Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File: 0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier: HRty4JGIlisePBcuiBYYRi2GkG7NM1I5B2X5IRrKAqs=
Subject key identifier: 75:1A:12:15:BC:6C:21:FD:3C:88:0A:EE:CF:5C:32:07:27:9D:62:88
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer: /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial: 01992F6C08BA112BC438D999EA885DB754A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number: 01C3
Signing time: Tue 09 Sep 2025 17:00:33 +0000
Manifest this update: Tue 09 Sep 2025 17:00:33 +0000
Manifest next update: Wed 10 Sep 2025 17:00:33 +0000
Files and hashes: 1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: p8JLLV6/xRVNuhSWq0xLwP1C7xje+VUCb3j+fo61e6I=)
2: IcIhqkwJl3oIn1TFze0JKC2ukZo.roa (hash: N9HPji4dA8H0kkRU9JW+TERsQXqgse1gQnpLkAfBwZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:08:ba:11:2b:c4:38:d9:99:ea:88:5d:b7:54:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Validity
Not Before: Sep 9 17:00:33 2025 GMT
Not After : Sep 10 17:00:33 2025 GMT
Subject: CN=751a1215bc6c21fd3c880aeecf5c3207279d6288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:dd:50:cd:6a:d4:95:7f:67:96:27:18:59:
99:2b:2c:08:42:ec:b6:cf:c0:8e:9d:a6:cb:ab:7f:
8d:74:1c:f7:13:87:ba:cc:3b:a6:57:c4:3c:a2:e5:
a2:71:2f:58:b8:ef:c6:71:58:93:dd:fc:2b:d9:44:
57:b3:cd:bb:a1:1c:e5:2e:b2:15:cb:8c:4a:3e:bb:
25:d4:8f:a6:82:5d:ba:b9:20:4d:aa:4f:72:01:08:
ba:8d:59:83:22:6f:fe:47:3b:75:d3:d1:f4:b2:10:
74:44:00:de:b6:53:4f:e2:67:09:dc:26:7e:cc:9b:
2c:78:d5:77:63:25:f9:f8:f3:ee:81:22:10:7f:4c:
d2:60:cd:69:d4:47:bd:0a:2d:69:59:be:78:47:38:
39:d2:ef:c6:0a:48:bf:7e:c0:38:f5:cc:17:13:53:
d9:1f:df:7a:a9:8b:92:f6:e0:dd:cd:83:3c:e6:56:
6c:87:30:9e:ce:a6:3c:26:ed:cb:9f:ed:47:41:1d:
b4:04:63:f7:9d:cb:2f:59:ab:98:84:2b:dd:c1:31:
3a:fd:f4:d2:96:ae:21:c0:1f:db:4e:2d:e1:52:87:
34:ad:ca:c7:37:84:36:51:ee:bb:0f:30:ab:d1:d3:
57:94:5e:ab:d6:de:05:21:87:76:82:41:56:f9:bf:
05:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1A:12:15:BC:6C:21:FD:3C:88:0A:EE:CF:5C:32:07:27:9D:62:88
X509v3 Authority Key Identifier:
keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:97:50:dc:f3:d2:13:b9:26:e1:05:2e:03:f5:96:d2:a0:28:
1c:fb:86:29:56:75:1b:e2:2b:c2:8e:93:45:6e:ec:d2:a3:4c:
70:d6:bc:a1:f7:cf:00:d9:1a:46:6d:39:7f:f9:17:10:d4:1c:
1b:7f:de:00:49:f3:a2:01:b9:23:2f:1e:16:01:30:bb:e4:38:
c7:bc:50:30:60:48:ec:84:66:21:f3:e6:76:6f:7b:c6:e5:a8:
f7:bd:6b:a4:ad:7c:11:d8:4c:79:22:fe:2b:08:ce:b1:fd:40:
5c:f4:73:6b:88:07:dc:f3:53:92:46:95:7c:83:d2:f7:7c:56:
5b:be:db:d2:6a:91:de:a4:9e:0c:75:0b:04:74:77:e9:50:76:
b0:23:1f:08:70:d8:75:35:55:7b:14:77:3b:47:67:32:08:b3:
88:ca:6d:fe:40:09:65:c2:3f:53:1f:c5:e9:de:f6:90:cf:50:
52:07:58:4e:23:b7:e6:36:30:82:b3:cb:b6:80:15:85:7f:e3:
06:f1:2c:0c:f7:54:01:e7:a2:f0:ea:ee:13:b9:78:99:b8:a7:
dd:c3:d6:fd:ca:06:fc:d6:b8:ac:b0:b8:bf:e8:da:9c:dc:27:
61:9e:dd:a6:ec:aa:fa:e7:e3:1f:dd:83:3e:77:b2:57:7a:69:
8c:c9:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:59:56 2025 by rpki-client