
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
File: p2H8O2oE10MHa9KG3oIURfBlTvc.mft (raw, json)
Hash identifier: 5lxo/oFzYAb5WJM47mX+I92BLwWbUi9gvEwNCqsSfyo=
Subject key identifier: DA:0C:57:B5:F4:21:6C:F5:11:53:1F:D6:D9:7D:5F:2C:64:54:87:FF
Authority key identifier: A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
Certificate issuer: /CN=a761fc3b6a04d743076bd286de821445f0654ef7
Certificate serial: 0198820BB684D329C970A8400175268779C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
Manifest number: 15AD
Signing time: Thu 07 Aug 2025 01:01:02 +0000
Manifest this update: Thu 07 Aug 2025 01:01:02 +0000
Manifest next update: Fri 08 Aug 2025 01:01:02 +0000
Files and hashes: 1: p2H8O2oE10MHa9KG3oIURfBlTvc.crl (hash: lzN6R5/gE8FiVcIR+M8iN+XQjE/pp78PbJ0NHWqRfz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:b6:84:d3:29:c9:70:a8:40:01:75:26:87:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a761fc3b6a04d743076bd286de821445f0654ef7
Validity
Not Before: Aug 7 01:01:02 2025 GMT
Not After : Aug 8 01:01:02 2025 GMT
Subject: CN=da0c57b5f4216cf511531fd6d97d5f2c645487ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:84:7d:90:59:2b:34:04:95:ca:d8:f5:67:
e1:bc:24:35:cd:ce:de:b8:a8:86:b3:1c:6e:38:66:
2e:a3:7d:53:73:8b:37:4c:d2:26:49:cf:ad:30:81:
6f:8b:42:14:f9:fd:9c:e5:95:5e:47:38:73:94:f9:
9c:c2:d0:79:85:61:38:8b:d6:1a:4b:3f:3f:71:54:
8a:aa:6b:4c:d0:be:4f:78:db:22:dc:9a:76:0e:7e:
f3:62:45:79:45:f4:f0:5a:93:b6:d5:37:17:e1:70:
cf:5e:85:0a:7f:f8:60:bd:09:8c:c6:56:2c:42:a0:
76:67:50:3b:7b:6a:0b:47:8a:a0:84:ee:3c:6e:f0:
90:b1:09:a2:62:19:54:76:6d:21:2a:93:ea:54:1b:
97:17:c7:75:6f:f1:78:9a:10:5a:7f:bc:47:87:1f:
76:8f:60:5b:30:10:ae:16:9b:12:3c:20:4c:87:23:
49:68:71:bf:7a:08:cb:90:35:94:1d:b8:59:f5:52:
7e:25:c4:2c:ca:7c:e8:ae:fd:e7:a8:2d:85:6c:6c:
2b:fb:7e:34:af:38:02:a8:4b:c7:32:4c:13:84:45:
20:4c:14:a6:0f:14:fa:24:ee:32:17:e4:61:b0:c1:
a1:a1:e1:98:a1:12:5a:50:49:2e:06:bd:1e:ec:dd:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0C:57:B5:F4:21:6C:F5:11:53:1F:D6:D9:7D:5F:2C:64:54:87:FF
X509v3 Authority Key Identifier:
keyid:A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a6:78:fa:83:55:6d:ad:eb:4d:3a:0b:db:f7:d9:95:ed:39:
2b:5e:8b:19:19:e3:54:74:6c:a3:a0:0b:09:4e:70:ce:ea:88:
fb:3e:d6:4b:3c:b7:25:d2:2b:9d:a7:18:0d:33:e4:1e:73:86:
a9:96:b1:ce:2e:00:70:df:83:a1:b3:be:a7:f6:ea:54:ec:91:
7c:a3:c1:02:86:af:da:70:71:00:96:04:93:70:21:55:a6:de:
fd:95:64:c9:24:62:09:a2:ab:06:98:96:4c:73:af:3d:dd:28:
20:ec:43:ab:3b:ce:fe:95:a8:6c:a1:7c:3a:d5:8e:7a:1b:01:
36:c2:26:1a:ae:cd:5b:0c:30:31:86:b5:1c:aa:2d:91:1a:c3:
11:e8:31:ff:31:7a:d5:56:d1:d6:c1:21:ba:21:d6:fd:84:53:
24:84:66:40:f2:3f:91:8c:59:78:b9:fe:9c:be:de:bd:f3:59:
ac:e2:32:61:2a:b8:f7:6f:25:0b:13:15:35:0f:2d:21:7f:ff:
b1:be:e2:1c:f5:17:1a:34:b8:eb:fe:df:14:f9:01:f0:4c:0d:
71:33:0e:46:bd:99:e6:ab:8b:39:6b:d0:d5:05:8c:f5:8b:9b:
41:8b:e2:49:bc:e7:57:24:62:7d:60:45:3d:e0:ed:12:e5:c4:
11:90:73:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:08 2025 by rpki-client