Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File: 0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier: mMcFDp4GQ1B3b2Vlb9jbui7+GJ5qQP+vY/mkmiZN9rY=
Subject key identifier: 01:E0:9A:E4:00:38:4B:28:B9:09:26:7E:69:DF:90:28:E8:BD:63:EE
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 01992EAD730E7C5F96204822A7FAE91D9449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number: 0A24
Signing time: Tue 09 Sep 2025 13:32:22 +0000
Manifest this update: Tue 09 Sep 2025 13:32:22 +0000
Manifest next update: Wed 10 Sep 2025 13:32:22 +0000
Files and hashes: 1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: +4uo/JNlyd4iXXj4oLl0pdkDoCz0kJovZ1LPNK4+uhE=)
2: 1-P3l4_Zo8cQbbqGew9xt_5wR1N8.roa (hash: deTLN7Rt0F+CpSlidIRnFT/ywhKUyo+OuNSilVGSbp0=)
3: 43DBoHyjiorpYt6dv-j4uRvTolk.roa (hash: zlvrEcO2nIutlS94K9wDLAiUzBmW/xF4SzfRWP7kA9w=)
4: 73fgtycAM2crZ_LHwWRiB0oEU9Y.roa (hash: flrMOVA6rk3M5Itkv7RZo+kAVGvmhl0NxmnJ1f7lgFI=)
5: Bt-AqMlv5AGS23NSAHAOENpSz_w.roa (hash: Om38jAdn/FiagKwN0JD11FdBcj5g/guHfAWt957SB1c=)
6: Eey_cZJG1JzbE89yJ5-3WKAQnps.roa (hash: Sd/BEYaeo7DwAgjKLvAs+URaNM8tk1wO8kSwFI5eaf8=)
7: G6xf-2_9WqQfQEDF7v7pcNM6cBg.roa (hash: hCbc2HcFchj9v9WZR4JcZ3aDEye7Ter5KkTxwI9k97k=)
8: JfF0v8eby0BQNtVREEaJFT1Zxcs.roa (hash: OQTTsSrZcqdOC8lDs04JBaSkoqVL61gLZ8I1J00GtDk=)
9: YcTIc32XZA-ghsWcGzLeleFcTdg.roa (hash: hArIQsrZH8U5ODHNwYYROkxmUYJ8DizJuV1l/Z6DTPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:ad:73:0e:7c:5f:96:20:48:22:a7:fa:e9:1d:94:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Sep 9 13:32:22 2025 GMT
Not After : Sep 10 13:32:22 2025 GMT
Subject: CN=01e09ae400384b28b909267e69df9028e8bd63ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:73:97:8e:4b:03:1f:63:3f:a2:3f:8e:45:5b:
0b:9f:39:c2:83:d0:ae:d6:e7:93:bb:e5:c5:c5:2e:
02:93:ce:a4:ba:17:a8:a1:90:14:3b:11:4a:51:4d:
e5:02:bb:84:90:b6:88:06:4d:f9:ae:0a:43:93:c4:
8e:7b:74:02:ac:f8:54:4d:53:f0:5b:65:1f:23:99:
c5:78:ae:ea:33:fb:37:4c:ef:4f:82:58:0f:5e:ef:
25:e0:2d:22:97:c0:da:16:71:92:3d:59:4e:75:21:
17:36:11:a8:e4:5d:be:5e:ac:84:23:b8:e1:6a:16:
46:87:2e:05:9b:59:43:66:24:21:6d:1d:22:9a:f0:
e9:3d:f0:b8:c0:53:69:03:b4:7e:10:cf:8b:0b:5e:
c7:b4:92:57:8e:3c:69:da:67:fe:df:53:ce:5e:db:
3b:ab:f8:9d:62:ad:4c:02:64:35:90:20:3c:ac:3a:
e7:15:70:11:fd:4c:f3:6b:ea:e9:2c:39:6a:d6:c1:
81:85:ef:e5:d4:0e:37:8c:64:78:fe:84:c4:1d:ac:
d8:91:b3:02:b4:69:3f:41:e0:a9:8d:f6:6a:98:fd:
15:08:62:d6:ab:cb:64:af:e6:cd:68:ae:1b:4b:d1:
26:c9:61:e5:57:b8:6a:76:7c:ba:5c:77:d5:89:0a:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E0:9A:E4:00:38:4B:28:B9:09:26:7E:69:DF:90:28:E8:BD:63:EE
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bb:f5:36:5e:77:99:53:fa:4a:76:db:32:f9:86:3e:06:98:
e3:5d:b7:a6:77:8d:19:a6:e4:e7:e8:b8:91:61:cf:d7:5a:ea:
b1:e2:96:61:47:b9:b7:1a:ef:a3:99:dd:df:91:7a:3f:90:0d:
d1:62:48:6d:de:ff:b8:8d:b2:0f:60:f4:df:be:28:f9:6b:96:
20:4e:df:08:c5:13:cc:ea:e5:f1:78:3f:4d:aa:0d:78:79:5b:
5f:6f:3d:40:6d:d4:37:9f:d3:7e:97:6b:d0:3d:27:a3:b9:d1:
bb:a9:1e:56:f2:86:dd:7f:6d:9a:3c:3c:45:6f:d4:52:1f:3a:
c9:35:66:b0:b2:77:c1:5f:32:ad:57:ab:f4:3a:8b:5e:20:f4:
11:a3:06:09:82:7d:99:1a:ff:88:e1:69:81:ba:49:7e:09:13:
1e:ea:88:4c:ae:d8:15:05:0b:d4:d6:d5:1e:77:44:a9:1c:b7:
5a:ce:f3:94:09:84:fa:2c:a2:63:a2:2e:20:59:35:7c:3a:14:
fd:5f:8c:0f:70:fe:da:d2:92:61:fb:ba:96:85:16:f2:8e:99:
f1:f1:e4:d7:37:8b:7a:aa:fb:3f:cf:9b:f6:44:f4:a3:84:00:
53:cb:57:1a:06:94:bc:28:9e:ff:72:ff:3d:67:b7:8e:57:bf:
ea:be:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:24:40 2025 by rpki-client