Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: gQ5o1xA7NaY6GOlJPVZbT5Qs+5g7X+cIOcK6Mo1Ol8A=
Subject key identifier: C1:86:3D:E8:83:D1:44:6F:F9:0C:3C:4F:A9:7F:8A:CB:FF:D6:BD:A5
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 01984B5352881E1FE03B790533ADBED163C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0A19
Signing time: Sun 27 Jul 2025 10:00:08 +0000
Manifest this update: Sun 27 Jul 2025 10:00:08 +0000
Manifest next update: Mon 28 Jul 2025 10:00:08 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: c924xszMy9yZLZKVj0PpZPdg3pQMFyiMjAOJ0dSHwwU=)
2: Ve2RrvNi_87VDfl21Lq8fKe-sYc.roa (hash: Bwg7wRCqbsHk5Pn4Ah5pnRiyg8rpwcrSFyOQ2YGllyY=)
3: nc0QnNEGuF1kLi9w3egLsBhEL6Y.roa (hash: KWBWDWBG7Sj1CyJ1paoXUYeG29P/pnqgE+4DRW4DIYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:52:88:1e:1f:e0:3b:79:05:33:ad:be:d1:63:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Jul 27 10:00:08 2025 GMT
Not After : Jul 28 10:00:08 2025 GMT
Subject: CN=c1863de883d1446ff90c3c4fa97f8acbffd6bda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:1a:dc:5b:8b:43:3f:62:bd:50:20:9b:1f:
8f:6d:cb:8c:a0:39:79:f2:f9:1c:53:c3:2b:49:ef:
f7:26:72:e8:3e:74:be:29:33:16:32:d5:2a:c7:a3:
dd:4d:ff:ad:67:ee:16:8c:0e:b2:8d:97:fc:5e:ef:
46:39:a1:fd:af:18:24:90:3c:68:17:1a:fa:f8:54:
78:a6:2d:c6:bb:32:72:4a:9f:30:2a:9c:94:93:55:
13:48:6f:ed:28:cd:ce:d6:95:45:ab:b5:2c:30:f9:
e1:98:b3:e8:c7:20:be:97:14:f3:6a:8c:48:f0:c4:
ad:02:b1:c4:3a:04:71:a7:b8:85:9e:0b:80:c1:04:
f1:59:62:e2:e9:60:58:4d:ba:f0:21:f3:c6:9c:25:
fa:5c:d6:84:b3:24:42:78:85:eb:fe:e8:d8:24:18:
6d:6b:cf:4d:f3:9d:06:9a:2a:1a:ba:88:e3:8c:49:
4c:8f:d8:a4:04:33:77:5a:f3:2b:4b:99:77:43:67:
e9:3d:4c:69:df:4a:75:8a:69:81:d7:df:42:c6:c0:
56:b9:5b:98:96:d4:82:e6:03:50:3f:77:02:a9:97:
b2:77:8b:bf:82:4e:dc:cb:81:b4:ac:47:7b:b2:b1:
f8:ed:b2:5d:31:07:b8:be:97:c3:de:24:52:72:f4:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:86:3D:E8:83:D1:44:6F:F9:0C:3C:4F:A9:7F:8A:CB:FF:D6:BD:A5
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ee:6f:85:aa:c9:cf:55:f7:78:bd:a0:3e:ab:66:89:9f:60:
49:ae:2b:e0:52:4d:b1:f7:4e:b7:5a:24:30:4a:26:19:38:30:
66:0d:7c:16:55:4e:7e:9b:8b:3b:e9:fe:50:92:ee:21:44:f4:
fe:a5:19:31:50:6a:2e:56:e6:2c:a5:4e:08:dd:fa:02:ff:e1:
0d:bb:3a:32:26:d2:56:9b:1c:9e:a1:6a:72:17:d8:6f:89:17:
c2:78:85:78:d9:3e:a9:1d:41:3f:a1:ff:8b:83:41:48:b4:c5:
cf:04:df:3a:4c:d8:08:53:ef:d2:d8:fb:b5:eb:02:35:2d:80:
3c:11:2c:37:6d:94:60:a4:4b:9e:45:e3:34:4f:db:42:2b:10:
16:1c:71:43:9a:ca:24:79:03:93:5b:33:d6:9f:32:30:ef:70:
e4:16:67:2b:92:53:bd:1d:26:3b:2f:fc:c6:d6:48:b9:7a:25:
6d:7a:e0:c5:8b:91:1c:2a:b6:68:be:b8:2d:5f:35:b0:c2:df:
fe:0d:4d:f9:0f:e3:74:01:2c:0a:c9:f1:85:40:8b:5f:e6:2c:
3e:86:91:dd:d7:2f:40:1d:a5:fb:84:fb:c1:d8:0a:7a:79:a6:
8d:5e:db:f1:f1:f2:ef:13:1e:22:07:72:57:08:49:ed:0d:70:
a8:a5:88:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:13:32 2025 by rpki-client