Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json)
Hash identifier: 1AyEmgxUn6dMyY1oCfOo1uOEs5Auz/ZPKa1qA3Q+K4s=
Subject key identifier: 3A:7F:2C:B1:63:21:EE:43:D6:49:09:04:31:F1:49:C8:7E:99:ED:E2
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial: 0198C6109A04EF073BCB483ABD232E687E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
Manifest number: 1502
Signing time: Wed 20 Aug 2025 06:00:33 +0000
Manifest this update: Wed 20 Aug 2025 06:00:33 +0000
Manifest next update: Thu 21 Aug 2025 06:00:33 +0000
Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: UIfu46iU0a4gNU66Xm15oCtk1HAslAAWokTnhX9n2KI=)
2: Eoa2DgYKZQhIPrEs2BVXe4pbre4.roa (hash: Lzu15VnANjg8WWEayf+Lga5VSNyXHu7NEi9f0IPI47U=)
3: N1PB4wkghMthA8l4GP9N1SzOEWE.roa (hash: 8LPlkWhxVtJM+jMtTkRPToXaYbmZ6b57zhGOgt0FEmU=)
4: V7B5ePYrHsO0XNRkMFSzpgb0L6o.roa (hash: mqOCLJjTNfcn+4Yc3m3WAArsC6xNXAO5dY/bAJctVR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:10:9a:04:ef:07:3b:cb:48:3a:bd:23:2e:68:7e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Validity
Not Before: Aug 20 06:00:33 2025 GMT
Not After : Aug 21 06:00:33 2025 GMT
Subject: CN=3a7f2cb16321ee43d649090431f149c87e99ede2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:48:88:79:d7:51:4b:ed:2d:3d:92:34:de:
ef:d5:6f:c1:24:8a:ac:51:e7:ca:1b:0b:2a:19:da:
89:ba:2a:67:14:ac:2f:24:77:f9:8d:fe:be:a1:cd:
1c:c7:04:cd:0d:6f:40:b8:36:1e:77:4e:a4:78:ed:
b5:e6:fd:06:78:cb:02:be:5e:d2:e7:0f:6b:1a:d6:
a2:1e:ae:14:a9:6a:01:d9:a8:8b:9d:71:1e:dc:a6:
40:80:c5:93:a0:cb:66:a7:e9:32:0a:f0:b0:07:7a:
7d:ea:a4:a5:e4:26:46:f0:b4:41:55:0d:61:91:bf:
a0:36:8a:54:2f:f5:f3:fb:31:b0:25:11:08:14:58:
17:25:5d:60:a0:ea:63:23:7a:26:68:22:a2:ff:e7:
77:57:aa:8e:d2:c6:73:9e:e7:1e:5f:0d:ac:8d:1f:
92:a8:ca:6d:17:e1:23:5e:1f:56:66:b1:0b:22:18:
27:c0:cc:a8:58:09:42:f5:21:ab:18:7a:bb:b0:4d:
cb:cd:1d:13:b1:23:3e:3d:20:59:89:ee:fe:01:bc:
0e:37:bf:2a:2b:92:99:0c:36:e6:4c:5e:1c:83:12:
e8:50:78:9e:04:47:77:b1:ac:6f:30:14:09:9b:af:
bd:9f:8a:ad:01:ae:58:cb:d7:54:1c:45:fb:c9:c1:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7F:2C:B1:63:21:EE:43:D6:49:09:04:31:F1:49:C8:7E:99:ED:E2
X509v3 Authority Key Identifier:
keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:df:d8:5b:d1:10:c5:6b:cc:47:7b:53:b6:89:c5:0f:09:9b:
fc:50:7f:f6:68:97:c4:2e:cc:39:1d:03:57:c1:ec:05:5d:43:
15:ed:b4:17:69:a8:d0:e5:4f:f1:e6:c0:02:d9:e5:fe:ca:c4:
45:44:89:42:59:0e:a1:d1:ec:c1:84:be:dd:52:52:0a:f4:59:
7c:e6:67:63:71:0d:47:a5:b9:ff:3b:99:71:3a:90:a7:cc:d1:
6e:5c:ac:e8:4b:75:06:99:41:f4:0f:90:86:7a:d0:c5:13:58:
42:d8:9c:24:44:44:e4:5a:37:02:1d:6e:ea:b9:69:a7:8c:6c:
aa:ca:87:c9:98:16:aa:a5:14:ce:7a:58:f9:fc:19:55:68:c4:
5f:e9:19:7c:dc:97:1f:0c:a6:e4:e6:06:c7:b5:19:f9:e7:19:
18:58:40:3e:47:25:3a:aa:07:07:aa:fb:72:0a:1e:7d:58:3f:
94:21:90:df:0a:65:e0:ae:ff:59:4f:02:a8:2f:fd:d8:f5:ea:
4b:1f:ef:cc:9d:97:93:05:47:fc:0c:bf:34:4c:49:62:d3:3c:
4d:af:3b:02:cd:37:d4:41:a9:a5:43:e2:f8:1a:10:e6:99:1e:
e5:97:2a:78:48:8d:e7:80:30:08:3e:33:87:cc:5f:cf:0e:4d:
e8:d4:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:10:54 2025 by rpki-client