Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
File: dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft (raw, json)
Hash identifier: E/BJmZzwKPf7ZEz+6JbkM2Dbj+Zlm1Y75XXjAXHmgPs=
Subject key identifier: 48:AC:C2:D7:31:4D:D7:5F:15:26:02:5B:CD:FB:1C:03:63:5C:EC:57
Authority key identifier: 74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
Certificate issuer: /CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Certificate serial: 019874190CB80D59C9C06ECAFF99766BDBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
Manifest number: 0F0B
Signing time: Mon 04 Aug 2025 08:00:55 +0000
Manifest this update: Mon 04 Aug 2025 08:00:55 +0000
Manifest next update: Tue 05 Aug 2025 08:00:55 +0000
Files and hashes: 1: dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl (hash: eTFbWV5ftv2FPJqkzaJbupz8CFAbDdCrdnRoQxxNAXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:0c:b8:0d:59:c9:c0:6e:ca:ff:99:76:6b:db:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Validity
Not Before: Aug 4 08:00:55 2025 GMT
Not After : Aug 5 08:00:55 2025 GMT
Subject: CN=48acc2d7314dd75f1526025bcdfb1c03635cec57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:9c:3b:dd:8a:49:e7:76:ae:b9:e2:63:e6:
ed:d1:fa:52:1d:e1:ea:1a:89:b5:c3:7b:93:20:9a:
4d:7e:1f:3a:8d:0f:8d:c2:fd:3c:d2:21:c4:3f:9c:
b2:31:49:d0:6c:9a:67:67:6a:d8:52:87:11:82:6b:
51:96:1f:28:69:21:65:7c:96:19:3e:4f:8a:94:99:
60:39:c3:9b:18:23:c7:5b:e2:18:83:98:d4:41:e0:
7b:80:b5:65:d1:3b:f5:61:3f:75:d6:06:84:2b:63:
65:82:e9:97:de:07:6a:2c:2d:95:12:5b:c9:ad:66:
de:1f:49:19:9b:bb:c6:01:c1:c0:4b:b9:b4:de:35:
54:58:2b:d1:57:10:ec:74:29:d4:2d:c4:01:01:f1:
58:d1:12:69:3e:b3:9b:8b:d7:da:5e:82:e0:6b:33:
dd:6b:0e:23:bd:21:71:c6:6b:63:46:cd:ac:e4:b5:
60:fb:fe:dc:3b:ed:5f:f8:a7:4c:69:dc:18:37:8d:
0e:2e:f0:ec:39:f5:fa:95:33:4c:45:e7:18:2c:45:
e1:47:e1:6f:1c:57:f6:49:28:73:44:2f:36:13:20:
05:16:c7:2c:64:dc:97:bd:e2:20:f8:6e:68:ca:62:
c1:2b:46:fd:cf:50:60:2d:6c:35:09:4d:4f:f6:78:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AC:C2:D7:31:4D:D7:5F:15:26:02:5B:CD:FB:1C:03:63:5C:EC:57
X509v3 Authority Key Identifier:
keyid:74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9d:24:70:5e:18:92:ad:1c:bc:b0:a7:79:1d:be:cc:a6:23:
82:ac:c6:5f:05:85:9c:98:db:9e:ec:78:e7:a4:6d:52:4d:20:
c5:7c:c6:a9:51:40:51:b1:58:0e:ba:67:c3:5b:e1:4d:e1:6d:
13:89:a1:79:7a:8a:90:04:7b:bf:d8:82:d2:9f:bb:25:15:4d:
09:c2:c2:1b:50:e6:3e:fc:6c:99:ff:7c:34:11:a0:e3:40:5b:
c7:4f:7c:7d:8f:5a:f7:fb:36:83:09:28:38:00:3f:cb:ee:51:
05:fc:36:79:8e:ca:f6:0c:34:53:cd:fb:d6:79:7c:4a:82:3d:
1b:95:7a:c7:ac:23:fc:28:91:f0:fd:d4:c6:80:4d:1b:fb:f5:
29:84:00:72:87:89:99:42:fe:71:1d:e6:b7:d3:a6:95:fd:cd:
d9:49:93:12:8f:fe:9c:a7:c2:7d:e3:96:10:ed:a1:5f:50:cd:
2b:24:07:7e:8b:f1:4c:53:16:eb:c4:d4:c3:b2:a1:2f:83:ca:
1a:86:5c:a0:2d:5c:7e:ec:f4:87:b4:8f:6b:c4:1e:70:e7:d0:
8d:67:ca:9c:19:03:11:a1:ea:8f:d3:ba:6b:70:6b:d8:ef:fc:
f2:4d:4b:19:8f:8b:4f:89:48:df:90:dd:0b:e5:40:cc:e7:2c:
6e:d7:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:37 2025 by rpki-client