Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File: A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier: dO197kRFaP0PKXq+hWmH5IaWJuG/M1Bf2n0Z1eQ//UQ=
Subject key identifier: FD:9E:C8:D0:38:34:B4:BD:BE:CC:CB:24:7A:D3:F4:3A:A1:0B:B1:B4
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer: /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial: 019892FF29B1F6CD4004C722F7B1407CD484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number: 02E3
Signing time: Sun 10 Aug 2025 08:00:52 +0000
Manifest this update: Sun 10 Aug 2025 08:00:52 +0000
Manifest next update: Mon 11 Aug 2025 08:00:52 +0000
Files and hashes: 1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: ls1s9r0HS7Dn8XSCO21K86z4joI/0RwxySZ8YV6RYp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:29:b1:f6:cd:40:04:c7:22:f7:b1:40:7c:d4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Validity
Not Before: Aug 10 08:00:52 2025 GMT
Not After : Aug 11 08:00:52 2025 GMT
Subject: CN=fd9ec8d03834b4bdbecccb247ad3f43aa10bb1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5f:e9:57:b7:ee:ea:a1:fc:e4:1d:5b:9c:39:
c9:5c:c6:f6:a0:90:d7:6c:d5:8a:2b:2b:73:3f:d8:
4e:41:0e:73:66:91:2d:c9:28:38:dc:a4:03:95:fe:
95:7f:b9:ae:7a:86:85:80:f9:28:36:2b:7c:0e:ab:
9e:9a:f1:fb:bd:91:d7:5b:d0:0b:58:03:87:fa:aa:
01:b5:ce:5e:d3:19:32:32:d3:a3:15:ae:3b:07:b5:
52:3d:73:40:d7:54:d1:c9:70:a2:78:f3:c1:00:d1:
2d:94:16:32:56:25:08:c9:d6:a6:c1:07:19:e3:7a:
a6:08:6e:6d:52:97:02:f9:8e:e9:ad:14:20:80:f2:
84:aa:ce:f4:bc:c7:8c:47:6d:33:71:eb:22:02:80:
a0:eb:cc:f3:4f:20:53:18:d5:25:c6:fa:40:8c:b0:
06:ea:9c:32:cf:71:16:b8:d5:b9:f4:65:f2:61:b3:
1a:1f:08:82:98:50:18:7b:ac:47:bb:17:28:90:00:
47:37:47:12:b2:fb:fc:08:c6:38:fb:92:f9:bf:15:
3c:c4:26:5d:30:f0:8f:1d:27:07:f7:c3:b9:17:17:
ea:3c:ca:e4:de:22:72:77:81:74:c0:dc:fe:52:5b:
c4:27:99:bd:93:92:b1:38:27:ab:5c:7f:29:61:e0:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9E:C8:D0:38:34:B4:BD:BE:CC:CB:24:7A:D3:F4:3A:A1:0B:B1:B4
X509v3 Authority Key Identifier:
keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:df:f0:a2:12:11:ee:2e:05:06:5c:84:67:2a:73:87:34:ab:
46:62:4c:5a:73:0c:b2:37:3e:dd:f0:d9:ac:88:0a:7e:c2:35:
df:f5:c6:bc:f6:87:97:e0:b8:8f:97:48:3b:9e:7d:ca:60:3d:
8e:5b:fd:16:14:58:ec:ed:19:c9:b3:f7:d4:5e:03:c6:15:2d:
08:9a:75:ee:c1:a2:47:c3:52:37:96:42:2d:2a:44:88:6b:9b:
71:36:45:8e:38:5d:ea:20:e8:7c:82:ee:58:13:54:26:de:15:
aa:a9:1d:73:64:2d:e0:02:d8:e9:23:5a:5d:ce:7f:6b:9d:bd:
1f:b9:f4:25:26:82:46:fb:d3:de:d4:da:49:7f:c7:0f:9a:b0:
c8:72:96:9b:ec:81:ce:ba:78:e0:47:c8:90:5e:e6:ca:d0:2b:
69:93:07:08:c8:a7:6a:b0:c1:48:11:99:19:52:6b:2c:f3:86:
e4:7f:60:e8:5c:27:fe:0d:7f:2b:a0:0f:01:39:5f:93:4f:d2:
57:40:74:db:da:e6:f9:43:56:90:fc:0b:8d:31:0e:f0:1b:33:
44:6c:4c:39:ed:95:ba:7a:56:66:19:24:6f:e4:b1:8d:b1:36:
12:d9:9d:2f:97:87:ae:1a:f5:4a:35:1f:6a:c0:6d:b0:3d:71:
ce:7a:54:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:14 2025 by rpki-client