Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
File: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft (raw, json)
Hash identifier: 7Mchn4xZxXfzDS2l+2TMIu1QxZy4cOFOhTBcpWzp3SQ=
Subject key identifier: 19:E9:6B:BD:0E:82:4D:7F:AB:AD:11:19:16:C8:AE:F0:FA:0F:7E:99
Authority key identifier: D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
Certificate issuer: /CN=d291741252bb9c4cda80047dfb01ce98c219d180
Certificate serial: 0198518D177F04E8E7D7F7F43BF79DF72F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
Manifest number: 14B9
Signing time: Mon 28 Jul 2025 15:00:57 +0000
Manifest this update: Mon 28 Jul 2025 15:00:57 +0000
Manifest next update: Tue 29 Jul 2025 15:00:57 +0000
Files and hashes: 1: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl (hash: KFN/J1EJmO1h7emJJWPMyyV2G7OyRTkbIrQzhIJRoAA=)
2: 24F3NWEaUDo-ywzWotAmlAOE0aY.roa (hash: ERf1+Eo8kcPOcjF9iXtlxaEqblrqJRaC4jpu9Wj4DSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8d:17:7f:04:e8:e7:d7:f7:f4:3b:f7:9d:f7:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d291741252bb9c4cda80047dfb01ce98c219d180
Validity
Not Before: Jul 28 15:00:57 2025 GMT
Not After : Jul 29 15:00:57 2025 GMT
Subject: CN=19e96bbd0e824d7fabad111916c8aef0fa0f7e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:54:7b:78:ec:0d:8b:68:c1:af:bb:97:96:4a:
c3:ff:f3:28:85:a3:05:fc:a6:1b:5f:1a:f9:3c:4e:
8d:93:3b:f0:f2:50:71:3f:d9:33:1d:55:00:73:8e:
f4:9c:5c:f1:2f:58:d5:53:c0:9b:95:16:85:04:12:
f7:cc:a3:6e:ec:b2:ad:75:55:cb:91:c7:6a:ae:55:
3d:f2:f8:85:27:89:8a:64:99:82:46:47:58:72:66:
68:33:3b:ff:d0:95:e0:fc:37:06:9b:ef:64:7d:9a:
e2:e4:49:5f:87:4d:0e:70:30:6e:f0:50:73:31:a8:
62:ef:11:df:47:1a:0e:c1:a5:d1:8b:7e:d4:4b:61:
0e:0c:53:8a:ba:09:9b:fb:a7:54:ff:57:f6:39:73:
f4:5e:18:e3:53:cd:40:03:a8:69:a9:d1:f1:83:8a:
85:c8:83:45:f7:c4:d6:b8:23:0b:07:ec:43:55:d8:
75:d4:c2:4c:bd:17:c1:91:90:ba:24:c5:09:50:4c:
55:85:56:bf:ad:cc:4d:86:ee:b9:93:2b:98:f0:3d:
dc:04:3b:8b:76:1e:a3:23:e2:9f:a0:95:38:73:2c:
2e:f3:77:d1:7f:eb:29:d0:d3:48:3d:83:81:7c:4e:
35:76:e4:87:6e:45:50:a8:51:75:fb:64:21:cb:28:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E9:6B:BD:0E:82:4D:7F:AB:AD:11:19:16:C8:AE:F0:FA:0F:7E:99
X509v3 Authority Key Identifier:
keyid:D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2c:1a:35:57:5b:6f:0e:a1:56:63:ef:a2:6a:ff:0a:18:07:
21:e0:5d:ab:49:0e:26:19:83:3b:01:bb:43:06:cd:da:bf:16:
7a:9b:74:e4:e9:c2:05:44:ef:17:2e:ff:ae:8b:6d:3e:35:7c:
c4:6e:36:5a:27:78:b5:1f:d8:a4:86:eb:48:dd:93:e9:d3:a0:
69:75:6f:13:d1:20:db:83:e9:a7:80:94:c8:fb:58:1b:04:c7:
b8:3d:76:0e:5d:5a:63:5d:83:ca:8b:9a:6b:85:aa:e7:15:31:
d7:fb:f1:ed:9e:87:9d:aa:a8:14:16:a8:e8:c0:11:5c:18:bc:
d9:4d:0e:2a:f7:e9:a1:3f:c8:9a:e9:5e:5a:40:04:18:c9:d7:
59:45:a7:03:a1:56:a1:5e:71:c3:5a:a6:76:7d:65:e6:1a:f3:
9e:05:71:23:3e:4e:5d:0e:92:81:41:90:9f:41:72:1b:01:a8:
84:b7:90:f0:a6:02:e3:2c:56:99:fc:9c:1c:67:90:86:95:e3:
94:2a:07:3a:d6:34:79:29:68:b7:38:43:55:2c:e0:5b:e1:f8:
46:0a:95:7a:5a:0a:e9:21:6f:a8:71:1f:2a:01:b3:98:60:1d:
ab:4b:b5:59:50:d8:59:cd:f7:79:33:b2:5c:a3:7f:4c:a2:a0:
3b:76:5b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:27:29 2025 by rpki-client