Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File: AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier: /K+SwiSML7s/ziBFOKjfR++UWKu2rIOaX6co/2vqA6c=
Subject key identifier: 40:E7:1B:30:4C:CE:4C:A4:86:F2:E2:1A:C7:94:35:4F:FB:DD:13:0A
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer: /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial: 01987F7907611A4A9EE3BFF525A36B3F1F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number: 1617
Signing time: Wed 06 Aug 2025 13:01:34 +0000
Manifest this update: Wed 06 Aug 2025 13:01:34 +0000
Manifest next update: Thu 07 Aug 2025 13:01:34 +0000
Files and hashes: 1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: rf6t40g27Ojr78a0f4eLXGr/JQD+T3upLm2WZZxoJXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:07:61:1a:4a:9e:e3:bf:f5:25:a3:6b:3f:1f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Validity
Not Before: Aug 6 13:01:34 2025 GMT
Not After : Aug 7 13:01:34 2025 GMT
Subject: CN=40e71b304cce4ca486f2e21ac794354ffbdd130a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:dc:59:11:d5:38:89:54:52:2f:69:cb:8d:
5d:24:b2:e8:91:d7:9f:b2:33:35:02:b2:5e:8b:56:
67:d1:95:41:2a:a5:a1:1b:53:2e:ce:94:37:bf:16:
ca:fd:52:87:57:79:a7:81:48:1d:ec:90:27:c7:11:
84:91:5e:46:37:af:4d:2b:63:c7:98:09:c0:c3:6a:
6d:4e:d1:d4:6d:22:d5:09:07:fb:a2:01:80:db:84:
80:95:17:95:69:f8:f5:60:e9:0b:70:f8:f5:67:fc:
45:bf:cf:b8:b7:bd:06:83:5c:33:e8:35:66:fd:5d:
f1:1e:10:f1:07:64:b4:01:d2:cb:ba:90:2f:15:be:
77:8d:96:19:13:0f:d8:92:0b:57:4d:8b:c0:d9:ae:
ce:9f:47:97:10:a4:87:3b:43:60:61:c5:8f:3d:ab:
92:a3:e1:63:57:a8:64:75:9f:09:ab:ba:58:7c:d6:
3c:0f:39:e0:98:3f:cd:df:21:40:58:f9:d7:e0:c2:
12:40:ee:cc:99:ce:0c:fc:03:70:84:19:d4:53:fb:
82:d7:f8:cc:02:64:2c:19:1b:cc:1c:a7:15:fe:be:
bc:91:20:8b:a0:b6:7c:22:c2:5f:61:0c:dc:e6:9e:
32:e9:04:16:f0:dc:bd:12:ba:d0:88:7a:07:30:79:
72:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E7:1B:30:4C:CE:4C:A4:86:F2:E2:1A:C7:94:35:4F:FB:DD:13:0A
X509v3 Authority Key Identifier:
keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cf:14:a4:bb:52:9c:7a:42:31:0e:37:1d:8e:b4:02:4b:83:
ad:74:96:9d:8e:22:96:f1:ef:89:46:b3:92:e9:f0:3a:e1:9e:
1d:30:47:33:e4:e0:4b:66:be:cb:e7:31:e7:89:90:d9:fb:c5:
16:3e:79:a6:fe:ee:f7:e3:fd:ef:cf:37:2a:b2:a1:18:03:25:
31:38:6a:5a:df:f2:83:c2:60:81:89:b6:e0:0d:8d:b5:da:d4:
ed:26:6b:6c:e2:06:21:ec:4b:6e:a9:49:60:cf:bf:2a:b2:61:
2c:67:65:ba:07:ed:a7:bc:bd:6c:30:6a:02:bf:b2:21:67:7a:
9b:f0:4c:c7:49:c4:1d:38:6e:3b:2b:98:a9:37:77:7c:69:c2:
10:27:53:18:9a:18:76:f6:b2:c6:10:dd:75:a4:b5:b6:7d:55:
b0:d8:31:39:7f:56:f3:b1:45:ac:da:02:cd:b4:ca:c1:66:8e:
e5:d7:5b:37:a2:99:50:c3:b2:35:67:6b:88:bc:8c:ab:c9:3a:
54:1f:2c:fd:ad:bf:21:cc:24:73:8d:ad:04:fb:c0:52:52:fc:
6b:95:a0:c0:f0:de:f8:ad:8d:3c:ff:fb:c9:38:82:5b:8c:d0:
14:fc:27:a9:8b:f4:f5:b1:88:fa:5f:15:40:ce:83:0f:41:8d:
fd:cd:91:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:10:19 2025 by rpki-client