Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: 0AR6yQ3HooBqE8BbDY6u/ZFwonI/bOaa0VI8SAH7QOk=
Subject key identifier: 83:BB:95:7B:24:1E:01:C4:53:95:E5:B8:C4:79:16:AD:86:08:76:C9
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 019938025F2F732E6DF57272D8B8305B244E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 0DF8
Signing time: Thu 11 Sep 2025 09:01:43 +0000
Manifest this update: Thu 11 Sep 2025 09:01:43 +0000
Manifest next update: Fri 12 Sep 2025 09:01:43 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: yx4O+MEne9cdxX/xJoVb139WzWPHRITxK2VQU89e5V0=)
2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:5f:2f:73:2e:6d:f5:72:72:d8:b8:30:5b:24:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Sep 11 09:01:43 2025 GMT
Not After : Sep 12 09:01:43 2025 GMT
Subject: CN=83bb957b241e01c45395e5b8c47916ad860876c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:0e:98:fb:3d:19:17:9a:52:0b:b1:81:1a:
db:18:cd:ce:6c:23:48:dd:2c:50:34:0e:68:b0:77:
5a:c9:f3:8a:72:44:f6:7b:95:b4:9d:53:58:8d:c7:
b6:64:0e:62:38:e3:4b:6e:fb:71:b6:cc:20:6d:a1:
25:a6:12:2d:e3:6b:ac:40:c0:28:ab:3c:d5:a7:6b:
e6:fa:de:ce:12:ce:fc:fc:3e:c4:8c:7c:d0:ea:8b:
a9:a2:c1:6c:a5:04:19:2f:d6:05:8a:63:53:0c:6e:
f2:80:4f:98:db:6d:79:2e:fb:78:ee:c3:de:17:c1:
72:f8:fa:72:5e:ce:54:58:02:bc:6c:4d:cb:bc:58:
03:dc:d6:49:dc:08:26:40:af:9b:58:3c:00:98:68:
ec:8d:60:2a:6b:7c:48:a2:c7:27:e8:78:0c:51:4d:
b5:08:5e:51:b3:a2:63:c4:07:eb:39:c7:ca:ff:41:
99:f6:9c:55:59:dc:be:6c:f5:0a:0d:bb:6b:47:d6:
59:45:a1:23:13:5b:19:80:a9:af:f4:c9:8e:fe:1b:
a8:c0:4a:4b:65:f2:82:48:6a:1d:da:fd:75:8a:01:
8d:a5:2b:51:aa:90:83:e2:c6:f1:03:3c:ff:95:27:
88:b7:2b:f0:9f:4e:f0:9d:51:04:7b:0e:a5:58:36:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BB:95:7B:24:1E:01:C4:53:95:E5:B8:C4:79:16:AD:86:08:76:C9
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:58:07:41:1e:38:fe:6c:60:e0:74:5a:20:c4:a0:64:af:38:
3e:d8:bb:b0:e2:1a:06:d7:4b:9f:e0:a8:8d:4b:ad:68:39:68:
75:63:03:52:cf:c6:7d:1d:19:76:cb:cb:0c:86:bf:a0:cb:51:
61:cd:41:74:a6:bd:c3:a8:9a:d1:23:47:2d:26:fb:e3:23:ca:
61:b4:63:d1:d5:61:c5:a0:97:cb:a7:bf:3a:a8:e3:8e:85:e0:
07:2f:5f:11:0c:90:c9:53:a9:cd:f0:70:9d:4d:9f:d0:84:13:
1f:ac:51:ad:06:18:3c:93:b6:57:17:23:93:0e:3a:bd:68:c0:
1c:fa:71:b2:9c:84:bf:cc:6f:8a:51:99:5d:ac:f0:34:95:c9:
a7:77:42:4c:bc:f0:b3:d7:4b:e1:fd:33:1b:4d:71:ef:c4:5a:
c7:17:55:a0:da:af:56:ee:9c:fe:c6:2a:30:f2:04:3c:80:fd:
5f:45:48:59:9e:4c:92:c0:3b:63:56:96:c0:c9:5e:3b:c7:d8:
f1:39:ab:cc:54:cd:e8:b9:49:16:5d:3f:82:82:b2:bb:94:dd:
2e:c8:cc:04:ea:4d:9a:5d:82:4c:92:00:ed:ea:4b:bc:bd:ca:
74:f6:2f:c8:9b:85:78:13:ec:08:dc:ff:63:63:ea:27:07:6e:
b7:a7:97:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:57:08 2025 by rpki-client