Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: LzHcJcy8/bUZ2xh6USKf3X4x0S9XsmwwQSNoQW+qU/8=
Subject key identifier: DA:F9:DB:E1:77:B5:D6:08:E0:67:FA:9F:13:18:4F:13:93:17:AB:85
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 019844ACC0F69A5166955E096AAB28C78F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 03:00:28 +0000
Manifest this update: Sat 26 Jul 2025 03:00:28 +0000
Manifest next update: Sun 27 Jul 2025 03:00:28 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: LNhV0OkPg6DBH58b5V28UN8UlXlHNSrqlHsvbenwaw8=)
2: FtQX4tz2PfNS1jDZrdtbiPoNYSU.roa (hash: M4MM/hQp8qhWYBPYsVJLPE9nJhVevNigPOSWligASH4=)
3: xpbeDPeraC0lsT88_DSzZTcvzFU.roa (hash: 7vANxALGvUHJgNJxUW1TqxLJ7J9U0tCgO5zgV2ERDWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:c0:f6:9a:51:66:95:5e:09:6a:ab:28:c7:8f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Jul 26 03:00:28 2025 GMT
Not After : Jul 27 03:00:28 2025 GMT
Subject: CN=daf9dbe177b5d608e067fa9f13184f139317ab85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:c5:0b:7b:7d:47:7c:1f:75:30:00:2a:37:
2c:8d:27:1c:67:31:10:1e:45:ce:ef:5d:e1:87:8a:
49:fe:27:e9:fe:14:39:06:79:55:a7:9b:cb:4d:74:
19:72:dc:56:ab:5b:c2:11:7e:14:94:50:1f:c1:7e:
94:46:8a:d2:2d:fa:fd:e9:69:1b:e0:65:d7:3e:41:
25:4d:15:c8:37:79:78:87:b8:e3:94:c9:96:74:bd:
80:28:d0:52:73:ec:d0:00:b8:7a:1d:92:fe:be:dd:
7d:e3:6e:6d:35:e9:52:39:7c:c2:8f:6e:45:5d:29:
52:b9:ad:bc:ce:60:7a:78:0e:03:e0:42:c0:97:92:
8f:e4:e6:eb:b0:08:85:e0:f7:95:35:9f:d9:7c:da:
9a:91:3e:85:bd:04:2e:8d:02:a6:12:de:0f:37:ae:
bd:d3:eb:2e:a5:e7:e6:ba:ba:8d:5e:82:00:d4:80:
6b:7f:cb:dd:54:85:90:0f:0c:be:97:4d:ec:5a:4d:
84:ba:d2:f0:aa:07:33:6a:61:c5:be:c7:cc:fa:ed:
80:2d:f0:c0:c9:45:1c:0c:99:2d:c3:96:da:bd:58:
c7:a6:90:c9:03:bb:01:02:b5:a2:76:35:81:e8:2d:
d2:57:e8:60:a9:0f:d3:eb:b1:69:1e:3f:f2:84:da:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:DB:E1:77:B5:D6:08:E0:67:FA:9F:13:18:4F:13:93:17:AB:85
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d0:65:47:ac:46:c3:a0:1b:2e:27:dc:6d:db:5d:cf:f5:57:
d5:f9:52:f9:83:07:0d:d6:8b:9f:d0:bf:01:6b:3e:86:70:6f:
08:32:ec:9a:49:62:f8:7e:40:5e:f6:8d:7a:61:d9:78:d8:35:
b1:eb:ab:e0:5e:25:c3:1b:d2:74:e8:24:bd:7f:6d:8a:5c:60:
2a:f9:e5:70:82:27:10:f8:1c:6f:3c:c7:51:00:d2:89:2a:15:
d5:f6:5d:a8:b9:23:81:f2:51:5f:0a:5f:5b:d0:15:7d:01:22:
d2:13:ea:5d:a7:f3:86:6a:ce:28:2e:d2:ea:ff:2a:1f:09:61:
13:f4:e8:d9:c1:f5:92:53:a7:6e:93:0c:0d:0d:20:40:18:98:
5b:66:9d:df:4d:96:7c:2e:f2:f5:e4:16:39:0c:eb:e4:71:8e:
71:83:0d:ec:af:88:49:37:5d:be:10:1e:1e:8a:2e:37:7e:cc:
8a:e6:01:7b:0c:1f:e1:92:6e:02:f8:c7:36:17:8b:e5:b6:bd:
68:97:a1:6d:c4:e0:57:fd:07:1c:52:04:86:1f:20:43:27:2b:
a6:85:24:88:28:3d:70:ea:9d:99:d1:ff:4f:74:7b:63:8b:82:
94:b2:54:50:ff:ae:cd:c1:53:d6:99:02:2f:62:47:bc:5d:23:
68:f4:5d:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhErMD2mlFmlV4Jaqsox49oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTVlMGI4NmYzZjUxMjUwNTQ4NjNjZjkyNjRlNjM0NmUw
OWJiYjcwHhcNMjUwNzI2MDMwMDI4WhcNMjUwNzI3MDMwMDI4WjAzMTEwLwYDVQQD
EyhkYWY5ZGJlMTc3YjVkNjA4ZTA2N2ZhOWYxMzE4NGYxMzkzMTdhYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunXFC3t9R3wfdTAAKjcsjSccZzEQ
HkXO713hh4pJ/ifp/hQ5BnlVp5vLTXQZctxWq1vCEX4UlFAfwX6URorSLfr96Wkb
4GXXPkElTRXIN3l4h7jjlMmWdL2AKNBSc+zQALh6HZL+vt19425tNelSOXzCj25F
XSlSua28zmB6eA4D4ELAl5KP5ObrsAiF4PeVNZ/ZfNqakT6FvQQujQKmEt4PN669
0+supefmurqNXoIA1IBrf8vdVIWQDwy+l03sWk2EutLwqgczamHFvsfM+u2ALfDA
yUUcDJktw5bavVjHppDJA7sBArWidjWB6C3SV+hgqQ/T67FpHj/yhNra0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr52+F3tdYI4Gf6nxMYTxOTF6uFMB8GA1UdIwQY
MBaAFNBV4LhvP1ElBUhjz5Jk5jRuCbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQt
Zjk4YzdmZWMxOTRlLzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQtZjk4YzdmZWMxOTRl
LzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltBlR6xG
w6AbLifcbdtdz/VX1flS+YMHDdaLn9C/AWs+hnBvCDLsmkli+H5AXvaNemHZeNg1
seur4F4lwxvSdOgkvX9tilxgKvnlcIInEPgcbzzHUQDSiSoV1fZdqLkjgfJRXwpf
W9AVfQEi0hPqXafzhmrOKC7S6v8qHwlhE/To2cH1klOnbpMMDQ0gQBiYW2ad302W
fC7y9eQWOQzr5HGOcYMN7K+ISTddvhAeHoouN37MiuYBewwf4ZJuAvjHNheL5ba9
aJehbcTgV/0HHFIEhh8gQycrpoUkiCg9cOqdmdH/T3R7Y4uClLJUUP+uzcFT1pkC
L2JHvF0jaPRdkg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 10:58:44 2025 by rpki-client