Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
File: pO9xMrnCMYeert1cpNwysWXwx_M.mft (raw, json)
Hash identifier: yZxtcJo+A00JGK/dvmTl1uKkK9mW3w8TaEzkntMI6fc=
Subject key identifier: 43:0A:B1:A1:FE:1B:54:55:8E:40:57:58:46:75:8D:1F:CC:2A:46:BC
Authority key identifier: A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
Certificate issuer: /CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Certificate serial: 0198974A48CDD097B8957BCF9F402EAAE72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
Manifest number: 0D62
Signing time: Mon 11 Aug 2025 04:01:24 +0000
Manifest this update: Mon 11 Aug 2025 04:01:24 +0000
Manifest next update: Tue 12 Aug 2025 04:01:24 +0000
Files and hashes: 1: pO9xMrnCMYeert1cpNwysWXwx_M.crl (hash: X6ofrpLzyua6DHXEi6ZZ97s79v0fVMPIfpOvrw0M7AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:48:cd:d0:97:b8:95:7b:cf:9f:40:2e:aa:e7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Validity
Not Before: Aug 11 04:01:24 2025 GMT
Not After : Aug 12 04:01:24 2025 GMT
Subject: CN=430ab1a1fe1b54558e40575846758d1fcc2a46bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:27:5e:df:55:e9:e1:57:25:0e:85:80:1f:69:
15:bf:7d:61:c1:f7:bd:f1:30:41:fd:37:33:de:66:
f4:de:e9:e9:c4:34:77:c3:23:56:1a:7e:48:db:f6:
ff:07:b2:07:26:5e:3a:47:33:e7:9f:bd:d1:11:56:
57:f4:a5:7f:2f:61:c5:ab:b4:02:c7:4e:49:bf:6d:
9f:78:47:0e:8c:10:af:e8:ad:b2:60:b2:bc:e5:fd:
88:80:eb:bf:2f:65:bf:74:33:57:67:f5:6e:a8:98:
75:09:e1:66:cc:c3:64:5d:b9:12:b2:68:3d:46:a2:
b0:4e:83:1b:d0:53:f9:c4:82:c1:37:8c:bf:90:3a:
e2:b3:d7:6d:dc:f6:75:c2:7b:e4:a4:95:a7:8f:20:
ef:77:01:b9:65:6e:43:1c:c1:dc:d4:4b:e8:ac:5a:
52:90:e3:9f:f2:67:1e:80:1e:62:44:d7:8e:91:dc:
1f:89:8f:c3:11:38:8f:7c:3c:63:6f:05:4c:e6:9b:
57:d6:26:d6:80:71:46:a9:0b:2e:99:3e:b3:80:d5:
9c:80:e7:1d:43:d8:5c:a1:ee:21:82:e3:62:1f:be:
cc:d2:6b:ea:a7:fa:23:63:6d:1c:7c:ea:3d:fe:9f:
f4:ac:bb:64:88:84:99:34:99:05:d1:eb:f7:b0:e1:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0A:B1:A1:FE:1B:54:55:8E:40:57:58:46:75:8D:1F:CC:2A:46:BC
X509v3 Authority Key Identifier:
keyid:A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6a:34:46:12:cc:95:c4:4a:f0:95:27:b1:00:b6:78:ad:3c:
03:44:a0:60:b7:f3:3e:49:17:d1:95:2b:27:7e:7c:03:86:7a:
52:81:d1:44:8d:1d:79:75:86:a5:ba:7f:b2:5e:a3:33:10:fa:
bc:29:0f:6a:98:0e:70:13:85:32:11:9c:d4:89:65:1a:3b:40:
21:78:eb:2f:79:d1:5a:87:d9:7d:62:8d:ab:46:35:3a:87:2c:
49:a6:d7:d3:59:bf:24:cf:df:62:3b:41:da:b9:e1:fe:41:36:
49:18:11:40:0e:7b:49:f4:58:36:4c:81:e4:fd:8d:2f:aa:71:
81:78:3f:32:96:77:59:06:a6:5d:0b:ac:5e:8a:2d:b9:f0:9a:
0a:58:50:10:9c:b9:a4:98:2a:6a:91:b1:95:0c:09:f3:a4:5d:
d3:37:1d:cc:3c:7a:7e:fa:92:85:3a:6a:95:e9:26:e7:85:c0:
33:70:8f:69:0a:29:35:06:79:db:0a:cc:99:5f:74:28:70:ad:
41:d2:3a:59:f7:ed:00:d0:0b:c2:5d:fa:d1:39:9c:88:ba:b8:
b0:86:ba:06:87:a8:c9:59:d9:9b:1b:cb:42:e2:0f:11:65:32:
a4:8b:a7:23:1a:64:b1:4c:58:b3:a2:0e:99:6b:2d:fc:1e:0b:
de:2c:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:12 2025 by rpki-client