Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
File: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft (raw, json)
Hash identifier: K5r5Evcr7jKNBJrslhT4pRj9Ez6wNTR54WiQgZmNbdA=
Subject key identifier: C8:D9:36:88:7A:99:8C:AB:A7:0F:51:F0:A7:E7:66:6F:25:AE:6A:77
Authority key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
Certificate issuer: /CN=d248185956e443b55b062200f964537bc10bc130
Certificate serial: 0198499BF3156BF322F454AB4437A500A926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
Manifest number: 0270
Signing time: Sun 27 Jul 2025 02:00:13 +0000
Manifest this update: Sun 27 Jul 2025 02:00:13 +0000
Manifest next update: Mon 28 Jul 2025 02:00:13 +0000
Files and hashes: 1: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl (hash: je21hp1wzYYY3560KnuqLAKwOczp8hrLfqRdzHVi+C0=)
2: _O0LKSVD2FWQH20B8h-W2BSyf7E.roa (hash: /osVaD1xwsZSvzrjM1Npx7gTyOHOWobbSsuEq9U9lZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f3:15:6b:f3:22:f4:54:ab:44:37:a5:00:a9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d248185956e443b55b062200f964537bc10bc130
Validity
Not Before: Jul 27 02:00:13 2025 GMT
Not After : Jul 28 02:00:13 2025 GMT
Subject: CN=c8d936887a998caba70f51f0a7e7666f25ae6a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:5d:37:df:39:45:56:be:12:88:b3:57:89:
dd:48:e9:6f:be:55:74:aa:d9:34:6f:bb:18:c0:1a:
2e:40:6b:ec:7d:68:5e:1b:ca:0a:d9:1d:a1:b9:8e:
08:86:5b:90:58:d2:c5:ef:df:e0:be:cc:94:24:bb:
7e:39:2a:3c:1c:a4:63:f0:d3:15:8a:bf:b3:9e:ac:
90:a3:50:48:00:0a:80:0c:6b:72:5a:a9:5d:9a:cc:
34:16:28:df:58:ad:41:92:08:1e:bc:6f:14:47:62:
0f:ad:ca:85:ff:e6:62:b3:44:76:c0:52:ff:c7:25:
bd:a9:ac:bb:03:3a:72:6d:81:30:df:51:b6:50:a6:
0d:30:f2:f9:68:b2:e8:3e:4e:bf:ea:b4:60:09:09:
94:0f:6d:d3:7e:31:26:87:cf:ec:b5:b5:e1:52:c7:
40:66:64:aa:fd:ab:c4:4a:bd:50:69:b0:ad:c7:2d:
8c:1a:86:78:8f:00:6e:69:b5:1c:9a:fa:46:fb:5a:
21:4f:89:cf:da:31:fa:4a:f5:ff:d7:ff:ff:15:96:
89:ab:d6:a5:0b:d0:ac:bb:46:5b:00:68:19:a8:d7:
4c:b9:00:39:4e:5f:0e:84:40:1a:05:ca:fc:56:82:
0d:ad:2c:4c:a8:e9:83:b2:33:e8:57:30:d9:63:e4:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D9:36:88:7A:99:8C:AB:A7:0F:51:F0:A7:E7:66:6F:25:AE:6A:77
X509v3 Authority Key Identifier:
keyid:D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:af:1a:b0:50:78:bf:3f:5b:ce:66:32:3e:52:9a:4c:b4:75:
14:b8:ae:9a:2d:a6:e5:59:59:73:65:4d:7a:d4:77:cd:e7:65:
dc:96:c0:e9:83:a1:25:ff:d5:6e:f8:4d:09:70:d6:d4:b5:0f:
04:c4:a2:df:a4:eb:62:f3:21:30:8d:31:b0:3f:3c:da:b2:4a:
1a:09:79:20:1f:8c:e0:04:13:dd:cd:10:a6:8e:1d:cc:ce:e3:
8b:73:a0:73:a9:c8:05:9a:c6:e1:6a:61:4e:5b:f0:31:63:10:
13:4d:c3:4c:97:36:08:d3:9c:9b:3c:a5:ca:33:8d:df:e2:79:
e7:62:a3:75:87:98:c4:e0:4d:f3:6e:cf:68:f8:fc:2a:f3:49:
28:de:f8:06:44:48:cb:f8:b6:bd:81:ff:13:4c:0d:43:46:45:
14:95:0c:f1:a9:6b:5f:f8:5e:11:b3:b0:64:1d:7f:0e:21:d2:
5b:3a:fe:05:9e:6e:c7:3c:55:8b:10:81:87:0a:91:13:52:7f:
48:0d:d7:7c:2c:b7:d6:6c:d1:30:e4:14:be:dd:50:34:84:38:
74:ad:0e:74:9a:37:18:42:13:23:58:05:89:a9:2d:a1:0e:6a:
aa:52:69:22:5e:0c:93:51:5f:e2:80:7a:a5:67:94:6e:85:db:
9f:bc:6f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:26:53 2025 by rpki-client