Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: gYj8qS5I8Vd5j6YEle+11tJuX5uzxAiH1XT5+q/vWgU=
Subject key identifier: 2F:05:A7:27:95:0C:78:16:1F:19:7C:F8:72:4D:F7:CF:15:5C:2E:C3
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 019918097C6AFCB1EF601AD6469C3154D8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0A43
Signing time: Fri 05 Sep 2025 04:01:38 +0000
Manifest this update: Fri 05 Sep 2025 04:01:38 +0000
Manifest next update: Sat 06 Sep 2025 04:01:38 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: sqNv7dkTvcgadh7iQyx4kXpYmAnc1z0Pk/YWae2SeRs=)
2: p_TDMyzlQ5zmtlyOFxztvJEw2HQ.roa (hash: fmxxB5F2kwLUu456RKJpssuFKFMbicdIEkOy2yPaKKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:7c:6a:fc:b1:ef:60:1a:d6:46:9c:31:54:d8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Sep 5 04:01:38 2025 GMT
Not After : Sep 6 04:01:38 2025 GMT
Subject: CN=2f05a727950c78161f197cf8724df7cf155c2ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:f1:a9:2f:08:77:ce:d8:21:10:8e:3f:de:
b5:46:b1:08:9d:ee:64:f5:34:15:53:7f:12:5c:e9:
9b:f6:23:09:68:e9:7a:ed:b7:56:c2:64:56:b6:09:
d2:7f:2a:31:a8:9a:a8:d6:64:c1:9f:de:8e:a6:87:
68:3f:b0:62:3a:38:9f:75:45:6b:18:66:f8:c1:33:
ea:64:2a:f8:07:3f:f0:c1:2f:79:e3:be:de:a9:df:
c3:3e:76:ca:ff:a5:bc:01:3b:17:fc:47:82:b5:06:
14:2b:3f:fc:65:56:24:95:e6:cd:79:13:49:0e:a5:
f2:25:3a:95:0b:f3:d2:28:4c:01:c0:ac:1e:79:a7:
5d:5e:da:79:9e:be:39:f2:21:1e:3f:c1:18:a3:dc:
42:b2:dc:a8:ff:33:d5:e2:5e:f7:0b:10:23:ef:fd:
0e:b8:10:0c:c4:f7:a4:20:fe:9d:da:d2:2f:23:a0:
a8:df:b1:c6:a2:36:0f:cb:af:49:cd:7e:23:88:e7:
bc:ca:01:76:aa:a4:00:8c:7d:b2:0e:f4:00:4e:b8:
5a:50:f1:10:78:98:ef:cb:61:03:20:c5:f5:44:39:
4f:d3:04:27:84:c8:04:24:74:0d:bd:7d:e8:33:da:
80:b1:ed:00:49:d8:f5:a8:17:89:b1:f6:24:50:b4:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:05:A7:27:95:0C:78:16:1F:19:7C:F8:72:4D:F7:CF:15:5C:2E:C3
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9a:ae:dd:14:df:88:3d:59:af:fb:e4:e5:b2:27:dc:5a:b0:
a7:84:d0:18:7c:83:f8:88:d9:d7:2b:e8:17:78:69:44:9a:8f:
92:b5:f8:8e:e8:16:a7:55:5b:94:23:dd:fd:cc:c5:4b:8a:98:
b9:6e:75:c7:99:7a:c3:5f:b6:75:10:b9:be:02:ab:f5:e1:7a:
b2:31:0d:5c:cb:ec:dc:c0:3b:a6:39:15:19:76:4e:df:13:b8:
83:95:67:11:0d:c9:22:5f:56:cf:9f:1a:73:14:f0:6b:8b:29:
ef:a0:cd:14:0a:19:1b:15:d2:f4:65:92:d4:03:cb:f1:b5:1a:
0d:30:9a:71:c4:74:69:af:1b:20:52:75:39:08:6e:46:df:0a:
1a:85:cc:64:48:b9:25:48:d1:df:b7:a3:71:e1:06:da:ba:ac:
50:75:3c:eb:39:77:73:03:2c:3e:47:79:e5:ad:e9:1c:71:8b:
95:6a:bd:37:09:f2:50:d2:1a:e9:b3:03:77:d5:a4:1e:47:21:
0c:81:bc:4a:95:73:9b:45:50:7e:3e:09:d0:e9:25:03:3d:58:
6a:79:27:9b:3f:3e:5e:f8:9d:ca:bf:8c:23:f2:88:4f:5f:37:
03:20:c9:fd:d9:c7:d4:7a:55:3a:c2:ff:2e:e5:8d:49:7e:42:
ac:f0:36:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:34 2025 by rpki-client