Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
File: SO3JpU4ccjtWqu330BVAxbNr2rY.mft (raw, json)
Hash identifier: +nc4l/zNdyrJbH3ifCpnhZ1SmXCZWMwa4kFbv2IMGw8=
Subject key identifier: 0D:7B:19:F6:DC:62:ED:B3:0D:F7:F1:8C:EA:00:84:14:83:9B:52:BD
Authority key identifier: 48:ED:C9:A5:4E:1C:72:3B:56:AA:ED:F7:D0:15:40:C5:B3:6B:DA:B6
Certificate issuer: /CN=48edc9a54e1c723b56aaedf7d01540c5b36bdab6
Certificate serial: 0198974A244201DB768768EF8ED6E5E80EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
Manifest number: 1D
Signing time: Mon 11 Aug 2025 04:01:15 +0000
Manifest this update: Mon 11 Aug 2025 04:01:15 +0000
Manifest next update: Tue 12 Aug 2025 04:01:15 +0000
Files and hashes: 1: SO3JpU4ccjtWqu330BVAxbNr2rY.crl (hash: dxo+Jrt/yax+Lwt6p+YGncFzhyLdyTF/pvk5aZmSv2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:24:42:01:db:76:87:68:ef:8e:d6:e5:e8:0e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48edc9a54e1c723b56aaedf7d01540c5b36bdab6
Validity
Not Before: Aug 11 04:01:15 2025 GMT
Not After : Aug 12 04:01:15 2025 GMT
Subject: CN=0d7b19f6dc62edb30df7f18cea008414839b52bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:36:08:70:2c:14:8e:c2:65:a6:3c:fd:48:
f1:09:df:5a:cc:3d:2c:d6:a1:1f:77:03:8b:5e:61:
67:22:53:c3:99:e2:84:c9:8c:be:95:62:bf:2a:b2:
11:23:ef:42:4b:3d:88:25:a7:b8:65:35:d0:16:1e:
29:d9:8a:7b:75:6a:35:11:16:50:4a:99:b6:01:fa:
77:05:92:22:b0:c7:27:e0:ce:30:90:7c:5b:8f:7a:
d5:45:e7:70:df:1d:e8:c2:35:bd:c7:fd:54:eb:85:
b1:2a:86:75:47:e7:d3:11:27:00:c2:bf:4a:45:87:
f2:55:97:db:af:46:75:b9:b3:3c:3f:b5:e5:3d:02:
87:b8:56:07:0d:56:4d:79:af:c7:6d:a3:3f:e8:17:
a6:dc:a3:b3:89:f6:86:23:22:9b:5e:49:41:15:b5:
1d:82:0a:50:92:e6:b1:75:51:40:4c:c7:97:18:86:
f1:d4:45:da:2d:de:ca:94:5e:0f:c0:a8:21:d3:6b:
dc:a5:ba:61:8e:33:20:0e:c5:e2:c8:92:17:55:fa:
ca:97:8d:c3:04:5f:c0:4e:c8:53:2f:95:9b:70:0c:
d9:4e:0b:cb:46:0c:3f:26:c9:8f:ce:e3:ff:89:3e:
4d:c1:d0:32:62:0b:16:5e:28:39:84:9d:e5:9e:de:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7B:19:F6:DC:62:ED:B3:0D:F7:F1:8C:EA:00:84:14:83:9B:52:BD
X509v3 Authority Key Identifier:
keyid:48:ED:C9:A5:4E:1C:72:3B:56:AA:ED:F7:D0:15:40:C5:B3:6B:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:61:48:19:6b:de:b5:2f:36:7f:16:6b:9b:51:93:76:a0:c4:
95:67:b4:59:af:0b:d5:d7:bf:0f:2e:7c:00:54:af:e0:36:b2:
0b:0a:bc:78:1e:ea:d5:42:4f:a6:e5:9f:d1:2f:4b:d1:f3:6b:
dd:24:b2:7d:15:4f:d4:25:3f:89:0b:71:0f:ab:22:78:fd:4c:
9d:ec:e5:64:5c:40:ce:11:f0:db:5a:87:fe:c7:ef:40:95:82:
c0:df:48:15:08:58:5d:83:36:9b:a3:5c:62:8c:70:04:5b:c2:
ae:83:dc:66:21:13:1b:e2:55:0f:4e:2c:eb:2a:86:64:fa:85:
90:18:24:01:7e:ba:45:e4:a1:3b:29:35:11:2d:65:29:35:86:
96:6b:7e:88:c5:3d:80:40:e3:03:af:d4:48:36:19:63:11:d1:
c1:86:13:cb:29:b6:75:87:39:5d:09:42:eb:58:f4:75:34:c4:
40:01:9e:fd:7c:ef:54:d2:c6:b1:6e:f3:cc:69:8b:c8:9f:65:
57:66:ff:59:3b:e5:2c:b5:0d:f6:a6:56:62:2a:64:b6:ce:e8:
4c:b4:41:3d:c1:9c:7c:a5:42:c9:27:74:be:2a:d5:0d:29:13:
af:44:fe:35:27:a6:4f:c8:f4:cb:81:dd:96:7c:81:74:33:da:
7b:c2:04:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:30 2025 by rpki-client