Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: 30tmwstyNuAFMnLoWN5AGjptCRpcAVjtv0ThmYNGuIU=
Subject key identifier: EC:EB:62:91:DC:DA:0D:B2:95:03:BE:C9:C1:53:7E:41:33:F9:40:8D
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 01993914F7D8C307BB667C337F423CD085D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 03AC
Signing time: Thu 11 Sep 2025 14:01:39 +0000
Manifest this update: Thu 11 Sep 2025 14:01:39 +0000
Manifest next update: Fri 12 Sep 2025 14:01:39 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: 2DIjce2IBljsJhqRezTAGJjjPCeCr+N4JSUhadRTOZs=)
2: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (hash: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=)
3: QT2bGKmHREGB3-sqEAhjlcIYXXI.roa (hash: lsIhMN9LkDQx5Xr58fqlkjIVmBAb+8AMBjPiPSb4cQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:14:f7:d8:c3:07:bb:66:7c:33:7f:42:3c:d0:85:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Sep 11 14:01:39 2025 GMT
Not After : Sep 12 14:01:39 2025 GMT
Subject: CN=eceb6291dcda0db29503bec9c1537e4133f9408d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:27:b9:27:76:90:5b:0d:81:c2:27:ab:36:d2:
cd:b0:2e:50:be:4c:e2:77:be:b4:8c:f0:92:17:17:
35:9b:25:45:d8:50:41:ca:e9:68:1e:23:68:7c:9d:
83:fd:9d:b4:20:44:af:45:e6:32:4f:1d:ff:19:5a:
6c:ce:43:a1:8e:98:b1:ac:01:1d:18:40:31:8f:92:
58:c3:1b:52:60:51:6b:8e:83:d4:c0:bd:ae:fd:c7:
02:7a:52:79:29:fb:68:f8:96:af:a3:63:45:e4:26:
17:a5:c9:f4:04:16:89:28:2a:b8:be:d9:ea:3f:99:
32:e9:71:b0:90:7e:d6:7b:d5:99:be:40:79:ac:23:
7c:16:37:6c:19:09:8b:87:42:51:95:8a:e4:8c:bd:
46:07:af:91:16:43:c3:24:16:95:dd:74:b3:cc:e3:
6e:20:d4:f3:46:da:18:a2:0d:0c:6f:9d:d4:0a:31:
75:ec:63:02:43:2c:7e:5b:5f:a1:50:04:51:2a:3a:
3d:95:00:4c:41:54:bd:38:b0:e7:65:9c:99:bb:53:
f9:e0:2d:8f:6b:ec:0e:e1:f4:ac:25:8e:97:58:b9:
f4:c3:b6:a7:0d:51:1d:7e:9c:f3:7d:2d:de:34:93:
a6:82:7c:98:38:87:21:07:52:57:da:30:c5:27:20:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EB:62:91:DC:DA:0D:B2:95:03:BE:C9:C1:53:7E:41:33:F9:40:8D
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:64:45:d8:00:53:57:30:ad:7e:ce:b3:d9:39:1e:df:ea:fe:
16:83:cd:cd:b7:5b:15:97:99:fb:21:04:2d:d3:b0:91:6b:0a:
20:15:b6:3e:0b:e4:e3:e1:25:4f:82:d4:4e:8c:10:4b:eb:0d:
1b:e9:4c:cd:12:2f:f0:69:4c:67:ed:3e:5c:59:81:be:24:56:
25:96:f7:7d:c8:d5:ff:37:28:5d:22:65:21:6b:77:24:9f:da:
82:2f:4e:bb:b3:c9:83:6b:e4:fb:fb:8a:90:49:f4:2f:76:ea:
5a:73:3e:2f:d2:5b:c6:31:fd:62:21:9c:c1:e4:9a:7f:07:b7:
de:d0:01:87:23:f8:65:6e:d0:a7:9d:f8:2b:d3:3e:13:4f:b3:
56:a0:cb:3c:61:8c:81:8b:e8:da:bd:1b:21:b7:24:0c:10:c4:
33:da:43:29:10:ee:f0:2a:4b:d3:9a:5f:ac:a5:3f:b5:13:51:
63:63:77:99:5a:fd:c8:cd:d9:fe:3e:c3:cc:bc:da:d6:f5:e7:
9b:0c:7a:d2:d0:31:ce:cc:41:de:fb:95:0b:bc:df:8c:55:2c:
a6:65:ee:be:f6:d7:dd:db:c1:89:f5:9d:47:df:5b:77:bb:93:
3d:ea:0a:92:f1:cf:2d:d1:5f:71:56:29:89:eb:67:ef:0d:84:
29:58:f8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 23:56:29 2025 by rpki-client