Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
File: DSC_pCDAzV9fGNuOe9o1X-joW30.mft (raw, json)
Hash identifier: 5VhjQqHz59kt8cBsq3p5WrV1IwGXnGW3Hpwt+TCUeM8=
Subject key identifier: 8A:28:C3:53:E2:92:5C:F5:0D:1C:84:0A:F2:17:A2:25:C0:79:7F:33
Authority key identifier: 0D:20:BF:A4:20:C0:CD:5F:5F:18:DB:8E:7B:DA:35:5F:E8:E8:5B:7D
Certificate issuer: /CN=0d20bfa420c0cd5f5f18db8e7bda355fe8e85b7d
Certificate serial: 0198733D34AE443FC450056DD756C6C39170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
Manifest number: 0110
Signing time: Mon 04 Aug 2025 04:00:47 +0000
Manifest this update: Mon 04 Aug 2025 04:00:47 +0000
Manifest next update: Tue 05 Aug 2025 04:00:47 +0000
Files and hashes: 1: DSC_pCDAzV9fGNuOe9o1X-joW30.crl (hash: YgszOWyXHJUAd1wtGMUmVKN1ukJPBbn8rSRqd4fiAtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:34:ae:44:3f:c4:50:05:6d:d7:56:c6:c3:91:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d20bfa420c0cd5f5f18db8e7bda355fe8e85b7d
Validity
Not Before: Aug 4 04:00:47 2025 GMT
Not After : Aug 5 04:00:47 2025 GMT
Subject: CN=8a28c353e2925cf50d1c840af217a225c0797f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:90:7f:69:e0:cd:19:9e:d6:a4:f9:a9:a0:
58:17:e9:c8:76:6f:98:0a:7a:f4:a2:bc:35:2b:04:
8a:4c:e5:e4:62:c0:0b:20:c7:10:43:8e:9d:63:54:
bf:ed:d6:c4:a1:a6:cd:5d:23:37:7e:08:6f:ec:5e:
d4:26:06:4a:15:d9:9a:c0:93:10:2b:47:a0:a1:c0:
df:f6:eb:ef:9b:15:02:73:6e:d8:6c:e9:79:16:4c:
9d:77:ee:82:02:7b:df:39:d4:87:3c:f7:55:69:8f:
ab:7e:9a:2b:1c:ea:ee:be:cf:2d:cb:bc:7e:fa:a8:
8b:8d:fb:b8:e8:89:f9:31:7a:20:04:15:56:fb:79:
1d:e1:4c:e5:21:2e:c1:fe:c7:5f:99:1f:b1:b9:8f:
82:a6:d2:b4:02:de:b3:34:b4:13:28:c6:26:07:26:
5a:53:71:9d:65:76:8a:85:a6:fc:25:a4:c2:29:bd:
b3:32:2d:d9:c4:66:d5:bd:ee:ad:af:4a:74:d0:97:
22:ab:1a:5b:63:10:6f:aa:f7:a1:22:ba:44:94:74:
1b:f6:5d:88:fd:9e:94:92:e8:7d:ab:2f:93:f5:b9:
bc:cd:64:07:2b:f2:aa:9e:24:f3:54:41:f6:07:92:
7c:c6:1f:5e:51:d7:c8:38:5f:67:d6:e0:9d:b8:e4:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:28:C3:53:E2:92:5C:F5:0D:1C:84:0A:F2:17:A2:25:C0:79:7F:33
X509v3 Authority Key Identifier:
keyid:0D:20:BF:A4:20:C0:CD:5F:5F:18:DB:8E:7B:DA:35:5F:E8:E8:5B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b8:3c:8f:f2:42:06:87:bd:d2:23:a9:9d:30:f4:50:3c:3a:
d7:7b:18:f1:5d:ad:51:7d:8a:06:f9:52:cf:02:3e:f4:94:e5:
1f:b1:9a:ba:dd:55:57:e6:9f:60:09:79:9f:0b:a3:d2:a3:98:
eb:d2:7e:fb:2f:67:cf:6c:87:62:df:81:fa:61:c7:b1:3b:3c:
c2:a7:09:35:73:60:0e:8d:65:31:83:03:fa:29:1e:b9:da:e5:
70:5f:b7:ef:d5:e2:2f:53:3b:34:80:1d:34:3c:52:23:d4:49:
3a:43:45:03:c2:20:47:66:df:de:6b:df:69:68:7f:3e:d9:ae:
e8:50:09:78:16:8f:e0:c3:2f:10:95:c4:ea:79:7b:2e:1a:36:
99:3f:97:d7:37:03:84:83:74:66:5f:b5:76:b1:6a:a3:8f:c1:
58:85:e6:b6:14:1b:b0:c2:aa:f5:28:09:fb:f5:9f:32:04:99:
b8:70:51:16:7a:78:71:a5:4b:70:52:5a:c9:e9:63:2e:ac:67:
0e:46:a0:b0:b5:24:58:87:57:c7:de:2f:60:f8:fc:80:41:60:
8e:94:49:29:f9:82:48:35:98:d8:f3:28:be:1f:ed:74:35:a1:
98:8a:a9:74:bf:10:3a:83:d8:59:27:e6:32:8c:b2:35:d7:68:
8c:bf:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:10 2025 by rpki-client