Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: sAAMKjbO2Cu3/rhR4czm+S0FyIcZ46BBj3iXH7/ape4=
Subject key identifier: 5E:50:29:00:7D:7A:C2:90:7F:A1:B8:95:B7:F2:E2:FB:90:18:54:8D
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 01993047D987A29A594D94E3E45A82DC8FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0AA0
Signing time: Tue 09 Sep 2025 21:00:39 +0000
Manifest this update: Tue 09 Sep 2025 21:00:39 +0000
Manifest next update: Wed 10 Sep 2025 21:00:39 +0000
Files and hashes: 1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=)
2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: wnQnDbIdSmt2b0LFYfT58hO6AlickSvGPE1HPzeHqMk=)
3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:d9:87:a2:9a:59:4d:94:e3:e4:5a:82:dc:8f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Sep 9 21:00:39 2025 GMT
Not After : Sep 10 21:00:39 2025 GMT
Subject: CN=5e5029007d7ac2907fa1b895b7f2e2fb9018548d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:2b:84:be:3a:7c:02:54:91:34:63:15:fe:
35:6b:33:a9:f0:3c:9c:56:97:f7:b3:06:43:e1:92:
4b:22:43:b1:96:46:e2:29:3f:c8:83:04:d3:de:6c:
79:cb:f8:bd:0d:fb:91:2f:b9:24:19:1d:74:db:b7:
4b:86:52:28:f8:c3:fe:56:9d:4f:05:6a:05:82:93:
04:58:05:2f:3b:aa:3d:54:0e:0c:b2:8c:9d:e5:e6:
d1:37:f4:5e:15:ee:31:ce:1f:09:b0:ce:f5:1a:15:
0c:28:a6:84:99:81:9d:8c:3e:73:1d:bc:a6:61:e2:
84:23:8d:36:45:e4:a8:04:28:a2:cf:0d:7a:e5:b7:
55:32:13:1f:9b:a8:e0:91:e9:2b:15:5e:fd:4a:1f:
d4:e6:fe:85:75:46:78:b8:55:6f:e3:65:f3:ee:f8:
8c:d9:5a:04:19:2d:1c:33:07:e0:6c:92:7f:75:72:
ee:48:f8:31:71:5f:b1:b8:43:74:43:5d:d9:c6:ee:
86:1d:a0:50:82:80:60:69:93:dc:a9:a6:36:d5:45:
98:b2:94:f1:c0:36:ee:3c:33:84:f1:ee:eb:57:f2:
3c:8c:88:3c:e0:63:57:e0:1b:0d:86:b4:2e:f0:2c:
fa:77:4a:e5:ed:4a:73:8b:dd:85:e0:69:f2:84:27:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:50:29:00:7D:7A:C2:90:7F:A1:B8:95:B7:F2:E2:FB:90:18:54:8D
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7c:25:61:ce:79:f6:c9:f2:75:bf:50:92:4f:b4:55:f5:96:
eb:7a:67:cd:12:67:12:7a:57:27:51:75:48:7c:ac:15:db:0a:
97:6e:ed:ee:fa:74:57:69:26:ce:1d:8d:3f:e5:b6:db:16:ee:
02:60:66:c5:f5:0d:e0:cc:91:97:eb:5c:36:61:51:68:3c:44:
e8:84:f8:c7:37:a4:ce:50:81:30:43:85:f0:c9:a1:15:8b:b1:
f0:7f:c6:4b:3a:85:f7:4a:32:19:52:0d:d5:a7:3b:4f:06:87:
98:f4:8a:21:79:ae:bd:08:c4:94:37:36:21:ca:4c:ed:1e:03:
24:1f:db:70:c1:cf:e9:2d:c2:8e:52:39:e1:1d:11:e8:6c:a8:
c7:a8:b6:71:8a:7a:68:6f:a9:49:bd:3e:4d:aa:ee:8b:1d:67:
0a:be:66:14:fb:9b:26:3c:9d:96:10:ed:c6:1e:50:13:00:68:
75:0f:db:fe:d4:e0:21:aa:bd:fe:57:8d:b9:6f:81:92:fb:aa:
b6:84:81:7e:23:42:9c:aa:db:6f:89:27:82:fd:6d:93:df:cb:
da:e9:84:f1:be:83:24:b6:a8:0c:47:47:eb:cb:c2:bf:67:53:
c8:5d:5f:b2:33:48:f5:b6:06:3f:96:32:81:de:38:c2:4b:bc:
fa:82:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:24:06 2025 by rpki-client