Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: fs6ZpVikyLdIge4DLs1ZAhBJhEpyWDrDDH0NFc6+nKY=
Subject key identifier: 86:9C:EB:12:4A:6B:26:EF:D2:C4:08:6E:1F:B2:8A:DE:4A:E6:BC:48
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 01995A8DB849306626021DA5632CAF61C09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 1692
Signing time: Thu 18 Sep 2025 02:01:01 +0000
Manifest this update: Thu 18 Sep 2025 02:01:01 +0000
Manifest next update: Fri 19 Sep 2025 02:01:01 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: MP74e4pt0NiL5Vt/M/AeDStqLBX2vooSylA0ISY23eQ=)
2: HsfAzbYNmjHgKTyTKE1e6DTdYBY.roa (hash: ThTbeLEhcdYcKNF2Qx27UbTWjSeMoDCUTIRvHXWnfiI=)
3: MamPa9eWXXv16Pq_PQPhm2jANdQ.roa (hash: /Xj0uh4hP5hzI09A/uvBTgwPodoBTxb8R7Jv7s78qJA=)
4: b2D7vVU4AWvUD_Ad1lqkP8q1DJY.roa (hash: nc5y91A1zU+LW1Tb8aDxs1rxMTCVcHcXyy5NeNxfhCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:8d:b8:49:30:66:26:02:1d:a5:63:2c:af:61:c0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Sep 18 02:01:01 2025 GMT
Not After : Sep 19 02:01:01 2025 GMT
Subject: CN=869ceb124a6b26efd2c4086e1fb28ade4ae6bc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:d7:c2:8e:92:ae:6b:04:3d:1c:9c:d1:03:
3e:b1:9e:59:12:37:a7:a5:23:08:ed:41:57:47:a0:
aa:5c:0d:08:8e:f9:6d:d5:3c:74:92:36:88:4b:ab:
ce:0f:49:5a:a3:75:c1:1c:60:65:ed:df:f3:09:f6:
85:e7:8c:da:e4:54:7a:e5:07:a6:c2:64:e7:b7:5b:
b6:2a:9d:8d:47:3e:00:9b:29:88:cd:04:40:84:7b:
c7:6b:dc:df:75:a4:1b:ab:04:37:da:3f:c4:4e:b0:
a6:18:49:48:41:9f:f9:58:30:a3:ba:61:7f:97:99:
d5:5f:3e:83:6f:4b:cf:ef:94:cf:c3:28:46:3e:5c:
f1:f5:36:f3:8a:cd:ad:f9:8f:82:5a:67:5e:5f:0c:
da:9f:85:38:2c:3f:55:e9:7b:a9:4b:48:01:3b:ec:
36:d3:16:3e:60:62:ee:e8:97:7c:5f:f5:d3:f9:e9:
be:fa:86:57:02:b7:36:d5:f9:0f:6d:3f:06:39:4b:
06:08:6c:93:73:ed:1d:03:90:01:d5:3f:a3:53:bd:
37:af:e8:86:28:32:b1:26:b7:a7:b5:33:1b:12:22:
e0:f2:e4:89:b7:02:81:93:5a:fd:03:e9:01:cb:5b:
bc:7b:fd:2c:c6:34:e4:35:87:6c:69:9c:fe:da:33:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9C:EB:12:4A:6B:26:EF:D2:C4:08:6E:1F:B2:8A:DE:4A:E6:BC:48
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ac:a5:32:e5:e3:c7:d2:c6:ae:f4:5c:4c:a1:61:a5:4b:ae:
2b:49:b1:9c:5d:fa:49:7b:a2:1b:02:49:fc:35:54:a8:27:40:
a4:d6:63:f4:d0:e3:36:0e:8c:c7:03:6e:92:62:1d:09:65:35:
d5:6c:d9:c3:e5:d8:54:02:a6:27:74:ea:74:5f:c4:3b:ce:5a:
89:03:39:83:76:b3:26:1f:92:33:4a:c2:f9:af:5e:b6:85:7f:
d3:99:72:b8:81:73:dd:7b:03:ec:1f:32:a8:83:d2:0a:cd:d9:
12:6c:de:90:7a:89:08:b5:11:5e:92:aa:b7:03:4b:ae:b9:c4:
17:ab:a6:99:be:e2:50:8f:82:4e:2a:71:1d:21:b2:2f:73:24:
66:fd:52:0e:ce:9f:52:83:8c:5a:60:f7:63:05:24:cd:20:48:
a2:24:14:75:ca:08:52:e2:5a:a9:00:55:69:70:d4:38:41:ce:
48:ca:6a:6b:fd:d6:54:9a:7f:3e:4c:9d:38:58:58:57:83:36:
e6:2b:4b:15:0f:3b:9a:ae:a3:47:df:fa:17:03:38:34:2c:da:
ba:10:02:e3:c2:f3:c7:69:b2:07:94:6c:e6:4d:66:ea:4d:74:
23:80:5b:9f:40:c0:11:56:3f:1d:e8:e5:a3:c9:9d:ed:19:f2:
db:50:44:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:12:03 2025 by rpki-client