Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
File: g_65rfwvZVEiBb1IETJMnX9qAiI.mft (raw, json)
Hash identifier: AIZMk4lqbhRx+SdlkPhMlbeTOP74bEdQtXy2I9rHlxc=
Subject key identifier: AA:4C:53:9A:F6:AC:90:AB:FF:E5:16:9B:E8:79:96:28:64:FC:C5:C9
Authority key identifier: 83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
Certificate issuer: /CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Certificate serial: 01988CFE347B4DD7D957654618E40B2CB6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
Manifest number: 041D
Signing time: Sat 09 Aug 2025 04:02:06 +0000
Manifest this update: Sat 09 Aug 2025 04:02:06 +0000
Manifest next update: Sun 10 Aug 2025 04:02:06 +0000
Files and hashes: 1: g_65rfwvZVEiBb1IETJMnX9qAiI.crl (hash: Wdy+jm+LYTI5ZgkcR9SF/RmoqE7U5YWjF7b4BuzkKRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:34:7b:4d:d7:d9:57:65:46:18:e4:0b:2c:b6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Validity
Not Before: Aug 9 04:02:06 2025 GMT
Not After : Aug 10 04:02:06 2025 GMT
Subject: CN=aa4c539af6ac90abffe5169be879962864fcc5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5b:6b:0e:13:29:77:4c:93:b9:89:dc:6c:ab:
5d:8f:9f:3b:e6:36:58:25:af:4a:29:1d:54:5c:7e:
a3:bc:21:20:14:ae:29:2d:5a:54:9b:de:d8:0a:d9:
8f:4e:15:aa:af:c0:a2:6e:cd:46:ae:27:0a:1e:ea:
09:48:db:ed:31:2a:3a:87:32:73:35:e9:c3:6a:fc:
61:23:aa:8a:2a:e8:f2:bc:ee:65:e7:7c:d0:1a:0f:
7b:25:e6:2a:81:47:e2:1b:04:06:ca:a7:08:70:99:
29:49:a4:99:37:f5:a5:1b:ff:03:16:8c:62:9c:ee:
e1:51:3b:d3:0a:61:b9:19:ab:a3:db:c0:12:44:ec:
58:e5:04:21:c7:3a:9a:45:0a:da:f9:43:34:3c:14:
69:fb:84:9a:56:90:1d:a0:2f:0b:58:74:66:38:bc:
1f:aa:3d:26:13:a1:57:9e:7c:18:47:d2:35:24:b3:
30:34:b7:52:b7:c6:2f:f9:81:06:b5:e5:42:13:12:
d4:56:e2:4a:39:a7:f0:f7:5e:6c:c8:ed:39:f2:a9:
92:48:79:e7:5b:fa:c8:af:02:30:e2:45:1b:fe:27:
a7:63:ce:cb:bb:01:7f:fd:ab:4f:fc:e9:91:35:58:
a9:9c:36:cb:f0:00:e9:ac:75:10:2d:c3:1f:29:76:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4C:53:9A:F6:AC:90:AB:FF:E5:16:9B:E8:79:96:28:64:FC:C5:C9
X509v3 Authority Key Identifier:
keyid:83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fc:08:61:ef:98:07:c3:18:79:85:55:bb:e9:3f:65:ed:b4:
23:eb:88:71:29:15:4e:c7:6c:a6:63:a3:5d:58:23:b6:c5:94:
c6:53:6d:44:9d:ae:a7:bf:b4:54:6a:91:5a:e7:4c:30:9b:f1:
c8:07:88:1c:42:7b:38:09:ef:b0:2d:0e:72:e3:69:55:33:32:
30:c7:74:1e:27:36:4b:34:29:89:79:fe:da:ca:97:9c:f9:e4:
1f:a6:c5:b5:c2:fc:bc:20:5a:e7:a4:1f:84:fc:d0:21:e1:c6:
17:95:5d:14:1f:2c:ce:7b:79:9d:8a:9f:70:98:22:c7:92:d0:
5a:8d:ac:67:9c:ff:a1:fe:34:e7:f7:38:c4:f1:97:c2:76:e3:
ae:99:61:a3:08:c2:0f:a6:ff:8e:34:b4:ef:50:0e:99:eb:f8:
43:e4:04:14:5d:0d:b8:e3:a3:69:ce:e5:4c:1d:8a:ca:5d:63:
90:32:d9:ae:9f:de:52:a1:e8:ee:08:4d:68:28:c2:7d:8b:16:
b2:21:70:c0:02:62:06:3e:84:97:e9:9d:c9:d3:dc:57:ec:3f:
0a:78:e6:0c:7a:42:bb:8f:fd:57:b9:71:54:87:6e:80:3d:11:
36:9e:9d:6b:61:d9:a6:31:fc:35:93:84:76:49:af:aa:88:67:
03:ea:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:20 2025 by rpki-client