Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
File: cA5JDhDqN72DSWKGM7WIVmHmegI.mft (raw, json)
Hash identifier: u8G+GTFSv0/J+XFb1CWslHG/PuFC5IWKwsTBJFcF0Fo=
Subject key identifier: F6:AC:F5:82:D0:EB:C7:E4:64:87:F1:59:79:C7:25:CB:94:B3:B6:4E
Authority key identifier: 70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
Certificate issuer: /CN=700e490e10ea37bd8349628633b5885661e67a02
Certificate serial: 019873E2BF36D49EFED44CC30A95301735A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
Manifest number: 0121
Signing time: Mon 04 Aug 2025 07:01:36 +0000
Manifest this update: Mon 04 Aug 2025 07:01:36 +0000
Manifest next update: Tue 05 Aug 2025 07:01:36 +0000
Files and hashes: 1: cA5JDhDqN72DSWKGM7WIVmHmegI.crl (hash: soL2qFwkxA2dKAz4m2r3RYzjyo6WK2EhuiTkJElY6j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:bf:36:d4:9e:fe:d4:4c:c3:0a:95:30:17:35:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700e490e10ea37bd8349628633b5885661e67a02
Validity
Not Before: Aug 4 07:01:36 2025 GMT
Not After : Aug 5 07:01:36 2025 GMT
Subject: CN=f6acf582d0ebc7e46487f15979c725cb94b3b64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:ae:70:11:e8:23:46:41:e6:18:04:07:ff:
e1:14:20:ee:6b:4d:16:fb:a4:0f:64:0b:88:df:da:
2c:f8:a7:3b:4c:9d:ec:c1:a2:cf:58:f1:f7:3c:1b:
b1:fc:42:b2:3d:2e:8b:c3:26:4b:21:fe:40:33:cf:
1e:ac:99:b4:50:31:48:d9:d4:b5:a7:70:37:18:7f:
f6:00:32:de:3d:9f:65:55:e5:5c:d1:2b:b5:53:ef:
3e:b4:f5:12:3f:62:a5:b0:cb:72:51:c2:31:dd:dc:
d7:e5:df:1e:33:93:2e:16:84:86:4e:18:de:54:e5:
9a:0d:ab:24:cf:7f:79:b4:12:5d:d0:f4:89:1b:2d:
d0:d1:cd:dc:6a:6f:a6:84:85:c6:f5:4f:8d:06:c0:
51:86:c1:49:85:76:c0:b4:ec:0b:7b:37:a1:ac:52:
6f:cc:57:de:c5:b4:a0:17:54:f6:e7:df:3e:bc:fd:
6a:c7:81:ab:4d:e2:c3:d8:b3:d4:68:72:42:42:97:
d6:bd:28:c0:f3:8b:7b:7a:c0:b9:0f:3b:92:02:9b:
23:89:1a:34:83:e9:2e:c0:5b:66:7e:66:25:0f:1b:
79:c4:c1:c2:69:33:31:c8:80:c3:36:38:e1:b0:75:
be:c0:df:64:c5:8d:e9:b9:62:5e:2d:91:64:7f:47:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AC:F5:82:D0:EB:C7:E4:64:87:F1:59:79:C7:25:CB:94:B3:B6:4E
X509v3 Authority Key Identifier:
keyid:70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:71:83:30:f3:23:e9:7b:6b:5d:c1:a7:aa:b6:21:6a:ef:0b:
86:9f:b5:7e:b6:cc:5e:18:8d:53:a3:c6:49:11:82:8f:ee:a2:
2d:1f:d5:8a:64:0a:6f:c1:ba:28:18:9c:22:88:e6:4f:27:1b:
93:8d:8e:c9:c8:d1:0b:51:01:37:d9:e0:32:2e:a5:1b:a6:43:
8d:1d:aa:42:fd:61:03:54:40:33:7d:1f:c6:20:af:43:ec:38:
f3:cb:40:a3:cb:30:50:d8:03:c1:87:7c:da:84:b4:e5:03:20:
db:cd:6e:9e:3b:46:06:f0:c7:1f:0b:04:24:ff:7b:a5:66:08:
4f:e8:01:89:58:e6:62:df:08:a0:b0:a5:f2:6f:65:58:e7:b8:
d1:90:b9:1d:f5:fb:7e:a4:16:bb:5a:d7:9a:4e:72:0b:0f:4d:
10:2a:9b:97:4c:a3:b2:56:dc:a1:ab:5e:70:4e:1f:5b:dd:73:
2b:7a:77:9e:dd:d7:7c:16:29:20:cd:f7:9f:c4:89:54:82:c7:
5e:36:0a:4d:51:5a:a1:e4:81:23:cc:0d:e2:9e:6c:35:8e:53:
69:10:a4:f5:4d:e3:44:34:bd:7f:02:9f:83:cb:49:2f:5a:4d:
6f:28:b5:8f:67:db:b5:31:b4:d4:b8:4c:e8:c6:66:ab:9d:f2:
a7:d2:da:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:48 2025 by rpki-client