Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier: xZxlDuHJNbhL5begwWBhY5gNGZ4ErIS+7p5n8e+PjdU=
Subject key identifier: 2D:F6:25:3E:F1:45:6F:00:47:92:25:CA:0A:A4:62:84:BD:69:F3:85
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial: 0198469B3C662D30F6D84E84E52D53CE021B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number: 133C
Signing time: Sat 26 Jul 2025 12:00:35 +0000
Manifest this update: Sat 26 Jul 2025 12:00:35 +0000
Manifest next update: Sun 27 Jul 2025 12:00:35 +0000
Files and hashes: 1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: Lvap6PH4OOXNYq33gHskDBYQES0h31cPOgQqkSX5Ieo=)
2: YV4mxnesnEqsoXEgOeVxrXzaM2I.roa (hash: cQ3+oKEwuuiKGHKe3AeYP28TBOd1C3qmRH0uqKxLNb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:3c:66:2d:30:f6:d8:4e:84:e5:2d:53:ce:02:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
Validity
Not Before: Jul 26 12:00:35 2025 GMT
Not After : Jul 27 12:00:35 2025 GMT
Subject: CN=2df6253ef1456f00479225ca0aa46284bd69f385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:73:53:87:10:2f:f5:0e:f9:39:bb:a9:40:e8:
02:f3:61:6d:3b:f9:c7:dd:e0:5c:66:fe:3f:e6:43:
aa:9a:e8:0e:d7:7a:3b:48:44:ee:4f:97:d7:96:9a:
d6:91:bb:42:ca:49:59:a5:e2:0c:b0:8f:06:94:ba:
f0:85:5f:60:e0:f5:28:ea:ea:94:8c:dc:6f:98:66:
f2:a6:ae:db:59:24:24:0d:0b:9d:12:d8:98:1c:51:
85:66:7b:03:c1:cd:07:e1:4f:72:0f:6e:57:50:1a:
5e:45:5b:17:3b:39:52:21:d5:fc:4f:b8:6d:65:af:
10:12:62:e9:34:ac:81:3e:f5:fa:5c:35:7b:fe:88:
42:e3:94:35:00:4e:f8:2c:7d:c4:e2:22:b2:82:45:
e9:f7:19:e8:1f:a7:37:75:ba:5d:1b:9f:20:09:a3:
97:94:7e:81:d6:6f:10:dd:f5:b6:20:71:9b:96:3d:
88:11:e0:17:47:a3:24:eb:3f:f0:ae:19:7f:74:59:
ec:54:a3:2f:cd:8a:27:44:6a:78:1e:e0:15:2a:27:
e2:55:8f:11:3a:72:6a:2f:94:38:e8:8b:74:4b:dc:
92:06:08:d2:dc:2d:ff:ca:fc:65:df:67:0d:d0:39:
c8:56:26:cd:c2:98:f7:9a:dd:f1:17:7c:76:46:13:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F6:25:3E:F1:45:6F:00:47:92:25:CA:0A:A4:62:84:BD:69:F3:85
X509v3 Authority Key Identifier:
keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:08:83:59:9b:30:42:7d:2e:5c:4c:7b:e5:e9:e2:c8:e5:c2:
b5:da:69:e4:a1:f1:f4:65:d1:26:81:f7:3e:d0:ad:5c:fd:c8:
85:e5:cd:8a:5b:f1:13:be:bb:f5:c3:68:c0:f5:99:70:aa:1d:
07:08:f5:63:65:bb:aa:d1:cb:1a:53:66:38:8b:72:08:b1:80:
95:00:00:f0:d9:3e:cb:85:2d:63:d0:2f:b4:03:7c:e1:d0:18:
68:0f:92:8c:5c:9f:76:ef:6e:26:68:1c:11:7d:a3:d0:3d:40:
e9:58:08:d7:cc:5f:4b:62:21:80:69:1b:92:4b:dc:c3:fe:6a:
df:18:61:26:dd:f0:c5:6f:ff:5f:4d:b4:5b:5d:0e:47:f7:21:
76:06:3d:81:c1:c2:b0:34:c3:42:95:50:c5:94:dc:70:15:65:
4a:85:59:9d:bb:f6:de:75:14:d1:97:a7:24:9c:af:fb:62:5d:
99:db:80:cb:b2:2f:0b:80:08:ba:f6:0c:8f:1e:c4:68:92:71:
ef:a6:b5:0e:c3:b0:c6:f1:91:0c:f8:be:06:ab:2a:b0:f8:ff:
69:94:a4:d1:2b:4e:f1:83:14:98:31:04:df:12:3f:bd:dc:89:
4c:33:3b:b3:0e:eb:03:26:3f:ef:23:9b:89:56:72:00:8c:50:
9d:c4:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:38:02 2025 by rpki-client