Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File: 0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier: /d9JTROzhS5DHpKvKpES1cxrc7em3R/6iRYXS/LSLKA=
Subject key identifier: FE:4C:72:CD:13:44:20:0B:45:36:85:A1:44:59:95:8E:7F:87:62:B4
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer: /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial: 0199240DB05D8F472DFC81F656F4866BF040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number: 0FDA
Signing time: Sun 07 Sep 2025 12:01:40 +0000
Manifest this update: Sun 07 Sep 2025 12:01:40 +0000
Manifest next update: Mon 08 Sep 2025 12:01:40 +0000
Files and hashes: 1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: Sc7fpkO/7sEmZTxEBtvOJKxkYrQy0zWAR/m8WUpaCGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:b0:5d:8f:47:2d:fc:81:f6:56:f4:86:6b:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
Validity
Not Before: Sep 7 12:01:40 2025 GMT
Not After : Sep 8 12:01:40 2025 GMT
Subject: CN=fe4c72cd1344200b453685a14459958e7f8762b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:a6:4a:57:d3:f1:35:e3:68:79:60:f1:b1:
f1:49:2e:13:44:90:29:72:6a:3c:12:1d:d3:81:79:
7e:f6:04:49:4a:f4:4e:3f:17:dc:41:84:b6:6e:29:
ff:ce:70:38:ac:83:d4:43:40:cd:89:2a:37:df:a3:
68:a7:11:ed:93:0b:72:55:f1:8e:b6:3c:2b:e0:c7:
ac:45:78:8b:2d:90:f6:de:89:97:48:35:d8:4e:e8:
2c:0e:fa:61:09:35:87:09:2c:35:37:f3:fb:46:d7:
13:ec:da:9c:05:78:3f:fa:03:04:ed:4e:77:fb:c8:
e1:a3:d6:f8:03:41:bc:d8:31:dc:e1:80:1d:0f:dc:
a8:20:48:75:eb:79:46:b7:80:49:7f:a5:b3:9b:1d:
cb:53:5a:22:d0:4f:76:79:b9:8a:6c:f5:a0:51:1d:
0a:cb:f0:5a:90:af:66:8f:8c:52:a5:74:f9:3b:fd:
2b:f5:ea:5d:53:52:c1:c7:64:1c:b8:5e:4b:28:cc:
22:91:04:7e:56:83:29:a0:b5:17:27:56:ab:e9:7a:
4d:f2:76:9f:57:5e:e4:46:58:e0:ef:1f:45:19:a5:
2c:09:1c:3f:a8:65:6c:20:26:1c:f8:fd:fa:01:68:
68:1b:0f:e5:6c:d5:ef:87:7a:94:9b:f5:bd:3e:f3:
df:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4C:72:CD:13:44:20:0B:45:36:85:A1:44:59:95:8E:7F:87:62:B4
X509v3 Authority Key Identifier:
keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ee:27:c8:3f:7e:c8:c2:f7:30:56:7e:4d:ad:cf:85:73:bb:
4b:ee:75:50:f0:05:cc:c7:a7:36:93:3c:6f:4b:13:19:73:72:
eb:93:7c:9f:0c:c8:ce:a6:7c:f3:2b:16:13:17:61:0f:67:b7:
6d:f7:56:71:2a:09:d5:10:6f:2b:01:1b:f5:81:23:2c:00:8a:
fc:76:36:de:2d:d1:1d:b0:25:89:db:94:23:03:3d:21:79:c6:
78:9e:32:13:70:31:3c:d1:97:c0:4f:a6:b6:27:58:c8:78:70:
b6:86:e2:d4:68:2f:62:4a:48:b0:1d:27:77:c0:74:4c:a1:7f:
e4:b4:66:1c:c2:38:29:07:de:33:87:93:81:66:61:63:a1:6e:
f1:9e:61:44:e1:08:2e:43:33:4d:bf:bf:c1:a3:5b:a3:44:d1:
ec:b1:d1:47:2a:eb:3f:d5:3e:11:39:2e:24:5f:38:0f:40:44:
5b:c6:0a:68:3d:51:82:3e:4a:cc:e6:8f:ef:4b:62:3c:d7:34:
cd:b4:0a:7c:41:d8:08:b0:d2:a0:74:60:63:0a:a6:e2:1d:aa:
e0:82:0b:f7:43:ca:51:80:ec:6d:ad:63:9f:f4:44:db:c6:39:
9a:dc:88:b4:70:8c:83:02:a1:5f:b5:cc:dc:f7:44:a1:40:2e:
a8:b7:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:37 2025 by rpki-client