Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier: AfDKh7cV0blPqMSQomTELqZlpXw+FkLGm1WRQt2tMm4=
Subject key identifier: 0F:34:C2:1F:F0:18:BB:60:AA:98:0A:78:8F:E2:47:A7:D2:F8:9D:4A
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 019844ACD13C37AD20A476718D053CC36112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number: 0A02
Signing time: Sat 26 Jul 2025 03:00:32 +0000
Manifest this update: Sat 26 Jul 2025 03:00:32 +0000
Manifest next update: Sun 27 Jul 2025 03:00:32 +0000
Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: nnsMmuip5Xxi4cp4tlObU9yyLL3VH/uAJS2pmEk1oiU=)
2: XLp6CpBQr9azCpsnYXzng1ufYf0.roa (hash: VoQFnds5dZA1et1XDrrDT8jx8hBkjrNF5oeGODTmq4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:d1:3c:37:ad:20:a4:76:71:8d:05:3c:c3:61:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Jul 26 03:00:32 2025 GMT
Not After : Jul 27 03:00:32 2025 GMT
Subject: CN=0f34c21ff018bb60aa980a788fe247a7d2f89d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:f7:71:3c:e2:4c:db:98:2e:48:c3:e2:01:
93:93:f8:c5:fd:74:b7:8c:cd:9e:02:65:a8:fd:f0:
21:b0:cb:4e:7e:8e:19:b3:55:d8:94:44:a8:77:b7:
85:18:d9:d7:e1:6a:15:3e:f9:0e:c4:c1:58:66:a2:
7b:8d:fe:66:3f:97:6e:83:c3:21:55:50:2a:04:01:
4c:ed:58:f4:84:f3:e4:3e:18:bc:99:7a:88:47:37:
45:f6:c6:18:59:d6:31:5b:e0:68:da:2d:5f:5e:fe:
22:bc:46:ae:97:67:97:7d:98:3d:d0:51:3f:3f:2d:
ae:68:45:5a:bb:ba:b0:15:81:06:c7:77:2e:9c:9c:
4a:d4:4d:ec:1b:9c:2a:d5:25:7b:a9:c0:47:50:24:
47:02:0f:73:78:d0:62:54:00:9b:ee:82:9f:60:54:
c6:e3:0e:d3:fa:bf:76:ed:4e:79:dc:3b:c4:27:07:
12:31:7b:be:f7:5b:1f:56:fa:54:d8:69:73:61:c2:
fb:7e:6c:35:01:c6:68:2c:77:83:fe:dc:b3:03:03:
fd:c4:f5:01:cf:85:b4:57:51:cd:47:b0:fe:e5:0c:
4f:fc:cc:87:a0:c7:91:cd:64:35:17:b4:ca:f9:1e:
39:ae:1c:2a:c6:d9:6c:01:a0:ea:eb:8f:f0:4c:a2:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:34:C2:1F:F0:18:BB:60:AA:98:0A:78:8F:E2:47:A7:D2:F8:9D:4A
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8e:05:29:bc:22:9b:89:05:ca:83:2e:87:58:0a:c9:cf:07:
31:08:2a:26:1a:e0:3d:55:62:7e:f6:f8:0d:f9:f5:7e:64:7e:
41:de:53:b4:f5:8c:31:9a:75:55:6d:08:da:83:9a:22:4a:12:
f4:a3:e2:5f:4b:2c:c9:a1:93:e8:94:ff:d5:7c:f5:7a:46:0b:
76:5e:eb:dc:b7:b9:2b:fb:ba:c1:66:f5:b1:a6:04:38:73:7d:
73:80:50:e2:57:a0:6b:a2:06:4b:7f:3f:1e:b6:10:07:02:a4:
d7:40:e1:7d:8f:a7:8b:87:73:dd:5d:41:32:20:1b:09:cd:bc:
82:3e:d1:ee:38:0b:69:24:95:d3:51:42:36:52:60:d0:10:a9:
b6:3c:61:2a:4e:67:cd:a7:54:0a:5b:85:35:4c:0b:22:26:17:
e0:a3:e3:1c:32:7c:79:89:62:1c:6b:93:fb:10:bd:35:ce:42:
14:a7:11:b6:4d:d2:aa:12:38:70:24:02:dc:ca:cc:fe:d5:aa:
98:05:b5:0d:6c:27:01:d1:89:6f:c6:d8:05:f6:cd:0f:42:05:
5e:57:e5:ce:e4:d3:d4:eb:38:17:e9:f7:e8:fb:03:25:a8:87:
90:f6:1c:ad:50:fc:04:11:59:b1:c3:dd:7c:e7:e0:a7:fb:b0:
ab:e3:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:41:26 2025 by rpki-client