Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
File: iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json)
Hash identifier: V6BGDTD7B9twJaGRpnlk4WmxC6iYc7WPBZt1DPFCU5M=
Subject key identifier: 0E:72:76:06:3E:06:38:CA:8C:32:37:AF:3C:88:B4:E2:4C:56:4C:FF
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial: 0199228D2727569356D3169EA41486CF4427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
Manifest number: 0D1C
Signing time: Sun 07 Sep 2025 05:01:39 +0000
Manifest this update: Sun 07 Sep 2025 05:01:39 +0000
Manifest next update: Mon 08 Sep 2025 05:01:39 +0000
Files and hashes: 1: UubezK0uH4JLqxbhgPEY0N-6nSw.roa (hash: Oagl7z5x1jSe2CWCzxXuth3kqDf2dweMIxQL2+jadVg=)
2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: PFbsor2p15cW4alzOczP6alXIRamm1cMT/KsBvUp7K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:27:27:56:93:56:d3:16:9e:a4:14:86:cf:44:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Validity
Not Before: Sep 7 05:01:39 2025 GMT
Not After : Sep 8 05:01:39 2025 GMT
Subject: CN=0e7276063e0638ca8c3237af3c88b4e24c564cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:f4:37:b3:83:b9:ba:f7:90:d0:f5:f8:8e:
73:dc:52:02:1f:d9:8c:ef:21:64:ad:90:e4:e5:8b:
09:38:0d:77:dd:66:be:05:0a:51:0f:4e:d0:52:e5:
68:e6:5a:a1:36:77:e6:b6:80:1c:8f:d0:f4:17:d9:
c9:82:dc:2e:10:c9:dd:0a:58:df:20:33:88:a7:7f:
46:02:4a:08:ec:4d:88:69:e5:f8:af:27:13:7d:df:
ac:78:ab:b0:8d:7c:b0:ae:bd:9e:51:1a:5f:7a:43:
2a:0b:7e:d8:8d:70:71:d2:8c:8d:39:50:9d:60:bc:
3b:d5:94:92:51:f8:04:5d:a5:c7:ec:4c:bb:f8:2e:
8e:1d:8f:04:b2:c3:e5:de:d1:1a:6b:97:9d:0c:c6:
4a:2e:b4:c3:ff:4f:28:59:24:24:75:4b:b2:ff:7f:
95:38:e9:ae:bd:6c:16:86:f9:af:fe:be:71:31:f5:
c9:c3:7d:5b:0e:9a:b5:ef:9a:70:15:e4:b0:09:98:
4a:f7:de:2b:65:0c:94:a1:25:11:e2:39:f0:44:06:
35:e7:41:13:fe:ad:e2:c8:00:43:7f:04:28:fa:f4:
d4:91:2e:40:65:96:70:1a:be:ca:9e:64:fa:00:b6:
14:9c:e4:6e:bb:53:f4:82:f4:9c:13:44:39:13:5f:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:72:76:06:3E:06:38:CA:8C:32:37:AF:3C:88:B4:E2:4C:56:4C:FF
X509v3 Authority Key Identifier:
keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:49:21:6e:ff:3b:ec:a1:b2:72:cc:3c:65:99:11:13:65:c0:
29:e0:16:22:02:3f:dd:67:e2:64:1c:1e:f0:70:c4:7d:e9:65:
c6:e0:55:b8:10:4f:d0:13:ea:2b:de:04:e9:bd:f3:10:51:ea:
d6:1f:7c:44:39:10:ee:9f:31:fb:5e:27:1c:3f:4d:0a:f1:38:
e2:25:5f:67:c2:42:4b:18:f0:f8:b7:e5:25:d3:0a:56:38:67:
3b:df:05:d8:2e:de:e9:41:b6:0a:60:2a:46:55:b0:f4:1a:9f:
02:23:68:e6:0e:7c:d9:9e:6f:d5:51:a7:2d:1f:6f:69:48:fa:
5a:c3:f0:4a:3a:8f:13:e7:41:c3:95:95:b3:bc:75:44:3a:1e:
f4:25:58:2d:ab:f7:61:ee:1f:b0:68:4a:ec:00:49:1b:b8:fb:
3c:82:08:24:5c:d9:cf:65:82:58:25:19:6c:80:30:4c:07:15:
76:6c:e7:4e:50:1a:36:bd:40:be:1c:19:74:ff:e8:75:be:02:
16:93:e5:e4:cb:0c:13:de:85:38:f2:89:7e:ba:eb:7a:f7:21:
19:05:9a:42:93:11:b9:9d:97:31:0a:92:cd:75:28:5a:6b:3f:
11:e5:13:cf:7d:82:66:fe:72:3f:22:b5:f7:08:a2:df:8e:f0:
bc:be:0b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:00 2025 by rpki-client