Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
File: 0uQqWD-iUbQyz8HcqL00HVBmC5U.mft (raw, json)
Hash identifier: IKwxU30C3MZW3s5jOaxY4epIP7lo0UEq7ZorNUC7j4Y=
Subject key identifier: AD:17:DC:CB:6B:D0:09:30:B1:DD:CE:BC:52:54:6C:DC:58:F4:84:80
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial: 0199221E840D6F0452514C39DA1667241B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
Manifest number: 0DBF
Signing time: Sun 07 Sep 2025 03:00:49 +0000
Manifest this update: Sun 07 Sep 2025 03:00:49 +0000
Manifest next update: Mon 08 Sep 2025 03:00:49 +0000
Files and hashes: 1: 0uQqWD-iUbQyz8HcqL00HVBmC5U.crl (hash: FokmSVZfPZF9B/3dMhZjSfZkCoQMJrD3VnQa+DmQ9OA=)
2: 30clEHSQ2FtWcxS6WRrlfziweF0.roa (hash: kMEVQBcSv51miHKtL16mTfHOOekvOtrPK9PKsU+A9fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:84:0d:6f:04:52:51:4c:39:da:16:67:24:1b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Validity
Not Before: Sep 7 03:00:49 2025 GMT
Not After : Sep 8 03:00:49 2025 GMT
Subject: CN=ad17dccb6bd00930b1ddcebc52546cdc58f48480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:70:b9:3d:96:67:ae:72:6e:42:6d:6e:49:
3f:59:e5:d6:82:7e:25:a9:9c:da:d1:dd:08:09:c3:
79:ff:6c:3d:42:59:93:f5:0f:0d:d0:13:14:51:a0:
4a:89:3a:e4:cf:b9:2b:93:46:b6:5b:e4:1b:ca:6b:
cc:c6:05:6e:61:4c:1b:44:73:36:5b:e3:17:24:7c:
5f:b2:f0:4f:a3:7d:ee:d9:69:6d:3a:db:ec:d5:df:
15:89:4c:4b:c0:ab:87:f2:6b:16:5d:59:09:5f:a5:
90:19:2e:76:12:bd:55:c6:ad:0a:96:b0:93:a4:ad:
9f:71:6b:7a:92:e6:5a:fc:1f:61:6d:da:42:ba:bb:
fa:11:43:3c:92:b6:e4:60:26:e0:33:63:93:b8:ea:
c0:27:74:b5:17:0b:f7:62:2f:8d:c0:7d:47:1a:b5:
c9:42:43:4c:0e:bc:08:fe:d0:3a:ed:79:c5:41:20:
ce:c5:09:ff:d2:1b:56:c7:eb:d5:4f:95:a0:cf:85:
83:cc:a2:0a:e9:ad:42:27:ea:ea:b6:0b:ea:7a:d8:
9b:8c:87:56:ca:ab:1d:9a:2e:e3:22:a2:f4:30:f6:
2d:2f:f6:53:32:35:b0:25:87:b5:d2:93:44:c2:54:
66:fc:dc:29:9d:0b:7d:bf:8b:22:27:01:44:b9:62:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:17:DC:CB:6B:D0:09:30:B1:DD:CE:BC:52:54:6C:DC:58:F4:84:80
X509v3 Authority Key Identifier:
keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ea:4d:a0:71:4e:4f:ae:21:49:a1:c0:c0:08:37:b2:be:23:
c4:7c:79:eb:6b:4e:42:f0:c0:54:7d:ad:7c:40:19:9d:64:4c:
94:66:e7:31:6c:f0:99:a6:9c:8e:46:d6:41:fc:1d:25:cc:a0:
d3:a7:ea:f5:07:2e:e7:9a:53:b4:2e:af:51:6c:6a:7e:47:a7:
57:27:22:10:85:be:46:14:52:f7:a8:ae:5d:bc:b6:82:17:ba:
97:7e:58:53:ef:5d:3f:72:e3:f8:a1:0f:bd:24:d9:b6:cc:3f:
c9:a7:dc:8d:8b:d2:06:e2:a3:47:c7:a6:e5:31:0a:c2:c1:59:
96:3e:12:b5:ae:7e:75:c7:21:0c:18:ad:87:a1:61:83:d6:10:
ed:42:81:ef:97:35:46:66:94:64:27:01:46:90:7c:e9:69:87:
03:2e:a2:f6:54:51:33:7d:19:6f:42:28:66:19:eb:69:e7:df:
a3:32:02:29:49:cc:39:47:30:0d:12:69:5a:23:19:a4:d0:a2:
fa:e0:74:12:0f:c1:df:16:54:f7:71:72:d9:7d:dd:92:7b:ba:
d9:e4:38:33:1f:13:40:7c:a1:5f:40:3f:e6:06:96:1b:fc:4b:
f9:58:ae:1e:1d:d9:a1:9f:58:26:06:2f:d2:ec:6d:97:fb:41:
81:72:4b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:20 2025 by rpki-client