Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
File: Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft (raw, json)
Hash identifier: ZcNvr4lr2+sWt6ht2qpPk7uSyKdl/drf7imUB1J9Bj0=
Subject key identifier: 90:99:13:CD:49:C9:06:A7:F9:D4:D1:2D:F4:FC:17:F2:3F:69:EB:A4
Authority key identifier: 46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
Certificate issuer: /CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Certificate serial: 01987298C9FB9A4BF29795DDF8264D3D9EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
Manifest number: 12D3
Signing time: Mon 04 Aug 2025 01:01:12 +0000
Manifest this update: Mon 04 Aug 2025 01:01:12 +0000
Manifest next update: Tue 05 Aug 2025 01:01:12 +0000
Files and hashes: 1: Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl (hash: Vy+bYJS/9YfZDfVaInW2+pgr53IFcvZpgUgvFBDfNbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:c9:fb:9a:4b:f2:97:95:dd:f8:26:4d:3d:9e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Validity
Not Before: Aug 4 01:01:12 2025 GMT
Not After : Aug 5 01:01:12 2025 GMT
Subject: CN=909913cd49c906a7f9d4d12df4fc17f23f69eba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:ab:7e:67:53:65:fe:6e:37:22:e6:89:7c:
c5:b5:38:2b:9d:13:b4:7b:0b:30:51:c1:de:94:93:
47:ac:10:fa:51:5b:a6:d4:f3:f9:d9:11:43:df:d9:
52:f3:69:7a:bc:b2:50:ee:67:b5:91:65:a4:76:0d:
eb:6b:77:30:9c:20:75:da:3a:0b:d1:6e:6b:8a:0f:
5d:0d:96:f8:db:ff:59:53:53:2e:6c:ad:fd:28:12:
f5:8e:d8:db:74:8d:10:61:b0:7f:68:5c:20:cf:bd:
00:9a:39:7e:61:62:98:32:05:dc:60:fa:45:1c:8b:
d8:2c:4d:09:3f:c3:18:76:6b:e6:f3:9a:e5:fb:bb:
cf:3c:11:20:8e:e7:37:de:d9:98:72:03:a5:64:39:
a5:91:24:be:5f:ab:1b:54:80:f6:12:32:76:13:64:
c7:06:e1:41:b7:3f:bb:c0:af:71:8e:2f:3b:cb:5c:
a9:92:7a:0a:07:f6:07:fa:c1:47:ac:58:f6:51:ec:
19:97:bf:f1:c9:33:60:41:d6:73:20:0f:ca:66:05:
35:1b:89:8d:98:75:02:a3:e9:87:37:ba:40:17:08:
23:43:07:fc:08:91:1d:a7:31:c5:9f:a2:c7:c3:3b:
e4:67:20:8a:7b:02:3a:95:84:ee:db:87:93:ee:35:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:13:CD:49:C9:06:A7:F9:D4:D1:2D:F4:FC:17:F2:3F:69:EB:A4
X509v3 Authority Key Identifier:
keyid:46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:53:cf:d4:9e:75:be:1f:1f:98:e0:7d:3a:87:55:7e:02:bd:
0a:5a:b6:6b:0e:de:19:27:82:ec:86:c9:d9:66:17:13:37:e7:
c0:1b:bf:19:54:23:3c:85:a0:57:f2:69:b3:77:cc:ad:8c:9d:
99:42:b3:38:4a:a6:a9:61:4f:9d:33:1f:69:e3:d4:d5:95:aa:
e6:35:f7:b7:d7:ef:e5:d5:6a:29:0c:3d:e6:52:f7:c7:91:c5:
d5:27:7e:a2:78:53:dc:8b:50:ac:e2:1c:ad:04:eb:23:7d:33:
6e:83:9a:c5:2c:6f:53:6d:3e:62:87:ec:1f:7a:67:45:0c:d0:
a2:d7:02:fe:4b:9b:76:aa:db:4a:3b:58:4b:54:35:6a:27:c9:
90:a0:49:17:27:01:05:e5:d8:9d:6d:3c:93:10:bd:3c:d9:20:
c4:f7:e3:58:56:6f:e2:36:12:82:df:17:86:48:74:41:ce:fe:
f7:a5:46:60:90:d6:e7:8f:61:7e:84:35:6b:bb:5a:9a:98:4e:
70:5d:e3:11:3d:65:22:8d:3a:fd:75:d1:d0:01:73:51:c1:44:
7c:6e:80:03:6c:ad:22:94:42:3b:a2:59:5f:a9:7f:35:96:75:
b9:0d:ba:ed:e8:26:ae:01:13:fa:50:3d:a0:fb:56:23:ae:4c:
2b:b8:1f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:50 2025 by rpki-client