Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
File: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json)
Hash identifier: /nBpGPgxRdNKKH+TY2vRiLxTwPLxGUvIokv/Xw5aIUo=
Subject key identifier: 20:BE:F3:B5:2D:AF:07:10:A4:FA:CF:DB:33:D0:98:40:3B:CB:DF:96
Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
Certificate issuer: /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Certificate serial: 0199228C84C5D32D5F384524DB5C155B82F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
Manifest number: 132F
Signing time: Sun 07 Sep 2025 05:00:58 +0000
Manifest this update: Sun 07 Sep 2025 05:00:58 +0000
Manifest next update: Mon 08 Sep 2025 05:00:58 +0000
Files and hashes: 1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: T9wCj1u/e1zU0qGdCITwq8iL67R0STDojDg4M5nFV9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:84:c5:d3:2d:5f:38:45:24:db:5c:15:5b:82:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Validity
Not Before: Sep 7 05:00:58 2025 GMT
Not After : Sep 8 05:00:58 2025 GMT
Subject: CN=20bef3b52daf0710a4facfdb33d098403bcbdf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:d4:c5:b8:ec:f4:3b:e9:8f:e1:e6:08:98:
7a:7f:68:10:f5:6f:da:67:92:90:6d:8d:7b:0b:c5:
48:70:ef:d6:77:2a:98:bb:7d:e3:3b:04:bb:f4:90:
47:b1:dd:16:2f:f2:9d:bc:b1:7e:49:5a:3e:28:b6:
f9:b3:9a:fc:e3:db:8a:d8:50:0d:a8:7b:e4:fc:7a:
fc:0f:47:c6:7b:43:2d:6b:10:98:ec:d4:7d:7a:53:
ea:25:a4:f2:39:51:de:2e:fc:eb:47:bc:43:ae:1f:
94:54:69:44:b2:8d:10:4a:a5:49:c3:54:32:7f:71:
69:cc:dc:ee:a4:24:bf:bd:d7:73:a1:89:e4:d4:12:
2f:68:c1:b8:d8:e5:12:c1:95:dd:44:1b:c4:7f:ba:
98:24:88:26:10:4d:ea:49:5a:6f:81:70:0a:2e:4f:
ec:b9:67:dc:c7:bc:f8:83:cc:86:e9:3b:d1:d6:ea:
3a:0d:67:f0:8e:a1:93:78:e6:c1:14:52:ad:c6:a5:
00:e0:8b:6c:35:f8:22:7c:5f:37:5e:96:ba:0f:66:
fd:b3:1a:d2:be:83:23:df:e3:dc:3d:2d:59:b8:8d:
a4:a2:ea:ec:c3:09:6b:bb:27:21:52:3c:d9:1f:1b:
51:ed:81:81:65:19:7d:11:fa:ce:fb:ec:44:fa:35:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BE:F3:B5:2D:AF:07:10:A4:FA:CF:DB:33:D0:98:40:3B:CB:DF:96
X509v3 Authority Key Identifier:
keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ff:6e:b1:f5:c6:41:89:f7:a5:19:f5:32:08:27:2c:1f:33:
af:cb:10:3a:5d:fe:6e:ee:ed:67:25:eb:42:1d:9d:25:07:24:
df:79:b9:5f:ff:02:b6:ba:76:c1:30:4e:cb:4a:65:7d:a6:8c:
76:c6:5c:c1:4c:28:40:13:37:55:83:8c:a4:0f:31:30:bb:16:
66:7d:5c:44:ec:35:21:7c:d3:8a:81:cb:81:23:a5:69:1c:87:
ec:c7:81:44:b0:30:77:44:63:9b:78:bc:56:86:c3:74:83:68:
20:1b:5b:cf:3a:cb:48:e9:0d:15:0f:c2:54:4b:fd:90:f4:ef:
12:1a:56:45:bd:63:4c:11:4c:e9:98:10:1c:e2:a4:3f:db:95:
60:16:1f:7b:9f:cb:99:35:42:75:14:9d:19:42:f8:9e:f4:0b:
db:f3:9f:cf:86:df:0a:70:8c:58:4b:79:37:b5:78:73:b8:77:
5a:f5:e4:74:72:92:53:3d:86:ae:b5:be:bc:88:9f:82:b8:f4:
21:6e:ab:b4:eb:85:33:ca:77:1a:82:ca:03:42:57:8c:9c:ad:
86:cb:df:60:af:35:17:be:5e:00:64:9b:b8:ca:af:86:3f:d8:
b3:42:c9:3e:8d:18:0f:6b:1b:39:19:3b:f1:6c:04:d5:55:43:
f0:b9:18:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:10 2025 by rpki-client