Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier: TPnhLSKiyNE8HmNAhjTlCHuXWz2Wo8ypHQ1xPVbpDk0=
Subject key identifier: 41:E8:51:38:2B:EA:41:A2:7A:DE:A8:22:66:CE:80:29:F4:C5:5A:15
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019922FAA8CDAB9632C5B7A202599CC38C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 07:01:16 +0000
Manifest this update: Sun 07 Sep 2025 07:01:16 +0000
Manifest next update: Mon 08 Sep 2025 07:01:16 +0000
Files and hashes: 1: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: f3GOv+5nWxSiFxVBqNHNKx7az68zx9ooNah45Wd/zIE=)
2: HMJLEkPGlr7x44aeMyDl-iD3-H0.roa (hash: L+qMMZpme30javZoQJKYZdKfiPeTzWKpuVRpIrhWgDs=)
3: Ti73dcIrlh5auWtScVzVwqOqQSk.roa (hash: bD54N27Ykt/wu2s+Dy6sKxGGg/cuSXB3DUKzM/XaSZM=)
4: YMTxPOuM97EplT8sh2WGlcFfkOw.roa (hash: D8L0sd2jitS16w93ripM0wnGDM02PZl2ly5UPGD5e0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a8:cd:ab:96:32:c5:b7:a2:02:59:9c:c3:8c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Sep 7 07:01:16 2025 GMT
Not After : Sep 8 07:01:16 2025 GMT
Subject: CN=41e851382bea41a27adea82266ce8029f4c55a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:e9:0b:36:3d:51:89:c5:2d:0c:e7:71:8d:
17:fb:6d:7b:41:d8:10:d9:35:36:d4:f2:f2:de:8a:
b6:40:9c:2f:00:b7:7d:aa:4c:1c:ee:58:9a:f3:0c:
81:aa:37:48:69:5e:8d:70:b8:73:50:aa:92:dc:27:
3f:d7:18:1e:a6:26:a3:f5:25:cd:51:ef:ac:de:b3:
f5:4b:e7:72:b8:14:7e:4c:36:3d:55:5a:2b:5b:5d:
cb:1f:8d:c5:50:de:ff:cc:73:6e:47:24:f5:39:7a:
11:8b:2c:c7:8e:e7:17:63:51:25:82:75:3d:51:b7:
9b:9f:ca:4b:1c:60:be:52:f9:eb:21:3e:87:d7:15:
4b:dc:d2:2f:84:48:dd:25:e1:32:84:81:35:54:b5:
11:49:3f:b1:63:d9:d8:35:4e:f9:1f:22:a4:81:66:
93:6e:d8:7b:6f:20:10:cf:b5:c1:f2:0d:c4:48:1b:
2f:b1:7d:8a:4e:12:91:18:59:1d:cf:66:a6:ff:5f:
a5:ea:f7:00:ea:0f:7a:2b:c9:86:3d:dc:63:ad:2f:
81:8e:34:73:b9:dd:98:da:03:45:7b:d6:d1:6f:ae:
83:42:6e:81:c7:45:57:f6:aa:38:e7:f9:6a:9c:47:
ea:4e:95:95:4b:0e:46:39:28:68:61:74:b3:c9:92:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:51:38:2B:EA:41:A2:7A:DE:A8:22:66:CE:80:29:F4:C5:5A:15
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2f:1b:25:43:76:3d:10:d2:d7:f6:ff:12:a6:f3:8a:50:cd:
e0:33:c8:3d:b2:0f:2a:61:a2:98:60:71:ca:76:73:a2:0b:0c:
bb:49:32:e5:e5:aa:58:bb:2e:18:72:a0:59:a2:4f:a1:6d:95:
f0:89:55:ce:3b:8c:3b:ea:c3:cc:d4:aa:01:6c:9c:f4:17:35:
46:ba:86:97:fd:36:6c:54:f7:03:dc:a4:85:b3:fd:57:39:dc:
e0:32:e9:cd:06:57:b1:6b:fc:a2:9d:f6:ba:9e:aa:d4:9d:ad:
c7:f1:3b:07:d4:fd:fc:01:0a:24:d7:49:7d:d5:4d:2e:0a:1c:
75:13:e9:e6:9d:db:a0:5f:bd:5b:9a:9c:e9:18:d8:06:a8:e1:
4d:8b:91:21:c3:52:9d:df:9f:f4:39:c4:82:c7:75:db:2f:67:
b6:e2:77:16:e3:f7:90:6e:69:30:7d:7b:d3:ff:9d:e9:60:e6:
62:47:5a:8f:5d:f7:af:f3:d8:62:1d:df:67:dd:0c:21:27:fb:
27:b5:64:6e:ef:00:84:62:5d:a0:12:4a:21:67:d9:7d:7f:ba:
a5:46:b6:8a:49:55:70:0d:b8:db:90:a8:88:02:fd:ce:7c:70:
61:f5:eb:4c:55:7d:9f:c4:21:87:f4:b1:97:34:34:30:12:7a:
27:87:bf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:23 2025 by rpki-client