Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: atQmZbow+fQ1z9eBzei4td1npGJCt7IdzKCMhH8h7U0=
Subject key identifier: 4F:93:D6:4D:71:DC:A9:10:8F:1A:0C:D2:42:E3:28:6D:97:9A:B9:DE
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 01991688D8C37B3BA883710EB22109933128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 0B53
Signing time: Thu 04 Sep 2025 21:01:30 +0000
Manifest this update: Thu 04 Sep 2025 21:01:30 +0000
Manifest next update: Fri 05 Sep 2025 21:01:30 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: Btv6/G5DDd8nZczO0M1Z/rtfJaFyii18RJhA5pTosmc=)
2: 5LrP6fsEeipB-xjaCGTQi9KsiHU.roa (hash: IUrzC+/E4lKM4F7rtTCN//MYlbyHBk9E/FLwLHHLeZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:d8:c3:7b:3b:a8:83:71:0e:b2:21:09:93:31:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Sep 4 21:01:30 2025 GMT
Not After : Sep 5 21:01:30 2025 GMT
Subject: CN=4f93d64d71dca9108f1a0cd242e3286d979ab9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4d:c0:fe:55:41:d8:88:d2:ee:9a:01:cd:17:
ab:fe:26:1b:21:d4:a3:30:d3:a2:19:ae:92:0e:53:
e9:fd:5d:df:00:8d:6a:22:3a:9e:24:7f:69:c4:cb:
8f:4e:b1:0b:b5:c1:a2:5f:d8:a7:d8:b5:4a:38:7e:
64:50:73:7f:44:ce:b2:30:ac:c1:a8:2c:44:57:29:
77:db:51:12:43:8a:62:11:5a:c7:79:04:16:fb:df:
81:98:73:f5:33:85:5c:86:9e:e8:e5:fa:d8:1f:60:
58:f2:75:37:5a:75:1b:1d:22:5e:93:8a:2d:26:e5:
58:de:3d:82:00:a8:2d:00:e2:b9:1b:f8:a5:5d:ff:
eb:f7:ae:19:2b:0d:4c:d0:ff:b0:01:b3:98:93:f0:
92:0f:b8:71:24:60:84:66:8f:1c:3d:47:21:d9:75:
99:e1:bd:5a:75:4f:49:79:1f:71:1d:2e:c3:f6:6f:
03:da:2c:40:86:d2:06:c0:be:38:8b:68:90:e5:6d:
4b:24:7d:f7:d1:10:f8:5b:59:07:07:54:87:3b:b0:
5b:ee:be:9d:bc:ac:8f:55:73:20:34:0a:10:43:d3:
72:bf:3a:d4:75:7e:01:9c:71:e3:47:fb:b3:7f:39:
fd:f3:b6:2d:7d:7a:68:ff:f5:cb:9a:3c:a2:11:65:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:93:D6:4D:71:DC:A9:10:8F:1A:0C:D2:42:E3:28:6D:97:9A:B9:DE
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ba:ac:b6:fa:1f:30:f7:b5:bc:e6:f5:37:62:db:49:80:d2:
ee:83:e1:63:0a:a0:ea:9a:67:9c:67:50:2a:ec:3e:7c:cd:56:
5f:fb:96:02:f4:55:a8:69:e2:6e:c3:9f:86:34:4a:5e:2f:72:
f8:af:e5:5c:f4:64:99:64:94:b1:d9:22:c4:c4:51:3a:ca:a1:
ef:44:c0:fc:83:03:ea:c0:0d:e2:79:ef:78:aa:82:a0:56:2c:
84:4a:85:67:8e:bd:da:03:0c:3f:0c:41:5b:a5:92:75:7c:5b:
8d:e7:e2:20:84:64:ef:1b:10:eb:37:c8:21:38:3e:67:22:3c:
35:1e:2b:cc:a2:bc:7e:2e:39:9f:f3:e3:a0:5c:ae:ef:00:27:
35:7a:f7:d7:65:f9:b9:d4:48:52:61:10:68:ac:b2:d1:aa:02:
f9:02:48:e7:92:b5:87:bd:db:bd:32:38:25:4b:a6:d9:12:7e:
ee:c6:e3:45:36:f5:a8:08:48:db:33:22:c9:c7:ca:e6:62:33:
0f:a8:d1:b0:e9:1f:88:e5:9b:78:f3:15:46:cb:a1:98:8b:6b:
ca:78:8d:aa:ef:77:d3:b8:95:d1:12:94:b4:de:72:9a:a6:0d:
5c:65:dc:75:5b:3f:22:1c:6d:38:21:f0:61:2e:a5:e2:5b:3c:
8f:e0:ec:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:18 2025 by rpki-client