Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: ni8MjEmGqTxwLmj1+TeMlHPwD/Aczd4B86UnQ+6mdZ8=
Subject key identifier: DB:93:84:42:31:DD:7B:9C:34:8C:A9:94:8F:35:3E:50:68:D2:D3:F8
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 019854569BF150F11BFBB894FDBC3672DE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 02C1
Signing time: Tue 29 Jul 2025 04:00:18 +0000
Manifest this update: Tue 29 Jul 2025 04:00:18 +0000
Manifest next update: Wed 30 Jul 2025 04:00:18 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: Rxb7XQHlSiid13QLMWbM96/9WOC24HdIzdfI1BGht8E=)
2: GqXg2NC5IUxRI1mWcJNsyZxesng.roa (hash: wIFPJcYLl1DLySOyYumJerZ6TcbUU8g29XL5Yzwhz2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:9b:f1:50:f1:1b:fb:b8:94:fd:bc:36:72:de:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Jul 29 04:00:18 2025 GMT
Not After : Jul 30 04:00:18 2025 GMT
Subject: CN=db93844231dd7b9c348ca9948f353e5068d2d3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:90:a6:0f:c1:3b:42:ec:98:0a:57:39:2f:
16:9e:a3:55:d5:31:a8:e0:de:8a:2c:1c:56:37:a7:
36:32:e4:d6:69:c0:d5:65:27:85:0d:c0:9e:02:6b:
68:38:dd:1b:4b:06:e9:3a:37:02:99:7e:ed:9a:d1:
30:62:03:61:13:5d:a8:44:cb:e7:e1:0d:14:c4:0f:
d5:d7:72:59:b6:30:d6:be:2c:2c:cd:90:a4:0d:e8:
ad:b3:8e:a9:b3:7e:d8:20:1d:f7:92:58:72:91:4b:
0f:3d:61:af:09:1c:bb:82:d7:f5:f4:66:27:d5:99:
38:44:c1:69:e9:5c:82:63:c5:7a:66:5a:b0:c3:45:
ea:43:bf:9a:e3:a8:2d:24:fe:5c:a7:28:5d:87:00:
bc:02:91:1d:7b:e1:92:57:10:e1:ad:dd:bc:d9:47:
c9:25:58:59:37:8f:68:d9:c0:f9:2e:47:be:72:f7:
63:6b:48:fc:00:60:05:4b:32:e9:1e:41:6d:66:63:
63:04:f5:01:96:1b:44:cf:e8:d2:bb:b9:23:dd:4f:
6e:13:74:70:c5:f2:c2:48:64:65:34:59:c0:35:26:
ef:3e:a2:5f:28:4d:39:af:56:68:70:5d:bd:9e:30:
25:eb:6a:7c:de:92:a2:f4:1f:7e:44:0e:6e:af:11:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:93:84:42:31:DD:7B:9C:34:8C:A9:94:8F:35:3E:50:68:D2:D3:F8
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:01:3c:3b:63:79:db:61:3e:72:09:f5:0b:d7:eb:4e:79:21:
97:fa:a0:81:e1:09:e0:1d:14:01:0b:92:f6:d9:89:f4:12:e7:
c8:2b:bf:85:3a:c0:16:e4:b7:23:bd:3f:b8:26:f2:e6:26:ec:
ae:f6:d1:49:cf:f8:65:c8:32:e4:23:f5:26:bb:9e:0d:55:df:
ad:46:7e:6d:7f:a9:68:09:09:37:fb:9a:f4:e6:7c:03:65:08:
73:c2:ef:ca:f1:7c:39:f2:00:6a:ff:51:31:f4:c1:bd:0c:31:
08:8d:92:e9:ab:a0:e9:73:22:03:63:be:40:f7:af:01:f0:2a:
66:9a:b5:33:c9:9e:a8:41:17:74:b3:a9:af:0e:77:39:9d:93:
57:9d:e1:c5:c4:b8:0d:ab:b8:1b:30:ec:ab:c4:80:e2:80:78:
ce:73:72:7c:93:df:ee:e1:29:0c:20:6e:03:b4:be:67:ab:2b:
6f:eb:dd:32:38:ba:d7:45:5c:5e:7a:ee:e9:df:af:e7:56:e0:
7b:dc:20:45:c3:ac:40:b0:de:ee:a3:4b:5e:20:b9:41:77:51:
cb:69:2c:07:c9:d9:6b:ea:e2:95:a3:28:91:f5:78:04:a0:3b:
a3:20:84:d8:92:f3:8b:68:32:b9:99:46:4b:98:71:43:91:ac:
85:83:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:46:58 2025 by rpki-client