Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier: Jsx+9+H6VFGSTSiAWjAnLzN30XrD/9jJqrIHxIzvh6o=
Subject key identifier: 0B:05:FF:EE:53:CF:63:D2:B2:EF:C8:33:90:91:74:DF:40:88:9F:BF
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 019921E7AAE924A2208C5B381551A8AC46E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 02:00:54 +0000
Manifest this update: Sun 07 Sep 2025 02:00:54 +0000
Manifest next update: Mon 08 Sep 2025 02:00:54 +0000
Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: 90szmlhIAiBo54GstC0qBx8gI/9Dn2sxC9jpYc6ZTTI=)
2: juIbMy-ZOag5FvgvGV0o5yTeEN8.roa (hash: +hUGE34YMtW1+houvKxGq1sllVhVFyMUSU1KkXLa0fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:aa:e9:24:a2:20:8c:5b:38:15:51:a8:ac:46:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: Sep 7 02:00:54 2025 GMT
Not After : Sep 8 02:00:54 2025 GMT
Subject: CN=0b05ffee53cf63d2b2efc833909174df40889fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:85:1d:3b:22:f4:b4:10:ff:a2:9c:17:0c:
87:06:b9:1e:87:c1:41:e9:3d:cd:2c:bc:b5:ab:e1:
01:99:96:29:c4:23:8d:a8:a8:f2:3c:8b:23:81:c6:
6f:9d:07:95:b4:3f:11:52:82:58:88:b2:ea:45:01:
1a:8d:b0:8d:1c:96:ab:7c:73:10:e5:1d:a0:3d:a7:
6c:38:d6:28:45:c0:27:44:e2:7d:92:c2:72:73:8a:
f7:67:5e:d3:73:f5:12:de:49:f9:0b:27:17:5c:e5:
31:57:1b:43:3c:a5:fe:6c:6a:97:45:d6:71:5f:d5:
46:70:c2:6e:e1:05:6d:3a:74:bb:47:17:96:33:fa:
7d:2c:86:cd:0c:90:f2:02:3e:2e:b6:2a:3c:09:70:
26:e8:56:16:06:c8:74:cd:60:3b:e8:3c:4e:00:96:
b9:cb:85:65:a0:cb:28:7f:b5:b6:ae:94:3c:aa:57:
d6:ef:8a:dd:84:ab:58:b4:d6:06:51:43:f8:5f:7c:
6b:f4:9f:1d:f8:30:64:8d:f1:f7:5a:90:c5:48:ed:
49:be:9d:bf:3f:7f:0c:9e:10:53:16:ca:3b:a7:b2:
bf:c4:1b:62:70:2d:15:81:b5:d6:5b:a6:b1:8e:2a:
20:a9:62:4c:96:b1:51:4b:e5:0c:b0:73:ca:bd:d0:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:05:FF:EE:53:CF:63:D2:B2:EF:C8:33:90:91:74:DF:40:88:9F:BF
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6d:7d:c0:77:2d:48:a5:85:f1:8e:47:8f:7e:23:1b:43:51:
73:e1:86:df:5d:36:ab:9f:b6:0f:05:e6:54:08:3b:b0:05:18:
7d:02:78:ab:61:f8:cc:9c:93:a7:ba:4b:a9:4e:98:b4:27:46:
98:22:cd:83:5c:22:02:5f:38:44:9c:7b:31:d4:a8:c8:2c:11:
f6:92:10:11:6a:5d:f8:e5:1d:97:a5:e0:82:a3:3e:c0:17:48:
df:d5:97:9a:aa:74:17:13:43:00:9a:24:f2:d2:7a:cb:52:00:
1f:d3:98:b5:5f:5f:6f:e5:1f:af:83:e7:3b:06:1c:89:76:46:
bb:c6:a3:88:d0:ae:8e:92:70:f2:0f:d4:fe:26:17:ab:db:42:
fa:8f:6e:7c:38:ab:47:ff:e0:b6:45:60:3b:b6:ed:0d:05:50:
7b:fe:28:96:1a:73:65:24:f8:13:38:75:ff:5c:d7:72:66:fc:
0d:7a:12:8c:df:15:05:97:89:36:cb:ab:f1:27:d9:76:3a:77:
4a:70:61:f0:16:ab:44:40:bf:13:b1:ea:8b:79:2c:f5:4a:ea:
d4:e2:22:8a:45:ce:fe:78:6d:48:94:b0:5d:c5:19:50:5d:c0:
ac:eb:5d:39:ce:e4:ee:43:ed:ba:42:c7:aa:61:ca:61:70:0e:
16:b3:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:18 2025 by rpki-client