Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: mlWC59QDj2n9t1xwSG4rNrI2haGl2LCzmBixLcisM6I=
Subject key identifier: 4D:5A:18:D4:CE:D8:2A:CD:D4:7A:46:DC:CD:D0:CA:FC:B8:E7:42:EE
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 01993424DE500C813BF1B19E163B2074CFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 15:00:55 +0000
Manifest this update: Wed 10 Sep 2025 15:00:55 +0000
Manifest next update: Thu 11 Sep 2025 15:00:55 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: bJOSi90kLtrRszDR6fl1qNY4fAu+GLBrVDaMVWh59HY=)
2: FtQX4tz2PfNS1jDZrdtbiPoNYSU.roa (hash: M4MM/hQp8qhWYBPYsVJLPE9nJhVevNigPOSWligASH4=)
3: xpbeDPeraC0lsT88_DSzZTcvzFU.roa (hash: 7vANxALGvUHJgNJxUW1TqxLJ7J9U0tCgO5zgV2ERDWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:de:50:0c:81:3b:f1:b1:9e:16:3b:20:74:cf:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Sep 10 15:00:55 2025 GMT
Not After : Sep 11 15:00:55 2025 GMT
Subject: CN=4d5a18d4ced82acdd47a46dccdd0cafcb8e742ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:97:b0:03:a0:60:38:1e:b9:b2:76:2a:3d:
94:39:d3:02:92:3a:24:5a:69:0c:d9:f9:8f:f8:fa:
b7:b1:7a:05:6f:6d:08:2f:2c:61:b9:f2:08:d2:4c:
2a:da:e9:04:e8:8a:52:7c:0b:ab:4b:9c:ef:9a:f2:
7f:30:29:2f:46:dc:23:63:ea:b3:64:96:ba:bf:ce:
8b:ae:b6:b8:38:86:68:0f:28:ef:94:cc:e0:b1:d0:
88:e8:d2:a1:26:1f:e3:fe:cd:b1:ed:e4:77:d7:22:
de:70:4f:59:b7:c6:60:a2:df:1a:25:de:ed:1f:ee:
c0:26:80:43:7d:90:4f:8d:45:a6:45:cd:57:61:90:
59:f7:b7:2a:5d:8c:01:32:06:ff:4c:a4:02:e3:1c:
21:76:eb:18:8f:ea:34:19:ea:1d:14:81:1c:5f:d7:
d6:a8:eb:ab:fa:a5:c5:27:3a:8f:e9:46:65:00:3b:
e0:c1:f8:12:1a:41:12:d0:61:1c:ee:76:28:e7:66:
cb:6e:81:38:56:04:2a:66:c6:3e:07:af:12:35:8f:
45:28:ea:64:51:82:aa:cf:3e:ee:14:f2:cb:5b:0d:
ef:e1:6b:78:f4:23:a5:a3:8b:4e:ef:2f:c3:21:c6:
49:aa:2e:4f:bf:45:5a:29:de:8b:e1:ab:03:69:10:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5A:18:D4:CE:D8:2A:CD:D4:7A:46:DC:CD:D0:CA:FC:B8:E7:42:EE
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:65:cc:66:e4:34:d1:c2:9f:d5:16:47:9b:cf:32:cb:08:c8:
ab:a7:18:f2:2f:bd:40:8a:67:c6:dc:1d:c1:77:db:89:ad:fc:
3e:ed:d7:09:2c:9c:7f:d4:8b:2f:ec:aa:ba:cd:8c:94:12:89:
6a:b5:9a:25:c0:0c:99:b3:5c:6c:dc:e1:42:0e:b6:3b:8b:d5:
5d:b9:44:3c:da:0f:f6:8d:fa:a7:d9:49:69:07:b8:d9:2b:2f:
6c:20:68:fa:80:d6:17:62:08:cc:62:f6:f3:99:97:db:5f:ac:
ef:a2:2d:bf:aa:7b:59:6e:1f:a9:71:c8:d2:5f:07:4b:e9:fa:
8f:84:14:00:9c:37:c4:5f:28:c5:2f:2b:35:aa:59:6b:f6:ff:
1b:7e:56:a3:ed:74:a2:e2:e9:e3:14:ce:4e:34:49:2f:3d:cb:
98:51:3d:f7:74:ec:bc:eb:f5:92:2f:88:e9:48:bb:3c:22:28:
5c:93:1a:95:41:91:2d:f2:22:f7:de:9d:7c:5c:e2:8b:d4:c8:
0b:3d:cf:b4:c7:31:db:65:63:44:47:43:7f:dc:35:c5:05:2b:
ce:4c:1e:7e:cb:4f:17:01:93:8b:1e:00:c5:cb:a6:04:ee:a6:
d4:c1:c4:e5:f7:4c:48:fb:67:08:6d:55:b0:33:38:9d:dc:a5:
06:04:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:30:22 2025 by rpki-client