Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
File: rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft (raw, json)
Hash identifier: WqCMDAv81fLCAVLjTD1C5N4RIhicw6ZMObD+Ps2PHCY=
Subject key identifier: 40:AD:4F:00:DD:D0:05:D2:FD:81:C4:45:8B:92:69:A3:5F:18:AF:A4
Authority key identifier: AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78
Certificate issuer: /CN=ad30fb4388ee67144ae04ddc86812d63e028f478
Certificate serial: 0198A04EA5C2CBE37662CE31BE473B242125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
Manifest number: 162A
Signing time: Tue 12 Aug 2025 22:02:45 +0000
Manifest this update: Tue 12 Aug 2025 22:02:45 +0000
Manifest next update: Wed 13 Aug 2025 22:02:45 +0000
Files and hashes: 1: rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl (hash: uvQw0zkgguxCPHG6yUCeNreBkhdo2n/ab2lDcfs3WSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:a5:c2:cb:e3:76:62:ce:31:be:47:3b:24:21:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad30fb4388ee67144ae04ddc86812d63e028f478
Validity
Not Before: Aug 12 22:02:45 2025 GMT
Not After : Aug 13 22:02:45 2025 GMT
Subject: CN=40ad4f00ddd005d2fd81c4458b9269a35f18afa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:5e:97:f5:46:8c:ee:41:d8:43:34:77:7f:
9f:3d:ba:65:de:7d:d9:c6:e7:6d:d9:ea:e3:a5:0f:
9a:0a:0e:b4:78:5c:4c:8e:bb:f2:12:59:83:85:e4:
5e:b9:c7:76:a4:2f:e4:74:56:b6:96:79:a0:71:67:
01:9c:54:28:4d:54:16:1d:46:d4:67:39:0e:d1:ad:
df:dc:e4:08:88:ce:0b:37:69:64:fd:dd:33:28:db:
bc:c3:b4:bd:5a:33:b6:6f:91:62:75:39:d0:1d:52:
ee:41:a2:76:59:52:11:d9:8e:9a:42:94:c5:86:11:
41:c0:1b:27:df:b1:ab:d7:58:b7:1c:0b:c9:ef:d4:
eb:7a:a5:72:2b:c3:ad:85:c5:41:05:bf:51:de:f3:
0e:3f:87:ec:85:ad:14:e0:c9:1e:ca:6d:f5:40:9d:
c5:b5:c2:69:6a:1b:47:4e:c1:9a:64:3d:82:ff:a5:
5a:2b:52:9e:4b:df:32:3f:dc:04:12:2e:f1:db:b2:
e3:51:44:ea:5a:c4:aa:3d:49:ca:06:6d:82:bc:1b:
f8:2a:bb:e9:ae:06:c8:fe:d7:3f:4d:01:87:9c:dd:
23:dc:4c:28:d5:bc:ff:b7:2a:30:c2:6d:57:0d:32:
58:80:a0:ed:39:ec:7e:31:c9:d1:53:6d:fd:98:ae:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AD:4F:00:DD:D0:05:D2:FD:81:C4:45:8B:92:69:A3:5F:18:AF:A4
X509v3 Authority Key Identifier:
keyid:AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:72:8a:2b:eb:a4:23:90:a2:4c:22:4e:01:48:5a:12:47:e5:
26:af:f2:1d:50:a5:2b:88:64:85:bd:2b:07:26:09:1d:3f:9a:
98:ce:b5:24:b9:06:33:97:47:84:ab:7a:bd:d6:35:81:a1:35:
48:dd:c2:cb:39:a7:fc:d3:97:18:0d:13:94:8d:d7:a1:da:8c:
13:2d:be:7d:45:81:e4:df:68:b7:62:0e:20:9c:6d:70:14:11:
fe:7e:b8:67:dc:07:d7:3e:a1:8f:58:f0:67:09:1d:b3:55:4e:
9c:85:98:2e:a0:a5:70:d9:73:48:36:4b:05:fe:8a:f4:65:c4:
9e:b0:43:db:a7:98:ad:6b:10:b1:fc:a7:d8:ac:3b:ea:3a:d6:
14:4a:39:52:d4:c6:a1:1c:3a:b6:a9:0b:5b:49:cb:57:27:29:
9b:32:de:be:0a:f2:2a:73:23:25:15:b6:17:99:52:f3:23:68:
46:b3:a5:57:dc:9a:c6:9c:e0:4d:cb:02:0a:04:39:be:17:d2:
a0:68:09:14:6d:cf:e9:d8:32:76:e7:83:16:10:ac:35:7c:d8:
31:81:0c:0a:f2:8d:5a:f0:46:f1:5e:a8:59:7e:e0:33:b7:1c:
a9:22:2d:49:de:f6:03:da:b3:89:81:e7:d2:14:e2:d1:d4:b7:
89:ee:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:10 2025 by rpki-client