Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File: 18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier: +NQNCN1DVKnstip1mo2uP6d6oPPhk1qtjfNxz1cbPUs=
Subject key identifier: 0E:68:AF:65:B8:C1:A0:CA:04:A3:A6:9D:BE:C0:83:43:B4:84:E9:6E
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial: 01992367C8402395FA5F80FEC6F74A7345CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number: 0D93
Signing time: Sun 07 Sep 2025 09:00:27 +0000
Manifest this update: Sun 07 Sep 2025 09:00:27 +0000
Manifest next update: Mon 08 Sep 2025 09:00:27 +0000
Files and hashes: 1: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: NBTP5LuePKUVTd7u1N4ZDXELBY9fsBlRxo+uqgWKSPA=)
2: OPYEfeaD4UG3_woKyPv1Wj7JrZg.roa (hash: iv8H/ObGNtJDTTAshveiukMxLvPbVXVjWuW+XjG+jWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:c8:40:23:95:fa:5f:80:fe:c6:f7:4a:73:45:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Validity
Not Before: Sep 7 09:00:27 2025 GMT
Not After : Sep 8 09:00:27 2025 GMT
Subject: CN=0e68af65b8c1a0ca04a3a69dbec08343b484e96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:b0:5e:93:ff:7d:b9:a2:d9:d5:72:ad:b8:
dd:52:f2:36:d5:94:68:21:74:23:9c:f8:e5:3b:b8:
be:22:fb:e9:4f:0d:7e:f9:c1:87:94:37:c3:75:ce:
5a:f4:56:ea:ff:3a:da:4b:db:be:bb:49:91:ff:61:
5d:77:e4:8f:7c:8a:d7:55:23:91:40:63:fe:d5:03:
4a:9e:b2:19:31:98:ac:b9:4d:4b:bf:6c:1f:c5:07:
4c:78:1c:2c:4c:4e:b0:4a:9c:2c:51:a3:23:84:4a:
ba:9f:b9:89:4f:3b:35:4d:52:8e:70:87:b9:7a:93:
ea:0b:0b:94:8f:5d:6b:31:79:9d:84:45:f9:3d:ba:
48:93:3c:89:15:2b:45:cb:64:44:15:bc:6b:4c:4d:
d8:61:94:a4:eb:4e:ac:7e:35:b4:66:64:38:8a:fe:
b1:e0:f3:01:da:7a:d8:fa:f1:ba:62:80:03:df:eb:
fa:9e:65:be:42:ae:05:ca:8f:c4:92:18:65:1b:ab:
a1:3c:18:e1:e3:f9:7a:a0:5d:a5:3e:35:7c:82:d4:
7c:4f:8b:9e:60:c8:5f:76:69:f4:1b:bf:75:29:6d:
a1:e9:ea:c3:41:1d:0a:05:6c:05:66:12:6d:a5:8b:
8d:f7:1d:0c:1d:aa:e2:3f:9e:64:00:30:56:fd:e2:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:AF:65:B8:C1:A0:CA:04:A3:A6:9D:BE:C0:83:43:B4:84:E9:6E
X509v3 Authority Key Identifier:
keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fa:75:83:4f:39:a3:cf:a3:0f:93:01:28:a2:17:b9:54:92:
7a:8e:80:cb:41:f3:f5:8d:af:37:c4:c1:51:44:a3:cc:b4:0b:
cb:ff:0d:25:bf:50:5f:5c:51:2d:c6:d4:a6:f8:f7:16:28:41:
c4:e9:10:59:b0:d0:0e:dc:0b:c7:d7:46:89:44:82:d8:18:a2:
4e:a4:a8:80:24:03:6a:b2:3f:3b:97:c2:ea:c4:c1:b1:47:d7:
0e:12:e5:a9:b6:9e:76:0a:f0:dd:28:37:9e:ab:a9:59:ce:c2:
11:c0:82:27:0c:9b:2e:65:fa:0d:2e:e8:84:8d:42:10:f5:ad:
ec:b5:05:88:84:c7:d0:94:0b:b5:7f:53:07:09:dd:6d:68:05:
44:c2:c4:bf:63:5b:59:32:68:ac:27:fd:f1:df:78:b1:fb:23:
9d:ea:70:a4:29:cd:1a:ee:fa:cf:30:b1:3d:b0:ca:6c:91:4e:
dc:00:33:95:28:86:85:8c:d9:6e:da:af:7f:bf:e9:f9:23:49:
00:13:a4:45:05:21:d5:25:1f:9b:4f:f6:50:6d:98:be:06:de:
18:47:c7:6f:42:84:ae:88:84:3f:a8:6a:90:21:16:45:5d:5f:
cb:c2:1d:af:75:f9:a6:a6:aa:8e:84:c0:f0:a7:2c:86:78:ff:
87:47:d1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:17 2025 by rpki-client