Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier: RQVXOhllIjUUFbgYmXMVPPOec0RxlxO8WCuObvHQRFY=
Subject key identifier: A8:6F:D3:EF:49:49:E0:70:F2:14:22:EE:3F:B4:D3:93:62:B9:07:2A
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 0199183FE53785083BE7780A051DC7685AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number: 166D
Signing time: Fri 05 Sep 2025 05:01:04 +0000
Manifest this update: Fri 05 Sep 2025 05:01:04 +0000
Manifest next update: Sat 06 Sep 2025 05:01:04 +0000
Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: 7cD0lKDKtmdY2QRjwI20JaVZQThIh2tfN2wXwDiSFDE=)
2: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (hash: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:e5:37:85:08:3b:e7:78:0a:05:1d:c7:68:5a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: Sep 5 05:01:04 2025 GMT
Not After : Sep 6 05:01:04 2025 GMT
Subject: CN=a86fd3ef4949e070f21422ee3fb4d39362b9072a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:f3:52:0e:d8:14:d5:82:d2:a5:df:a0:65:
db:2d:04:a7:ad:9f:4f:88:34:fb:18:ea:e1:ad:92:
a3:60:c1:1d:2f:68:5a:c3:79:2b:fd:57:85:99:df:
2b:5e:5b:5d:9e:5c:39:cb:b3:0e:17:74:97:40:78:
41:3e:d7:7b:65:f7:9c:64:db:10:ab:27:7a:00:ab:
6c:25:50:78:11:7a:04:ab:44:f2:8b:a5:90:0e:5f:
33:a4:75:80:bc:8a:59:03:0c:40:42:30:bf:26:cd:
54:d0:af:2b:3b:1f:2f:c7:4d:a6:7b:ba:1b:d8:46:
9a:04:eb:96:ba:ad:d8:7c:9b:64:2b:73:37:b4:4a:
de:ee:f8:8e:64:ee:96:8a:bb:90:f0:b6:de:f8:db:
db:2a:5c:43:8b:8e:31:18:09:76:e4:a1:9e:d9:66:
5d:b0:5a:8a:7f:ea:e0:c1:2c:a4:b9:cc:6c:d2:18:
0b:61:dc:50:68:18:28:94:ca:06:2e:ad:fd:ab:04:
da:08:68:3c:82:d3:08:0a:9b:38:b4:c0:55:49:22:
66:73:b2:18:c9:f5:ef:25:74:43:d2:00:fe:fb:ef:
7c:ad:5b:f4:04:b9:75:9f:06:4a:ba:29:30:8f:99:
94:9c:d4:df:3b:83:18:fe:2d:0f:38:9e:fd:5b:0a:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6F:D3:EF:49:49:E0:70:F2:14:22:EE:3F:B4:D3:93:62:B9:07:2A
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c3:90:32:76:40:59:e0:e4:40:95:64:67:ec:df:fc:38:87:
22:62:f2:83:03:11:bc:b9:99:c2:4f:86:d7:17:f9:94:68:ff:
e4:e7:29:2a:63:a7:ae:e3:2b:b2:72:47:a4:88:94:bd:7a:0f:
83:bd:50:b8:c7:78:9e:90:7c:52:ac:b9:af:95:fb:25:69:18:
9d:e6:b8:5b:76:c1:64:bd:e4:2f:a4:d7:3b:d5:35:39:5c:81:
ca:1a:40:63:4a:f9:5f:c6:06:75:f5:bd:8f:83:56:24:a6:41:
c6:33:57:32:2e:d3:d7:66:5e:f0:4f:ce:c6:8b:69:7e:0a:65:
bf:14:b8:63:d6:c1:b4:b6:c3:7e:54:70:24:a5:e3:1c:3a:48:
da:ff:29:35:8f:6a:56:35:dc:3a:53:db:33:33:03:78:c6:24:
85:3d:8e:96:ab:63:01:a5:b8:c1:43:e3:22:4d:b4:cb:7d:17:
0c:8f:f7:8f:df:98:3e:68:87:b4:ea:5a:32:fe:a3:09:45:9a:
35:9b:b3:ec:d3:e2:6a:78:0a:ae:4d:db:9b:cb:5a:af:be:e1:
12:f3:3f:c2:9e:c8:22:02:d8:86:2a:2e:31:a9:28:bf:20:a7:
bc:66:82:24:1c:c0:fe:f0:a5:6c:ab:49:40:88:38:a3:4a:d3:
97:4f:15:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:13 2025 by rpki-client