Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: U9Kf/2oD+xZXVaNkbWTB3EbxAybQb0mpc8DVRFjKhJs=
Subject key identifier: 0A:FF:6A:54:A3:18:9E:DB:1D:93:59:59:D9:74:B0:E7:93:D0:54:85
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 0199161BEE5B0ABFECA60AEF9D983154EA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 159B
Signing time: Thu 04 Sep 2025 19:02:33 +0000
Manifest this update: Thu 04 Sep 2025 19:02:33 +0000
Manifest next update: Fri 05 Sep 2025 19:02:33 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: QwzY39uzaOac91z8b/4L3YeuPFc/uwUvQEGjtV603NY=)
2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1b:ee:5b:0a:bf:ec:a6:0a:ef:9d:98:31:54:ea:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Sep 4 19:02:33 2025 GMT
Not After : Sep 5 19:02:33 2025 GMT
Subject: CN=0aff6a54a3189edb1d935959d974b0e793d05485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:e9:3b:ea:02:c6:df:e3:55:f1:4c:f2:62:
c1:5b:af:cc:96:0a:c0:e7:2b:da:6a:08:2e:e2:2a:
be:5d:8a:8e:3a:0c:88:40:19:34:fb:c7:d0:b0:19:
1d:70:69:69:ea:1b:88:a7:da:f3:29:66:0a:1a:f2:
71:25:14:65:84:93:43:09:15:40:95:d6:f8:51:fd:
53:f6:76:e2:41:6d:dd:92:5d:04:21:d9:a4:24:a2:
45:75:76:41:d1:8c:61:86:71:91:10:86:bd:71:e1:
d8:fd:d3:e1:e8:35:f3:28:db:73:0b:6a:de:02:e0:
73:c8:22:6b:77:eb:98:aa:4c:4a:d9:66:c1:da:41:
a4:6f:56:32:5b:b9:cb:71:23:5a:50:69:41:16:09:
23:33:7b:86:00:e4:46:b6:73:fd:ac:e6:33:d8:10:
93:74:b4:a3:27:f7:5a:08:d2:d0:7b:81:39:7b:fa:
32:ee:79:ec:d0:7d:29:df:75:c0:e9:c5:c1:e4:e1:
4a:b1:e7:20:28:79:c3:19:bc:a8:6a:54:c1:39:ec:
7f:02:5c:29:ab:38:74:3a:f1:65:fd:8f:c3:db:19:
ed:ea:db:f9:9c:c9:14:04:ca:e5:d1:31:f1:f0:0d:
a9:20:b1:c1:31:7c:46:55:a9:6d:57:e5:f5:82:08:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FF:6A:54:A3:18:9E:DB:1D:93:59:59:D9:74:B0:E7:93:D0:54:85
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8a:e5:80:2f:3d:bf:97:94:10:0d:b6:08:33:18:2a:76:fd:
b2:3b:e5:50:16:9a:7d:fd:b9:af:69:13:4c:45:d8:97:08:16:
61:14:d0:ad:53:39:e8:e9:7f:a4:00:10:17:ea:2f:61:ad:8c:
08:e0:e3:39:27:f0:cb:b9:3f:30:b4:5b:62:2d:b9:f9:52:9b:
3d:32:33:25:cb:ff:d8:1c:71:24:86:94:15:1b:c4:0c:32:b5:
29:90:9a:6f:8b:12:7a:a3:af:25:a5:77:ad:63:65:75:3e:4b:
98:4d:41:8a:ff:ea:09:2b:f7:db:d8:4c:38:4a:f3:e9:57:42:
f2:5f:d5:fd:af:10:7d:d6:f3:bc:24:06:1a:ef:3c:11:45:ec:
2b:82:a2:3b:20:01:07:aa:d9:6e:9c:08:e8:82:25:89:c7:cc:
6e:e8:13:ed:99:a2:b4:53:ae:7a:1f:06:cd:ac:56:14:af:4e:
56:df:bb:8d:5f:ae:5b:cc:ee:8b:48:a6:ab:bd:ed:b3:4e:b0:
4f:4c:06:c3:83:a1:16:d2:5f:2d:5f:da:b3:33:25:92:63:20:
b5:2a:47:90:eb:70:39:3f:ba:de:52:80:90:dd:47:50:0e:8b:
ab:25:1e:24:f5:46:a7:62:3b:f6:ca:30:4c:f4:75:6a:48:c7:
65:b3:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:23 2025 by rpki-client