Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier: 3Bd/1dsZFbUgx5yoq3KpTbtgGTf9oLC4w1Gyfsy2Yqs=
Subject key identifier: A0:5D:DB:01:8C:35:28:78:24:8D:5A:0C:6C:45:03:D3:83:01:1F:83
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer: /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial: 019921E7D23A777EFDBCCAF00F401C567A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number: 063D
Signing time: Sun 07 Sep 2025 02:01:04 +0000
Manifest this update: Sun 07 Sep 2025 02:01:04 +0000
Manifest next update: Mon 08 Sep 2025 02:01:04 +0000
Files and hashes: 1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: ZmS3/19Ltlpo67LGWijKZD2ZmSTWDBkFttF6sMnCWbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d2:3a:77:7e:fd:bc:ca:f0:0f:40:1c:56:7a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Validity
Not Before: Sep 7 02:01:04 2025 GMT
Not After : Sep 8 02:01:04 2025 GMT
Subject: CN=a05ddb018c352878248d5a0c6c4503d383011f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:30:f0:b4:c8:a1:e4:0c:77:c3:19:5b:e0:
2b:d3:16:a4:88:6d:26:05:7a:0d:37:6f:4d:54:7b:
4a:43:8f:d3:0f:22:99:26:79:cf:7e:16:44:61:de:
d2:c1:06:4f:cc:83:7c:ff:f7:28:4a:f8:06:8b:16:
86:75:a5:38:7f:4a:fa:b7:0e:6f:8c:cc:41:dd:d3:
77:28:c6:20:28:68:b9:32:ff:8d:9f:89:30:49:9e:
a3:6a:1d:de:d9:21:e0:3c:d1:fd:bf:ac:48:ef:04:
44:3a:23:3b:bd:65:e7:23:32:4c:d7:cb:e5:51:56:
1c:76:6e:ca:73:68:8e:58:bc:23:55:a7:b6:8b:a4:
1b:d3:90:48:ad:a1:95:6c:61:d2:bc:02:93:44:bc:
d7:77:63:96:d1:86:51:0d:32:20:47:9d:f8:05:71:
ca:31:89:a1:11:1f:f0:da:51:d7:0c:3c:3f:bf:ec:
0e:b1:fd:f4:d1:9c:4d:58:3a:6c:e0:c3:6a:2a:89:
ec:46:e7:f9:ca:88:89:0c:fe:35:92:83:f2:b8:62:
6c:d4:b9:d5:e6:91:80:55:4a:d4:96:58:9d:d3:59:
d0:14:8b:0f:be:11:67:7e:25:29:4d:33:d9:48:b2:
aa:2d:61:02:18:23:31:bf:71:8e:7c:95:85:c2:dc:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5D:DB:01:8C:35:28:78:24:8D:5A:0C:6C:45:03:D3:83:01:1F:83
X509v3 Authority Key Identifier:
keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d9:85:e9:54:b4:f3:af:a7:7f:a8:19:1e:8c:b3:02:72:ea:
62:7a:1b:48:d1:48:8d:d2:e5:6c:a8:3d:6c:58:a6:54:cf:e5:
83:a3:f3:c4:9e:f3:7d:9a:ea:d7:df:3b:22:2b:cc:d3:b7:78:
30:b5:ca:53:62:81:7f:c9:76:8e:7d:32:ef:6d:89:ef:1f:50:
c2:c6:4b:11:05:d4:d0:9a:0a:db:60:1a:05:87:08:48:34:95:
a1:96:61:e3:99:81:c9:8a:9a:3e:eb:5b:3d:6f:e1:63:41:7b:
eb:9b:e4:69:17:49:5a:2f:59:62:a5:5f:82:83:a7:c3:60:c9:
4f:96:b3:c8:22:47:d7:89:41:27:3b:1f:c8:46:b7:d8:fe:35:
58:29:e9:57:35:dd:95:96:1b:2a:d1:87:17:89:51:fd:a3:fa:
3c:31:a1:4a:4a:f1:95:b4:a0:de:3c:46:57:78:55:6f:b1:d3:
85:a3:87:06:db:56:66:b2:8e:cb:57:5d:08:e9:32:fa:7e:03:
e4:cd:32:a8:b3:b8:28:c6:6e:ca:5c:ec:3f:f5:78:4f:68:ea:
c3:1d:78:ea:ca:f2:16:3f:11:3a:99:30:24:1d:b9:9d:49:66:
59:b9:07:8f:f2:87:f4:95:45:07:c0:c5:f9:a1:e8:46:de:87:
cf:64:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:49 2025 by rpki-client