Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: yA7RiZVGRDJVcHN63guUA9hcr78facjrGO4vI2RXZyo=
Subject key identifier: 27:80:3A:91:5B:2D:8D:F4:96:22:89:08:AB:52:2A:F2:E2:F6:FA:A2
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 0198971374DD855E5B02389B20E2FF57E39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0C29
Signing time: Mon 11 Aug 2025 03:01:31 +0000
Manifest this update: Mon 11 Aug 2025 03:01:31 +0000
Manifest next update: Tue 12 Aug 2025 03:01:31 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: G4YgTJzywPH7FTKWZ+RE0M8jwfKuOsbUNqOe7uLOVWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:74:dd:85:5e:5b:02:38:9b:20:e2:ff:57:e3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Aug 11 03:01:31 2025 GMT
Not After : Aug 12 03:01:31 2025 GMT
Subject: CN=27803a915b2d8df496228908ab522af2e2f6faa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:53:45:34:54:39:31:7c:6a:47:6a:e1:95:
fa:62:41:4e:6d:f4:ec:b2:a9:29:b8:49:d8:06:4b:
db:4b:08:97:81:d2:66:a6:97:8f:af:51:a0:ce:04:
27:f3:a4:9b:9f:44:a0:f2:b7:86:6f:43:1b:2b:86:
c9:6e:6b:14:98:d1:17:72:39:23:0d:ac:d0:08:c3:
59:cb:b1:74:79:0c:1c:b5:01:3e:53:1a:74:a2:b7:
51:1d:2d:7a:87:be:92:df:55:ab:7c:5d:e7:82:4b:
35:70:a6:8e:97:db:f0:fd:c5:ef:45:ea:ac:07:2e:
dd:46:91:3a:fd:e3:63:14:04:71:40:5c:ea:15:87:
fc:42:c6:ff:9b:a0:70:bf:40:b9:79:56:6c:61:d5:
1c:89:70:fc:74:68:8c:f2:b0:47:f8:6a:d2:fb:55:
29:8b:40:c6:7b:07:40:86:b1:b3:4a:2f:2f:95:33:
bf:1e:13:f9:e5:6c:6b:99:72:66:29:29:a1:e5:fb:
56:a8:af:2f:9f:e0:39:3f:de:d3:fa:48:f6:f0:07:
17:fe:f1:98:ff:c2:3f:98:92:d2:0f:b1:37:4a:cb:
9a:2b:8e:2c:61:6e:5e:e4:fe:e6:98:9f:7b:c2:c8:
f7:2a:7f:c7:bd:62:4c:84:ee:57:2f:f3:45:c1:87:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:80:3A:91:5B:2D:8D:F4:96:22:89:08:AB:52:2A:F2:E2:F6:FA:A2
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8f:aa:f3:f7:9e:87:f2:6c:51:4c:c7:13:83:22:83:93:49:
4d:a5:ed:4b:e0:b9:43:35:be:ff:f1:27:9e:6f:3c:58:e3:6b:
dc:04:21:cc:e9:39:45:3d:2c:34:e9:d3:52:01:5f:75:f3:23:
74:97:19:dd:ec:20:89:c7:4c:c7:eb:44:88:94:1d:60:94:91:
d5:9a:e7:0b:94:83:31:ba:8a:8a:1d:ac:96:54:a1:c0:c5:ba:
b4:f9:0c:11:b9:04:29:fb:85:d3:bd:7e:36:eb:5d:ce:a6:a8:
58:00:cb:30:3f:1a:d8:7a:5f:2e:e2:37:93:35:82:a4:b0:d0:
bd:d9:80:bf:5b:d2:f6:52:2b:6d:11:ce:20:64:21:3f:17:29:
ec:49:0b:9d:41:4a:52:f0:96:09:fc:00:88:22:1e:88:b8:51:
78:2f:c0:27:4f:d0:b3:f0:92:05:ef:92:3d:5b:e4:36:74:9f:
c9:00:8d:4e:3d:25:a4:af:5b:d8:f2:e7:96:07:46:a3:5e:fb:
37:aa:38:51:18:3f:c3:ae:4c:6b:68:48:c1:88:ff:4f:53:fc:
41:92:cf:a4:0f:38:2d:9f:27:bc:6c:65:34:4b:a7:21:e7:66:
f7:02:8c:c9:aa:1e:f5:07:32:50:4b:95:b3:68:48:45:95:a4:
37:2a:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:36 2025 by rpki-client