Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier: 8XkeusrPps2kWmZMOCTWRsYBQQzSuvNRq2CqT0FE49c=
Subject key identifier: 8D:ED:8A:3F:8E:F6:15:E8:D5:6A:44:F1:8C:4C:8E:EF:F5:62:9F:89
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial: 019937CAECC01903B2C09C9431E2773119EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number: 1651
Signing time: Thu 11 Sep 2025 08:01:09 +0000
Manifest this update: Thu 11 Sep 2025 08:01:09 +0000
Manifest next update: Fri 12 Sep 2025 08:01:09 +0000
Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: OMNdOWFn50HF7+n1eg8o5LvKm8veqR4+sJnkhwVNIPE=)
2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:ec:c0:19:03:b2:c0:9c:94:31:e2:77:31:19:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Validity
Not Before: Sep 11 08:01:09 2025 GMT
Not After : Sep 12 08:01:09 2025 GMT
Subject: CN=8ded8a3f8ef615e8d56a44f18c4c8eeff5629f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:72:d1:2a:92:24:eb:18:74:ff:be:6c:30:0d:
66:55:df:e4:2f:d9:a8:d6:a1:23:92:ee:2e:be:ad:
de:b8:0d:f7:1a:f3:43:e7:7a:f7:c0:c1:ab:e8:17:
03:5c:71:f0:ad:4a:53:c1:ac:b5:41:e0:e0:97:c5:
3a:ba:da:61:5b:27:93:20:a6:ad:f9:05:6c:42:75:
4e:5e:df:d8:91:c6:56:4c:ff:3d:5b:a6:2d:b4:ca:
5c:c2:af:2b:4e:de:a2:e6:70:69:d3:b8:14:70:1d:
61:21:48:4a:f3:e2:98:62:27:93:75:03:88:c0:81:
cc:07:7f:19:ef:a0:da:8b:3a:0a:5a:0a:84:4c:7e:
47:8b:cf:bb:b7:10:3b:1c:b9:34:cb:b4:e2:22:45:
0b:42:46:a5:0e:7d:3c:04:67:74:1d:a0:42:fd:79:
ca:f4:e1:39:b5:86:bb:50:22:5c:82:bb:86:d8:85:
a4:f6:a3:51:34:de:42:fe:43:aa:67:96:b7:41:df:
7a:db:c7:2d:67:68:d8:72:f6:cb:bc:82:61:39:ec:
c4:78:23:81:60:c6:ad:8f:50:ed:b4:7b:b8:7f:03:
1d:77:34:bd:d5:92:8e:b9:40:fa:5f:16:57:b9:8a:
a1:8e:26:37:df:84:8f:03:e9:bd:89:57:59:5f:14:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:ED:8A:3F:8E:F6:15:E8:D5:6A:44:F1:8C:4C:8E:EF:F5:62:9F:89
X509v3 Authority Key Identifier:
keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0b:38:09:db:23:43:91:11:cc:fb:33:cc:41:32:33:60:e8:
e6:10:22:bc:70:d6:f5:f6:9c:9a:9b:44:55:70:ad:dc:2c:53:
90:bf:32:1b:55:d5:25:9d:39:cb:d3:5a:42:06:89:24:71:2e:
c1:bf:80:c1:b2:92:5f:37:80:d5:d4:77:f9:c4:c1:24:8f:54:
68:e0:04:f8:9a:14:cc:04:33:1a:cc:b2:27:6f:24:b5:a5:5b:
79:3a:93:fe:0e:78:b3:e6:c2:04:08:17:5d:35:43:48:af:c5:
88:db:08:f4:a4:e4:0e:e2:63:2b:69:f4:1b:0c:b9:15:e7:4f:
a0:8f:0c:dd:79:81:13:6e:0b:af:07:d4:dd:c8:34:45:77:25:
06:99:15:c6:b4:78:48:fa:af:5d:4b:89:2e:a4:e0:e1:20:64:
58:2e:cc:33:6b:cc:c2:61:5f:d9:47:f0:6e:ad:c6:f4:6e:41:
60:cf:ce:08:24:29:8c:c2:41:a7:85:18:ef:c5:15:e9:cf:38:
80:81:a3:e3:59:3f:7d:c6:7d:9c:25:59:06:e2:54:ba:21:4e:
32:62:1b:9e:b4:71:e6:93:89:13:10:35:6c:4d:da:77:ce:4d:
6e:0d:7f:71:06:5d:e5:1d:b4:a2:00:1c:fe:a6:63:5c:30:fb:
11:19:c2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 17:45:55 2025 by rpki-client