Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier: I7fPjv4WRw8GdsqWqob9cIoOca1QdX1RuA6gvhMxkzU=
Subject key identifier: 52:FA:83:52:67:69:3D:8B:40:0C:1B:C7:90:5D:EB:97:FC:EB:52:7E
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial: 01987D8B32213F37BA86FE3D03BA08568E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number: 04FA
Signing time: Wed 06 Aug 2025 04:02:10 +0000
Manifest this update: Wed 06 Aug 2025 04:02:10 +0000
Manifest next update: Thu 07 Aug 2025 04:02:10 +0000
Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: 4u+lo8i1fnfDf0Gpv16hR4HAvPKSZE3ldZay69Rqe2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:32:21:3f:37:ba:86:fe:3d:03:ba:08:56:8e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Validity
Not Before: Aug 6 04:02:10 2025 GMT
Not After : Aug 7 04:02:10 2025 GMT
Subject: CN=52fa835267693d8b400c1bc7905deb97fceb527e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:d6:1c:6b:88:b7:fa:a8:91:3c:a1:24:7a:
0a:d2:1a:56:23:56:41:78:14:d8:32:4c:27:9c:36:
58:b4:bf:5c:31:5f:68:4e:30:e5:1b:fa:7e:37:fc:
f5:09:11:1a:99:e9:24:5e:3a:0f:43:72:51:7b:98:
f8:43:86:85:b2:4d:e6:b9:93:bc:22:a9:a2:b4:71:
d8:2a:33:f4:c2:97:90:68:c3:b9:c0:2b:c4:c9:50:
9e:16:69:06:a9:6d:8f:f2:0a:9d:00:81:04:5f:1a:
e2:51:dc:79:97:18:94:2f:23:8d:62:67:5f:90:0e:
1b:c2:81:07:fd:8a:f9:b3:0a:76:bf:48:e4:61:d0:
0f:42:16:9a:47:f8:6b:93:c3:08:f5:44:7d:58:e5:
9b:80:6d:29:7f:ff:2f:20:3c:3b:d0:f5:c4:dd:e3:
ca:1e:53:f4:c1:d2:56:63:40:ee:59:0f:ca:f2:60:
aa:43:86:9c:37:a7:4a:75:2b:6c:92:88:da:b5:e3:
83:5c:9e:70:d3:70:ac:2b:96:ae:0a:3b:56:db:7e:
e9:c6:6f:14:93:05:8d:31:f6:2c:4b:72:e5:da:22:
eb:0a:c6:3d:0a:bc:a4:6f:aa:c3:22:2d:b9:18:ce:
61:21:57:0d:84:be:ce:dc:ef:41:66:63:ce:57:10:
7c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FA:83:52:67:69:3D:8B:40:0C:1B:C7:90:5D:EB:97:FC:EB:52:7E
X509v3 Authority Key Identifier:
keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b7:d9:27:d6:da:07:04:1b:27:66:47:a2:58:65:6e:81:83:
e2:68:c8:5d:a1:f8:53:c3:d6:35:32:08:cb:7e:c9:46:c9:37:
e8:83:f9:35:06:4d:bb:87:2d:58:0d:5b:53:fa:ea:42:18:04:
9e:a2:57:a9:5d:49:64:03:a4:fa:00:d9:be:9d:35:a2:12:e0:
cf:0c:33:28:e4:d5:fe:9f:66:be:6e:20:16:f2:15:f4:63:52:
29:73:23:fb:81:03:3f:6d:6a:59:01:83:52:de:cd:89:33:1c:
b5:50:83:7f:6c:26:ed:b2:49:b9:c6:d6:6f:5a:ae:cb:19:c2:
61:b7:a7:9b:21:39:ee:1a:74:fd:3e:5a:19:ef:49:ff:82:0b:
63:a1:7e:dc:5f:4b:c7:ce:39:3d:88:b8:96:69:2f:db:d8:8e:
9e:d2:1b:db:48:35:a7:b1:c6:a1:d7:6a:76:b2:a9:09:b0:12:
7a:c7:b9:a5:d9:42:5f:f9:fe:e1:78:b2:f5:31:b9:63:32:0f:
4e:bd:f0:35:bf:7f:30:e8:dc:c6:76:8d:8c:2d:f5:fb:1f:32:
f7:ed:ff:0b:61:5a:f5:e8:47:ab:13:19:86:44:65:c8:1c:8e:
bb:a6:80:9e:c1:c1:5d:cc:37:27:fd:c6:48:d7:1c:3b:a6:81:
83:db:57:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:45 2025 by rpki-client