Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File: dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier: AiXYgPY2c0jOkQVVentyK/7g//Gpj6/uiOcVIeJr/rI=
Subject key identifier: C2:59:BB:7F:1B:52:EC:BB:FA:AC:1A:46:C5:AD:AD:53:38:10:9A:72
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer: /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial: 01988C8F6DBDBE67983FBB3D7D72ED051656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 02:01:06 +0000
Manifest this update: Sat 09 Aug 2025 02:01:06 +0000
Manifest next update: Sun 10 Aug 2025 02:01:06 +0000
Files and hashes: 1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: tlgcQeIr6uNeXGSDJ58IdV/mkzQ7mUjMZlA/1wn452Y=)
2: fOC0mLVVaWFlMUvT0z_PddjsHw8.roa (hash: BmfmQSKAMKow/2vkZFChgOrrtOQvA5Kh+ohq4iFZyJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:6d:bd:be:67:98:3f:bb:3d:7d:72:ed:05:16:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Validity
Not Before: Aug 9 02:01:06 2025 GMT
Not After : Aug 10 02:01:06 2025 GMT
Subject: CN=c259bb7f1b52ecbbfaac1a46c5adad5338109a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:4f:29:97:15:35:96:b6:ba:a0:a6:ae:5c:
de:86:91:7e:b9:bc:3b:be:81:e6:eb:13:d9:f8:d6:
b6:24:44:8a:dd:43:45:a9:3d:2b:7c:ea:02:87:48:
83:30:b2:08:f9:eb:a0:f7:ae:81:41:b4:b8:03:b2:
38:7e:af:78:b3:35:d5:11:2f:3a:3b:45:e0:68:ae:
24:93:03:9a:b7:62:20:2b:5c:87:9a:4d:0d:08:2d:
53:08:33:9b:71:ba:6a:d7:8c:22:80:ea:0e:be:56:
d0:47:e2:50:82:83:df:e4:b1:c4:a1:05:e4:39:2b:
fb:05:39:d8:c2:ee:91:59:d3:c4:7a:ad:64:4b:f4:
58:e4:68:26:48:c0:f9:fa:de:6b:0f:fe:6d:08:71:
ce:6d:13:e4:56:c2:77:e0:d8:7c:b0:83:85:a1:8c:
82:4a:f9:2d:c2:0a:d6:ce:1d:92:03:c8:a6:13:01:
30:83:9a:3e:a8:45:0f:31:5c:0e:40:87:3a:c6:2f:
87:db:e9:c2:07:da:e9:4c:a8:65:2a:db:da:9a:0d:
1e:c3:73:0d:89:9f:be:db:40:e1:ad:15:cd:a0:f6:
24:16:45:9d:3e:c1:e9:16:83:c9:4b:96:2e:20:3b:
57:5e:8d:43:f4:65:cd:66:3e:c2:44:82:01:e0:ea:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:59:BB:7F:1B:52:EC:BB:FA:AC:1A:46:C5:AD:AD:53:38:10:9A:72
X509v3 Authority Key Identifier:
keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fe:9e:c6:1a:6f:bf:b9:68:83:b2:93:a9:4f:30:69:17:3f:
65:d6:2f:6b:1d:e6:60:c0:33:c1:98:38:50:c1:72:6b:d7:0e:
b1:97:2e:95:93:c4:25:a7:f0:5c:cb:d9:94:66:06:8c:9b:af:
14:1b:b5:dd:fc:64:6c:5c:13:8b:70:fe:4b:eb:82:1c:d4:d8:
6d:63:85:79:ab:09:ac:72:77:06:62:fb:43:52:12:c3:83:76:
c3:87:11:be:74:80:17:e2:06:67:75:0d:06:b2:47:92:70:70:
2b:70:73:21:73:86:26:27:95:6f:6b:1d:a2:c5:45:b7:89:90:
86:6a:78:fe:1f:58:24:db:96:84:48:4f:4a:20:c9:83:70:7e:
90:76:0e:c5:81:18:bc:9c:f3:61:d2:c1:1a:5a:9f:d3:c2:ab:
61:16:97:24:b5:bf:47:04:bb:29:8a:35:7a:5a:a7:68:39:af:
c8:bf:e1:09:aa:56:af:22:25:5b:51:30:4c:76:75:fe:be:26:
b4:f5:dd:2b:dd:26:65:7a:7e:04:43:6e:ee:36:6d:c1:7c:28:
a4:de:80:9c:90:b9:33:53:81:b9:8d:23:2b:02:f1:c5:9e:1a:
ee:3f:21:93:c2:2a:db:cd:f8:4b:bf:b2:bb:23:47:bb:a6:1e:
a9:cb:10:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:49 2025 by rpki-client