Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: s1fdpySA54LLyDndqtVn4JRt90FYFYfR9dk/UULAtu8=
Subject key identifier: 89:1B:A9:A9:57:3A:F9:AD:BA:3C:D5:05:B4:BE:B2:B5:95:A1:A1:4A
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 0199285806FF30B8A7FDFDAE3BE4CE782DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 037D
Signing time: Mon 08 Sep 2025 08:01:21 +0000
Manifest this update: Mon 08 Sep 2025 08:01:21 +0000
Manifest next update: Tue 09 Sep 2025 08:01:21 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: JCTKFzbZzqCrvy6Nfg743/zr50QpINUYH2LZAaqFKYM=)
2: mFUkKUV2j8Fct1DGbVQJTzcA0ig.roa (hash: bNr/zF64vk+SVTrKPbIdCfqu6Sowa5lS9V4LG/Ns2g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:58:06:ff:30:b8:a7:fd:fd:ae:3b:e4:ce:78:2d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Sep 8 08:01:21 2025 GMT
Not After : Sep 9 08:01:21 2025 GMT
Subject: CN=891ba9a9573af9adba3cd505b4beb2b595a1a14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:38:04:44:b8:5e:0e:80:46:c7:00:09:40:
02:1c:6e:fb:ae:e5:ed:d4:e1:b0:25:68:a5:da:5d:
9d:1b:cc:99:94:b9:75:88:2c:5a:38:77:2d:b0:52:
2d:ef:3e:29:e6:fb:0e:df:d0:8f:60:06:06:2c:a7:
62:ee:b6:58:27:11:56:45:cf:d1:11:2b:b4:57:7b:
85:b2:7b:d6:56:5e:a7:ba:91:fc:ca:f2:bf:bc:4c:
1d:7c:00:4a:76:98:6f:0b:13:d4:17:f0:c9:a2:49:
c1:2f:44:e2:6a:3c:c6:8a:0f:46:e3:fd:96:e3:27:
a5:43:dd:02:a9:93:f5:11:5d:9c:ca:89:b8:1a:a3:
8f:27:04:cc:92:c4:50:99:d0:78:47:9c:f5:00:73:
43:63:71:95:fc:c0:86:49:75:b0:5d:63:6a:49:04:
82:7d:c1:4f:be:06:36:27:2a:f7:4e:30:2e:46:61:
c4:c9:f7:f9:df:0f:ed:03:51:9c:64:e1:b9:ea:f4:
7b:bb:4c:83:c6:bd:e1:7f:b5:05:29:80:fb:28:aa:
74:e2:51:a4:32:25:e9:d9:fb:a9:64:3d:97:74:b4:
4f:62:f3:90:5e:6b:b8:6a:3c:73:12:c0:84:fa:ad:
fc:52:32:e4:d0:39:3f:a9:6c:26:c2:02:11:bb:41:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1B:A9:A9:57:3A:F9:AD:BA:3C:D5:05:B4:BE:B2:B5:95:A1:A1:4A
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0b:62:fc:4d:6a:a3:49:8a:e4:ae:37:d2:9b:52:cf:f4:17:
18:f5:d5:c0:17:72:a1:46:a4:c0:a1:2e:81:f5:cb:d6:aa:92:
6e:01:a4:5b:85:01:ee:64:ab:7d:f0:bf:aa:98:eb:12:21:2e:
c2:d8:1a:af:76:63:fe:5b:6c:92:42:2b:67:59:04:b6:26:54:
70:46:f2:1c:c7:ca:d2:28:32:07:e2:13:73:8f:f0:90:56:0b:
33:0f:f9:96:99:16:7e:73:ad:15:26:90:b4:a5:29:af:df:90:
3f:c3:72:48:d9:2a:7c:97:8c:55:d2:0a:f1:0e:62:b7:69:82:
cd:27:89:34:8f:05:0f:f0:d8:ed:36:03:5c:93:c0:94:ad:d9:
4a:d3:a5:14:3a:f7:fc:79:93:91:93:dd:f0:6a:76:38:5a:ec:
a0:d4:97:f6:96:d1:49:68:6e:2f:84:a5:d2:19:1d:b4:ea:8d:
2d:e5:f5:f6:bb:1f:3e:72:ce:cc:b7:2d:69:90:cc:74:a9:d7:
eb:4b:18:b2:6f:91:ce:56:7c:f5:7d:70:ab:fc:d9:77:c0:f5:
94:dd:21:43:d6:67:1b:d1:9d:6c:6e:d6:fc:e1:4e:c6:0a:81:
61:7f:c4:cc:66:b1:ec:ce:7a:07:e3:e0:ba:8f:34:a5:d2:f1:
87:a3:af:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:35:33 2025 by rpki-client