Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: Fprdk2MQfUNWz7veWjtfTa1hA+2bub6C5g8InZQ90FU=
Subject key identifier: 4B:FB:4E:FB:56:6E:35:8D:74:9E:B8:D2:35:3D:E7:D1:EB:6D:EF:0D
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 01992D7E1CA9FE913DCD3B2AAA1B21EED13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 03F2
Signing time: Tue 09 Sep 2025 08:01:03 +0000
Manifest this update: Tue 09 Sep 2025 08:01:03 +0000
Manifest next update: Wed 10 Sep 2025 08:01:03 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: 7DZnvYOh7vUpFtkFk86b1ejy+3P1RE2Mn5hFeOeg0+E=)
2: eBrn60Df7uG_ub_L-IV105lzs58.roa (hash: O8+G2XvuPwR1yEXnK+zmEZeJLzoyxFForxI59j5WNAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:7e:1c:a9:fe:91:3d:cd:3b:2a:aa:1b:21:ee:d1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Sep 9 08:01:03 2025 GMT
Not After : Sep 10 08:01:03 2025 GMT
Subject: CN=4bfb4efb566e358d749eb8d2353de7d1eb6def0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:67:b1:df:67:72:89:1a:85:86:a8:ad:cb:
f2:36:5e:9a:59:4e:1c:b2:d6:c6:02:b0:08:1a:4a:
ef:9b:ed:3c:62:5a:e2:40:38:95:7f:ce:39:24:cc:
af:5d:cb:63:b9:f8:da:14:e9:d7:0c:75:08:4c:4e:
5e:97:39:46:b7:13:f5:41:98:8f:81:ac:a4:b9:d3:
5d:6a:9a:fd:ba:f2:c4:da:58:a4:d8:04:fc:87:de:
ea:cf:28:fc:1e:cf:c4:03:dd:46:09:a4:14:e9:af:
e7:6a:67:7d:62:5d:ea:99:97:a4:cf:0d:e6:0a:87:
85:53:e2:0f:dd:d0:f3:3c:ab:70:7f:30:2e:ca:1f:
eb:c2:df:46:f2:8f:7c:f6:10:af:a8:44:20:0a:fe:
ec:ce:28:aa:25:3b:41:99:41:46:f5:74:96:92:0c:
e1:90:32:53:b4:4c:c7:7f:d4:9f:ff:07:1a:e4:32:
1d:e5:4f:f3:fa:00:f7:55:45:96:b6:b8:f7:bf:54:
3c:7f:54:a1:28:75:b2:75:9c:d4:f3:56:bc:1d:7f:
eb:95:82:d8:ae:df:89:65:52:a0:16:de:b6:1f:e4:
85:1e:a7:15:b9:4b:f8:3e:99:84:a7:97:64:e4:1a:
4a:9c:f6:d2:f4:4d:9e:d2:94:ba:32:30:3a:18:99:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FB:4E:FB:56:6E:35:8D:74:9E:B8:D2:35:3D:E7:D1:EB:6D:EF:0D
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cd:91:ac:06:bc:2a:7c:fe:f0:57:61:44:4a:0e:3a:89:92:
85:85:42:55:1c:9e:79:93:9d:c5:e2:8f:32:ce:b9:e3:7f:30:
a7:39:8c:37:04:95:18:f5:c6:3a:45:ea:4a:e0:44:6f:58:4c:
31:12:7a:c2:1a:3f:10:aa:01:96:82:9a:70:d5:95:9f:38:b9:
31:e9:89:bc:ac:50:dc:17:08:98:31:5a:5e:39:0f:f2:de:7a:
16:22:ef:36:bc:e8:b0:a3:89:a0:88:07:3e:80:63:94:5c:22:
f1:34:76:bb:d7:11:be:ba:11:1e:e9:97:6e:e6:03:c0:4b:7e:
74:6e:35:7f:69:d9:20:8b:27:9f:52:0f:c3:a9:d8:78:bb:3e:
db:f1:87:9a:e8:04:f1:5b:ed:03:14:7c:cb:11:8d:08:1b:b7:
b0:17:f7:5d:56:e2:5b:84:13:5a:b6:bb:2a:cd:9e:4d:e7:9b:
5a:0e:fb:ab:62:fb:70:fa:71:f3:95:92:6c:95:db:14:68:58:
79:46:14:8e:62:fc:87:90:db:21:07:57:d8:98:fc:67:69:df:
be:27:64:9f:e8:e7:84:99:49:1a:e6:38:0d:16:91:46:8a:57:
eb:f5:0a:e7:d6:f0:68:50:eb:87:9a:f5:7e:2a:24:2d:e0:c7:
ce:ab:a7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:36:53 2025 by rpki-client