Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: B0e96FI/36okmpieeTqQw4zAahE3A9fS/bFvG/IIGno=
Subject key identifier: 91:C9:56:09:D1:5E:BE:C6:50:2F:F7:A7:F5:B0:4F:39:29:53:45:D2
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 0198CA257E17589401965D04AB24CD7CD57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 1432
Signing time: Thu 21 Aug 2025 01:01:51 +0000
Manifest this update: Thu 21 Aug 2025 01:01:51 +0000
Manifest next update: Fri 22 Aug 2025 01:01:51 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: zVN7clFDbNYOOpgvMXrJ98ThQKzfUVAj4An20KdKmXU=)
2: wC7Ohmh2aveKOZ7_Cl4a1vLomLo.roa (hash: hPiN8yhRbkkwhBqX7IPJBoamojlDhfcUtcDIIbpri30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:25:7e:17:58:94:01:96:5d:04:ab:24:cd:7c:d5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Aug 21 01:01:51 2025 GMT
Not After : Aug 22 01:01:51 2025 GMT
Subject: CN=91c95609d15ebec6502ff7a7f5b04f39295345d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:d2:75:46:93:b9:3a:d5:f3:c4:f2:24:b6:
0d:45:75:63:5b:fc:00:30:dd:e8:b6:dd:3e:03:86:
64:86:bf:a7:85:94:ef:b3:cb:ac:1d:43:af:65:b2:
13:53:c7:07:b1:d3:69:b5:f7:46:c9:a8:83:ee:0b:
08:34:e5:31:e8:11:8f:ae:b5:38:3c:2a:ee:ed:48:
15:0c:42:23:d7:4c:e9:56:f4:d6:5e:ee:3b:bd:d9:
27:81:12:03:81:54:a7:aa:e3:3d:7b:39:dd:46:39:
b4:24:a5:af:c8:6d:25:ad:8e:3b:14:3d:1b:ac:9b:
e1:3b:59:14:e1:c9:30:70:db:28:a5:a7:a5:f8:48:
e8:f1:c3:b4:bb:f5:3a:62:99:9f:fd:69:2d:cb:6a:
8e:ad:cf:13:3f:3f:a5:b3:06:61:64:64:ef:20:2d:
bc:41:a1:c1:36:e6:3e:63:61:ab:fd:3b:cc:2b:9a:
af:4a:94:75:d0:44:fb:1e:3d:d8:49:41:9e:c8:36:
e1:df:ee:3c:45:27:6b:0d:d6:ee:99:2b:1b:82:05:
20:d0:dc:6d:68:e5:d4:fc:a1:8c:69:06:75:01:82:
19:64:25:29:0d:cd:0e:4f:48:1d:d6:9f:06:21:61:
58:8f:4e:af:0e:18:6f:89:c1:09:20:42:25:80:62:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C9:56:09:D1:5E:BE:C6:50:2F:F7:A7:F5:B0:4F:39:29:53:45:D2
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9d:d2:11:36:da:24:36:54:70:b9:01:d8:b5:c8:d8:f0:41:
8c:4e:93:aa:ba:af:5e:d6:bd:62:30:0a:86:04:f8:72:e3:62:
c5:a4:29:e3:84:5a:cb:df:2d:97:f4:8b:79:27:0a:f5:32:e3:
df:ae:1d:5d:43:31:c1:6f:2d:3c:e8:d6:bb:58:96:fc:c4:b3:
56:47:2c:94:98:02:7e:de:20:c8:13:de:2d:86:ce:00:03:78:
ec:62:20:6c:36:e7:04:5c:b2:6f:f0:44:c9:5f:4d:5a:5c:ac:
db:cb:4c:9d:4d:39:88:29:3a:f9:e9:07:bd:a9:a9:50:58:b9:
ec:d2:e8:8b:50:cb:52:21:01:a7:fd:50:81:96:46:33:fa:b2:
eb:b4:a9:f1:e1:1d:04:0f:ed:2f:b1:56:b9:7c:1f:e3:9b:f7:
cc:c0:42:d5:5e:ee:36:ac:1d:7e:33:0a:b0:f8:13:67:f2:62:
6c:dd:70:58:23:51:a2:91:f9:cb:1d:c5:76:86:1f:ab:74:af:
24:67:17:31:43:8b:a4:ba:1d:55:b5:05:08:dc:be:8f:91:cb:
9a:81:4d:e6:d4:2c:b9:83:40:86:fc:e9:da:d2:38:38:f6:07:
f4:dc:e4:40:2b:07:d8:7c:b3:c1:93:71:97:b8:f1:4b:fa:59:
88:15:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:43:52 2025 by rpki-client