Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
File: _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json)
Hash identifier: EdcHBwBPc9eLsyd2yoGVxu9zBHFoC5o8I7Zji6r+ATw=
Subject key identifier: 58:7D:2B:F8:13:6A:18:0A:ED:93:2D:96:F3:3E:74:E9:69:2A:F6:7F
Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
Certificate issuer: /CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Certificate serial: 019872CF5738D6D56C7665DA4EF2F9AF915F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 02:00:47 +0000
Manifest this update: Mon 04 Aug 2025 02:00:47 +0000
Manifest next update: Tue 05 Aug 2025 02:00:47 +0000
Files and hashes: 1: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: xFEUXy33vysyfB0My3YXzo+Ejm+OhotqxeDtTIcTIcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:57:38:d6:d5:6c:76:65:da:4e:f2:f9:af:91:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Validity
Not Before: Aug 4 02:00:47 2025 GMT
Not After : Aug 5 02:00:47 2025 GMT
Subject: CN=587d2bf8136a180aed932d96f33e74e9692af67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:d9:f2:66:de:0d:ce:19:23:ae:9a:77:fd:
ba:37:59:e5:c0:fc:e8:dc:ec:3d:8d:dd:1e:81:ce:
02:66:55:37:92:de:f5:74:b0:cc:4d:93:27:11:a4:
c2:a5:12:c1:97:ee:d9:6b:0f:f4:c1:60:90:e8:7d:
37:ad:e4:9c:36:52:21:08:46:a5:69:cc:16:df:06:
d7:51:c0:f1:4b:44:46:4e:6f:f7:ca:08:b8:e6:fd:
1a:4c:83:db:f4:b0:e0:86:b1:41:ec:8a:36:46:01:
c3:31:39:a1:41:d2:21:c7:3f:2e:43:35:21:b5:8d:
3f:19:a5:3d:e4:17:b4:4f:79:10:f0:a3:9b:dd:2d:
41:c3:c1:92:2a:76:5d:7f:37:32:5c:1c:2c:a7:c0:
4e:de:7e:8b:f1:76:7d:7e:b6:ca:86:76:e4:6b:3e:
24:0d:5f:b6:cc:71:4f:86:b9:3b:d6:66:3d:b0:44:
93:1d:1d:32:59:49:4e:ca:f8:2f:73:14:03:e3:a4:
cc:b0:bd:84:cd:bb:4c:76:18:6a:45:1e:6f:bb:24:
55:78:c1:9b:2a:74:24:ea:b5:e0:9b:1b:29:e8:7b:
7b:83:fc:3d:48:d3:90:8f:a5:e7:b7:94:cd:1e:b0:
ae:70:29:c3:a8:76:b9:eb:e4:24:ed:44:e1:1a:f6:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7D:2B:F8:13:6A:18:0A:ED:93:2D:96:F3:3E:74:E9:69:2A:F6:7F
X509v3 Authority Key Identifier:
keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:09:c5:66:a8:a9:8c:84:63:fc:7d:73:07:26:2f:ea:6a:2c:
47:94:45:c7:49:78:7c:fb:d0:05:af:1d:97:af:7d:5d:2c:1d:
9a:21:7c:0b:ac:9c:4c:67:ef:f5:7b:a9:fe:11:e8:4e:70:a1:
2f:31:cb:c3:32:6e:f6:e3:1a:1b:9f:72:2b:ea:93:cc:37:3f:
c4:77:bc:96:07:1c:13:03:67:e8:d3:0f:1b:db:52:a8:f5:cd:
25:2b:05:7e:ea:5d:e3:4a:82:9d:b3:3a:9f:d9:67:54:e6:50:
22:8f:db:ea:92:5e:94:52:91:1f:b7:71:94:71:13:6b:ec:89:
28:d5:4f:d0:d3:bf:6f:5b:aa:f0:6e:54:62:18:01:2d:40:bb:
b5:c4:dc:7b:c4:a0:cc:d1:0e:2f:bf:42:1f:22:59:3f:d3:4d:
a4:67:d1:e5:5e:fb:7e:d0:93:62:f1:80:30:87:20:9a:00:22:
42:d8:94:a4:75:1f:51:5d:a8:70:4a:c3:d1:70:14:d1:d3:59:
b2:11:fe:da:ee:80:e8:d0:59:2e:a3:c9:16:47:a8:96:80:a7:
1e:0a:7e:e5:cc:53:59:a8:0b:30:2b:76:00:2c:18:fd:84:49:
54:cb:b5:fa:1c:41:b4:21:73:e1:04:ef:79:01:30:9b:89:0e:
7b:b8:af:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:26 2025 by rpki-client