Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
File: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json)
Hash identifier: AgeuYsuv9NjAgJIAqz7TOCxS46pK9LPNkGudcOsnV3U=
Subject key identifier: 42:02:63:51:BC:B3:B5:D8:60:53:E2:D6:DB:68:49:F8:F4:0A:EA:BF
Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
Certificate issuer: /CN=d217978586bff3a6777d55a9a9635841516d43b4
Certificate serial: 019922C37165FF12CFD5A1FC9D25B108D1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
Manifest number: 0C05
Signing time: Sun 07 Sep 2025 06:00:57 +0000
Manifest this update: Sun 07 Sep 2025 06:00:57 +0000
Manifest next update: Mon 08 Sep 2025 06:00:57 +0000
Files and hashes: 1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: 1T7gOqkbjZGGHp+hagIBwUNkwy9z8jombruTmnd2edE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:71:65:ff:12:cf:d5:a1:fc:9d:25:b1:08:d1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4
Validity
Not Before: Sep 7 06:00:57 2025 GMT
Not After : Sep 8 06:00:57 2025 GMT
Subject: CN=42026351bcb3b5d86053e2d6db6849f8f40aeabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:e9:78:d9:bb:c8:a9:5f:ed:4e:ae:56:10:
9b:a3:62:f1:19:99:a6:32:54:36:10:1d:9a:13:d0:
31:e9:5e:37:62:8d:9d:e9:6c:3a:95:e7:5f:e3:46:
6e:73:17:62:42:dc:21:d2:89:8e:9b:9b:c1:60:ac:
f9:64:07:07:85:be:29:95:6b:e1:77:92:7b:94:98:
3a:9b:54:ef:3c:7b:f8:47:6c:11:ba:cc:17:35:02:
38:9a:21:2d:35:d2:99:1b:38:c6:3e:27:ae:33:89:
d8:a4:f6:44:d7:f1:09:b9:1c:b9:e2:50:58:83:38:
64:15:b8:1b:3b:16:5b:7b:fc:b4:7a:d7:46:25:ad:
cb:3c:a3:c5:6a:06:28:0d:df:16:a0:9d:60:b4:6e:
36:36:16:3b:07:f0:19:31:25:06:0c:42:83:ea:61:
e2:3c:ab:4b:67:e7:a4:57:39:17:37:ea:7e:f2:e8:
45:f5:70:79:2a:23:ac:60:67:2a:b4:0b:41:eb:a7:
c1:9e:7c:c6:89:a9:67:d8:36:3b:89:7f:8a:ba:5f:
5a:8d:49:ca:e7:13:81:a1:cf:71:ea:b1:a1:22:7f:
46:fd:92:9c:5d:ad:5f:a7:9b:6c:dd:7c:57:4d:ec:
24:1d:4a:24:d6:d6:51:40:0b:46:82:40:04:a0:7a:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:02:63:51:BC:B3:B5:D8:60:53:E2:D6:DB:68:49:F8:F4:0A:EA:BF
X509v3 Authority Key Identifier:
keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:55:6e:95:86:aa:b6:d6:80:65:94:fb:52:3e:4d:a1:6a:85:
e3:8a:4a:ce:f8:be:8b:ed:04:3a:70:cb:ce:f2:14:43:a2:59:
79:ec:01:46:42:3a:6e:ac:0a:9c:82:7a:ba:44:24:a0:39:be:
ba:46:92:a0:55:30:2b:6a:e0:1a:7c:c3:36:8a:06:38:b6:64:
ab:d5:77:d3:41:77:d9:cd:73:79:bb:08:09:56:bc:c0:cb:1d:
58:a1:5b:a4:df:78:ed:d9:20:3c:71:04:f4:53:2d:ec:d5:44:
b4:68:03:a7:56:09:03:a8:27:ca:f3:0d:ab:6a:f7:a1:53:f1:
17:5e:04:1c:fa:79:fa:84:97:1e:a1:02:e3:08:16:b2:73:37:
68:29:b6:b7:94:72:26:b6:47:28:29:a9:02:80:68:bf:49:6c:
2f:bf:e6:3c:2b:c3:8b:1b:46:de:35:68:98:50:11:5c:f3:3a:
95:53:d5:c8:37:3a:9c:f6:b3:21:cc:74:62:9f:e5:f2:88:df:
a4:7d:09:15:18:01:6c:de:f6:4a:07:ae:4c:f1:61:a8:b1:e6:
4c:bf:13:1c:21:3e:32:78:35:05:a4:dc:94:99:19:76:75:38:
fc:3f:07:1d:7e:b2:3b:49:6d:7c:21:61:45:5e:ed:17:ff:f2:
05:45:2d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:23 2025 by rpki-client