Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: yRL+N9rQxWme6D/swoX+1TSOl4doD86gTF6Kyi1CtXY=
Subject key identifier: 6E:FA:1E:3A:71:50:30:52:C0:BA:76:08:68:A6:2C:EB:1A:12:EC:47
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 019921E7D228A475D502411FA98BDA677063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 0B04
Signing time: Sun 07 Sep 2025 02:01:04 +0000
Manifest this update: Sun 07 Sep 2025 02:01:04 +0000
Manifest next update: Mon 08 Sep 2025 02:01:04 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: WOhy6hNozoUkhSjc3YYJ15mHmYeYf1tZW/2eo7z2Xoc=)
2: akVfoe2NMwgKKix-I6Nd4k5ngMM.roa (hash: Na2cRAe6jotzXC7LjsbqIgTy4+1+OZSmFcHXYaFK5lY=)
3: uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa (hash: 0pV5mcTfxFzm13bkl5Ni2QZOplGIOcdfnivcOrYLhtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d2:28:a4:75:d5:02:41:1f:a9:8b:da:67:70:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Sep 7 02:01:04 2025 GMT
Not After : Sep 8 02:01:04 2025 GMT
Subject: CN=6efa1e3a71503052c0ba760868a62ceb1a12ec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:29:e1:b0:f8:0f:66:8c:54:3a:b4:d6:ce:
42:06:9c:aa:58:a3:86:85:97:7f:dd:9e:d4:f5:a9:
81:39:df:54:5c:a4:fd:d9:e7:c3:95:50:33:3a:14:
4a:26:31:5a:84:a0:95:b2:9d:06:03:f4:8b:18:c6:
79:a4:a9:2f:e6:c5:ee:d0:ce:6a:7f:06:44:9b:87:
ea:a0:b7:87:5b:26:9a:f0:0c:44:4f:82:09:8f:37:
2f:af:11:cb:e3:1d:54:4e:71:cd:f9:9f:40:b7:24:
84:e2:97:a7:2c:1c:56:48:f0:6a:94:d0:aa:c6:e1:
48:c3:8c:81:92:5f:9a:ef:a3:7a:44:08:0f:71:33:
01:4d:d3:03:e6:88:91:e4:da:61:1b:0e:ca:5f:b6:
a7:66:53:c8:bc:80:93:0e:dd:6e:09:a4:22:c4:ca:
4c:d4:05:58:10:86:a9:17:58:ab:83:1c:7e:7b:e9:
dd:99:5c:7d:73:99:f4:9e:15:c5:78:ce:19:d1:d8:
6d:78:18:f9:f6:ce:e2:7f:80:11:c9:7e:fd:fd:e0:
9e:2f:94:1c:9b:f5:b9:a3:41:4f:a2:56:30:84:e6:
fd:b1:89:e8:e3:6e:85:78:bd:86:40:4f:d4:1d:62:
a5:08:7e:e8:24:11:33:fc:b7:63:aa:77:ee:4f:86:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FA:1E:3A:71:50:30:52:C0:BA:76:08:68:A6:2C:EB:1A:12:EC:47
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:27:16:a5:fe:cb:06:3e:74:14:31:88:e4:fe:c8:1c:de:6d:
16:dd:ee:a7:58:15:bf:29:1c:93:d1:db:eb:e8:68:b6:83:a2:
27:e1:7d:87:0e:81:81:86:d0:ee:5a:5b:9f:b3:91:de:b9:b9:
8d:5f:72:11:d3:a2:42:07:6f:22:d9:c5:b6:c2:e2:bc:12:2e:
94:d7:77:e5:85:a3:93:73:e5:19:a5:3e:44:9b:99:49:84:e5:
33:7a:91:00:6a:8b:29:d7:a9:bd:63:bf:28:2a:8c:c9:80:53:
b9:ee:8e:8f:de:ca:e7:31:bd:89:6d:e9:a2:7b:25:2c:ce:a3:
38:f8:20:f5:d8:4d:e9:75:75:d2:be:51:fe:99:e3:4e:4e:05:
22:79:1d:8d:62:e2:13:54:95:bf:31:5e:d6:8d:43:33:fb:be:
a6:60:49:e5:47:6f:2d:d3:3e:20:dd:02:53:aa:07:f3:eb:76:
89:06:73:23:ef:95:cc:15:6f:e6:56:b1:27:43:8a:8c:39:1b:
c7:51:23:9d:4a:14:07:72:7c:e9:b8:fc:9c:08:6b:5b:54:ca:
3d:e9:df:f2:92:c5:80:ba:5b:60:e4:53:50:17:06:17:a3:94:
13:f6:2e:5f:49:6c:0b:bd:65:4d:78:7c:81:aa:50:95:0c:59:
a9:cf:9e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:02 2025 by rpki-client