Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: 2G7VYjGBYr9e7p+zGkVezBjk45NPcB4ozEDB6qaANIw=
Subject key identifier: 47:85:2C:CC:94:4B:D8:65:45:48:01:13:EA:6C:02:E8:D9:36:09:E9
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 019924B209E96327EF53754172CED815BA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 0183
Signing time: Sun 07 Sep 2025 15:01:11 +0000
Manifest this update: Sun 07 Sep 2025 15:01:11 +0000
Manifest next update: Mon 08 Sep 2025 15:01:11 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: 1oiVD0bzQLpK9OlpqWcjCRv9cwgdBnDqlxrciJdAN5c=)
2: Tdi0Hj6bQsB2NE33pvFHyR4UnH4.roa (hash: QY4nN2KRRzSRBGH5wO5xXZyBIH3qA69otudacqD4SWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:b2:09:e9:63:27:ef:53:75:41:72:ce:d8:15:ba:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Sep 7 15:01:11 2025 GMT
Not After : Sep 8 15:01:11 2025 GMT
Subject: CN=47852ccc944bd86545480113ea6c02e8d93609e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:dc:5e:9e:d9:06:3d:91:9b:eb:f2:54:f4:
83:f5:49:6e:51:ed:e1:f3:bb:df:4f:ff:23:dd:58:
76:ec:ab:6c:84:9e:ce:f7:9a:a8:b6:10:13:64:3b:
9a:28:70:fa:f0:8d:57:c7:31:9c:03:78:c9:5e:a3:
07:fa:6d:d0:ed:4f:3b:41:75:d9:11:d4:4a:b3:bf:
1d:68:e2:aa:92:6e:fc:ee:4e:7e:bc:3b:0a:7e:37:
ee:95:66:30:7d:a9:09:9f:5c:42:11:52:ee:a6:a3:
7e:17:e4:9e:51:81:9e:dd:75:c5:55:d0:2a:7f:64:
cd:86:de:bb:59:29:95:57:dd:ec:b6:af:f5:fe:c7:
01:36:5e:be:f5:6e:08:10:6b:06:e9:ba:b0:03:28:
8d:e5:e8:46:3e:45:90:82:2f:bf:75:f0:10:e0:16:
94:86:23:1f:7c:25:48:15:54:ee:7a:f8:b1:f3:e9:
c8:e5:d7:72:86:75:c0:70:e5:36:5a:86:84:7b:c9:
3b:be:8c:c2:b8:77:54:35:ca:25:4c:34:a5:03:f2:
51:a2:ee:c2:f9:d6:56:86:6b:4e:7e:90:aa:49:41:
1c:59:f7:91:6e:de:09:3c:08:cb:26:58:ac:67:0f:
f8:a3:c1:ac:9b:94:0b:22:67:cd:63:31:65:a3:4e:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:85:2C:CC:94:4B:D8:65:45:48:01:13:EA:6C:02:E8:D9:36:09:E9
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f8:13:4f:6f:b6:79:77:9d:d1:3d:42:6d:17:64:ba:9d:bd:
25:b1:1f:d4:61:d4:20:f1:84:a0:eb:aa:9d:f8:6b:80:0d:18:
ee:d3:39:ad:b4:16:bb:42:24:af:e1:a3:ec:ea:08:87:b6:16:
8e:23:f9:50:06:a7:30:ab:d9:46:65:35:5a:60:0c:06:6b:9f:
99:18:65:0e:f2:c7:62:f1:fc:2a:6b:2e:a4:5b:9b:36:ef:1b:
46:35:35:b5:06:14:87:b8:01:52:fb:03:c7:32:34:24:e4:ad:
c5:ac:b0:7f:b6:c4:d6:92:cf:5c:c0:5c:9e:4d:a1:1b:2a:25:
68:78:74:05:d1:3f:3d:a5:20:55:d2:60:19:46:4d:c8:02:07:
ba:3e:11:d6:64:1b:09:26:b8:9f:49:bb:59:30:a9:17:b6:b9:
87:59:3f:e1:87:1d:c1:93:bf:de:db:21:02:a1:5d:4c:51:44:
2a:4b:30:e3:a0:f0:9f:ff:b8:e7:b5:10:e3:7a:ae:b3:2b:b4:
e1:d1:91:b4:64:b3:d3:62:39:5e:d2:d6:9f:ca:23:75:4b:32:
a1:23:5a:ef:7e:77:31:f9:cc:f6:52:c9:6c:8e:d3:da:8b:e2:
9c:4d:65:db:b3:04:96:b8:d6:a9:9b:bb:8f:d6:8c:f1:11:f6:
ca:98:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 23:03:33 2025 by rpki-client