EE6F379D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 162D
Signing time: Mon 11 Aug 2025 07:00:47 +0000
Manifest this update: Mon 11 Aug 2025 07:00:47 +0000
Manifest next update: Tue 12 Aug 2025 07:00:47 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: m3/7uYTOlXLfIKuhyJUoN8FZMHBzFptxlZwF72IoTe8=)
2: 6-1osKnhRTEecieKzI4jIsepkfg.roa (hash: ckgtNbcE4kjHePU129hSHdQEi9afRo+rLgqsRFEg78g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:84:92:86:f1:2f:f8:83:6f:d7:75:ee:6f:37:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Aug 11 07:00:47 2025 GMT
Not After : Aug 12 07:00:47 2025 GMT
Subject: CN=91c76a86e9977b7632494ceb355aa9ef5e7b2d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:f5:cf:0f:4e:7e:8f:8d:25:0c:cd:e7:2d:
0d:fe:ee:15:44:28:7a:4d:63:ef:8c:98:51:9a:98:
36:13:88:b7:9b:3a:3b:f3:1d:c2:af:32:0e:99:69:
59:e6:e8:35:49:f9:02:a3:68:b1:8a:e3:15:43:d4:
d0:4f:f9:e2:9c:f6:24:54:28:22:ae:d9:48:de:25:
72:74:84:31:51:9c:79:16:9c:36:3c:8e:a6:86:73:
3a:fa:c4:32:7b:09:a0:44:90:c7:f1:c8:81:d2:58:
08:c9:f4:63:43:ec:13:a5:a2:18:95:0c:be:a8:2e:
64:91:02:1c:13:61:c2:3f:81:2d:68:8f:a5:63:5d:
95:86:3a:30:6f:86:f3:ef:38:4a:47:75:0a:4f:34:
32:7e:dd:1e:d7:da:66:eb:e6:e8:4e:3d:25:cd:d7:
fe:db:6b:3e:ee:b5:26:e2:a2:9d:3d:16:33:c0:32:
db:a2:21:c2:7e:1b:74:fa:0b:38:47:c0:67:0c:e2:
4c:a1:62:8e:9d:60:d0:78:33:c2:2d:e3:a7:de:9c:
87:78:4d:46:f9:2b:89:27:c2:89:9e:d6:b1:71:eb:
09:40:02:87:ad:f0:75:be:fa:00:53:4f:f6:f0:ba:
29:fc:af:c4:cd:1d:b2:d6:aa:e9:5a:be:65:c3:cd:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C7:6A:86:E9:97:7B:76:32:49:4C:EB:35:5A:A9:EF:5E:7B:2D:2D
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d8:ec:d0:84:7f:c9:7e:42:de:fb:48:32:1a:3e:e3:df:fc:
59:ac:97:bf:58:e5:12:3a:e9:77:3c:cd:2a:db:70:9b:04:0e:
bd:51:34:c0:e7:41:aa:b2:9b:29:ce:e9:a6:08:44:14:a1:cf:
3d:78:bd:a2:d3:7d:60:d5:d4:56:34:26:91:1b:d1:f0:d0:da:
c7:0c:25:71:cd:a8:8d:ec:67:24:68:df:ad:c8:8c:14:28:a0:
c5:43:27:55:4e:a0:0c:67:70:e1:87:b5:e6:b6:cb:d7:21:65:
b7:c4:1c:ee:38:a5:b2:a9:c0:d2:51:56:94:9e:a9:6d:1e:67:
be:73:74:df:78:77:66:d0:b0:6f:db:c4:df:13:76:7a:2f:71:
2a:5b:4e:14:0a:8e:5f:c4:0f:31:b6:2d:de:5d:5e:4b:9e:95:
bb:bd:be:2e:b6:48:b9:9e:c2:53:48:94:26:5d:3a:13:ad:ba:
c3:0d:33:c3:61:98:b9:f2:8e:07:74:c0:7a:a1:13:2c:e1:ef:
23:68:36:04:c5:b4:af:61:10:9b:c9:01:c9:e2:85:06:28:48:
e4:f2:59:32:12:bf:81:d2:eb:44:b6:70:52:96:31:35:40:76:
13:db:d3:fe:76:be:99:d8:e2:13:d8:12:ac:cc:fc:24:df:de:
63:8a:a6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:00 2025 by rpki-client