Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: RF6u7BmYChE0RzJqTxQD+W6kcze6ze1xAU0WzFscakY=
Subject key identifier: 50:76:C9:7A:1A:76:86:3E:1C:F8:63:F6:DC:75:D3:5E:B2:06:71:72
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 019873E2B1AAE29A7DE3993BCC3FA7D92625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 0AA5
Signing time: Mon 04 Aug 2025 07:01:33 +0000
Manifest this update: Mon 04 Aug 2025 07:01:33 +0000
Manifest next update: Tue 05 Aug 2025 07:01:33 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: CdlnxDjtCwDN7YAyzGbWXBvNnOgtDdUqOyiB4NZSngo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:b1:aa:e2:9a:7d:e3:99:3b:cc:3f:a7:d9:26:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Aug 4 07:01:33 2025 GMT
Not After : Aug 5 07:01:33 2025 GMT
Subject: CN=5076c97a1a76863e1cf863f6dc75d35eb2067172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:69:93:b2:cd:2d:fd:7b:fe:aa:31:e1:d6:
46:b5:b8:f4:5b:a5:8f:44:0e:ca:56:0c:ed:e3:60:
88:6d:3c:74:e1:7f:6e:f9:16:07:31:92:1e:6f:ae:
8a:ea:63:0a:5b:ca:37:7b:a9:cb:23:af:c6:3a:5f:
12:f0:9f:6a:17:89:36:3b:ba:f8:ce:1a:47:8f:e7:
60:7b:3a:5c:6c:b1:b7:99:89:35:01:90:c6:fd:1f:
b9:f2:45:5d:c4:3d:fa:f0:d8:d3:0f:48:27:51:dd:
3f:5b:2b:6a:71:d0:b8:69:bc:67:9e:93:43:97:fe:
c3:77:71:1a:47:83:9a:c3:c6:6b:2c:8b:bb:fb:4e:
e8:59:c8:5b:19:ec:4c:c8:71:0f:bb:fc:b4:31:c0:
cb:ff:fc:ed:96:80:ee:7c:ae:37:ec:e2:18:9d:77:
22:d5:8b:95:e8:3e:0e:59:6b:41:48:b0:41:1b:22:
ab:f9:e0:9d:10:25:ef:b9:0a:1f:09:96:57:21:3a:
dc:30:21:91:59:fc:da:45:1b:0c:82:2f:f8:4d:fa:
a8:3e:7b:d0:6b:1f:29:d1:37:f8:69:91:ba:39:d1:
d7:13:6e:86:5c:3f:94:3c:9d:26:47:b0:82:7d:25:
bf:5c:c0:f6:5f:ad:44:91:f1:24:65:ab:59:4e:a7:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:76:C9:7A:1A:76:86:3E:1C:F8:63:F6:DC:75:D3:5E:B2:06:71:72
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5b:28:c9:1d:4e:6c:a3:ed:e2:d5:17:1d:3e:e7:a8:24:63:
21:eb:76:49:95:01:a5:99:a3:4a:cf:d2:67:72:b7:92:13:ad:
16:be:ba:ff:25:a3:45:a1:3d:91:87:2e:00:8d:a7:cc:92:a3:
eb:38:8e:f1:8f:48:d4:b1:39:d2:04:96:9a:06:34:e6:d6:9b:
c6:53:69:a0:62:6d:22:8c:8b:b0:a8:c0:32:85:30:e9:08:86:
8a:d6:dd:00:7c:d4:04:d8:50:02:da:bd:ad:8a:72:e7:43:7a:
c2:de:f6:9b:cb:4b:d0:82:5a:12:ce:cf:57:05:05:71:8a:c2:
0a:60:ca:b7:b0:eb:57:fd:6d:7b:b7:52:3c:39:45:06:53:fa:
b9:cc:b3:90:e5:2f:a0:73:80:cd:9a:8e:98:92:96:8f:65:44:
43:7e:d0:84:67:55:ac:1c:4e:79:1f:03:4e:ec:84:69:e7:cc:
37:e3:0d:a8:fa:40:a2:e2:53:4c:8d:84:d5:b3:75:c7:82:1d:
27:ed:19:b1:91:3e:9e:70:ce:8c:77:d7:1a:0e:d9:24:93:62:
fe:b0:7b:91:8d:df:f5:47:f9:a7:80:a7:2b:76:81:86:b2:8a:
9a:71:56:db:35:f3:3d:97:12:15:75:53:bd:c3:5a:e5:ef:eb:
d3:64:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:40 2025 by rpki-client