Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier: I30YMizIEXrDNtUlrRcB1PUpiBsBSP2wuoJCOUtMsD8=
Subject key identifier: EC:0E:92:E1:33:E3:73:37:55:79:EC:B5:53:7D:85:15:47:F3:C9:72
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial: 019921B0E7B8377E12C2B3A7B7D4DBD229B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number: 166C
Signing time: Sun 07 Sep 2025 01:01:05 +0000
Manifest this update: Sun 07 Sep 2025 01:01:05 +0000
Manifest next update: Mon 08 Sep 2025 01:01:05 +0000
Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: idW/6q0yItHZGlDbcseiTWoddxWTipi4W/slwpdLsU0=)
2: j-Iupp3EcWQfbMD2aDvdXh5buVM.roa (hash: vNF4TPFh0oVURLAenwqLDdq2RvvuTpEILFtX5lE+Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:e7:b8:37:7e:12:c2:b3:a7:b7:d4:db:d2:29:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Validity
Not Before: Sep 7 01:01:05 2025 GMT
Not After : Sep 8 01:01:05 2025 GMT
Subject: CN=ec0e92e133e373375579ecb5537d851547f3c972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5e:1c:9c:e4:51:1a:e8:af:06:88:83:3a:3e:
c3:80:0a:29:33:85:97:6a:6a:b0:7a:4b:e1:de:cd:
98:5b:ba:9e:8e:81:70:87:4e:3a:6f:68:aa:05:cb:
08:fb:d6:03:5b:97:92:ea:30:ea:96:92:10:be:72:
db:f8:3f:ad:dd:7b:80:5a:72:a5:0c:32:bd:14:df:
9c:b8:00:08:73:15:96:23:65:47:a5:89:a4:82:00:
fe:11:f1:aa:fc:96:ec:10:b2:ec:cd:84:be:42:cd:
95:b3:b4:68:47:9d:e4:32:f3:f1:34:a6:ef:01:af:
2f:dc:b5:d3:6c:14:b4:0c:d3:d5:74:fd:23:e8:da:
b7:aa:f8:07:46:01:f3:6a:bd:3f:48:cc:43:44:ee:
1d:aa:b6:da:7d:59:51:21:89:36:02:9b:bf:56:72:
7f:42:d4:5b:50:69:bd:af:60:1a:c7:2a:f6:c8:16:
7e:d5:34:a9:72:3d:98:86:eb:2d:09:41:37:b3:bb:
c0:28:93:37:e0:17:76:5c:4c:7a:0e:35:2e:e8:40:
91:aa:54:57:a9:22:4f:a1:c6:cf:98:8c:bb:ea:06:
2a:1e:49:3e:45:59:20:e5:d6:54:ab:62:8a:e1:cc:
bd:67:3e:53:ed:08:14:25:88:cf:63:c8:b1:0d:b2:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0E:92:E1:33:E3:73:37:55:79:EC:B5:53:7D:85:15:47:F3:C9:72
X509v3 Authority Key Identifier:
keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e9:28:55:39:cc:32:79:4d:60:22:61:10:d0:88:60:69:e4:
f7:e8:47:a7:59:ba:45:55:4f:51:22:76:26:ae:f0:35:68:80:
5b:07:20:d2:95:63:f0:34:d0:3e:00:de:6f:69:3e:c6:b4:b3:
2e:80:11:d8:eb:d1:29:95:b6:6e:1b:29:08:9d:27:8c:be:db:
be:27:97:bd:7d:67:b2:fc:d9:97:b5:79:97:dc:ed:0f:f5:50:
83:3d:c5:c9:b7:c9:1b:67:b4:19:90:1c:53:21:4e:ba:b0:4a:
34:13:cf:0b:9d:ae:ba:bb:af:32:e1:76:b5:d3:c5:7d:3e:8f:
41:b0:15:d1:72:88:cc:2c:56:96:8f:f5:69:81:fd:ac:73:a8:
b9:2e:29:47:ef:dd:49:ec:e1:4d:5c:6f:f6:0d:f6:95:74:8d:
32:e5:ee:f6:c3:94:4c:1a:81:e1:65:5d:b7:66:44:d0:80:c2:
95:ed:81:f0:63:89:80:93:13:11:ef:25:42:c0:03:3f:3d:71:
30:c6:2f:68:ba:7c:4b:de:38:7a:82:66:c5:0e:32:f8:39:38:
03:68:dc:9f:a4:91:66:1b:da:ee:40:e8:6d:aa:93:34:84:59:
c3:98:c4:d9:aa:11:8e:5b:cb:46:fc:61:4b:a9:66:3e:fa:21:
91:0e:27:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:13 2025 by rpki-client