Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
File: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft (raw, json)
Hash identifier: bnQRCgj57UibWa+itsjMVboFIIt1BN2jg8UnzklcCPU=
Subject key identifier: 47:AC:DD:7F:04:2A:C1:CB:EA:36:AA:E5:E9:87:39:73:8C:3E:FC:17
Authority key identifier: D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
Certificate issuer: /CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Certificate serial: 019891487133BC09CE20D2C1BE121DCDF69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
Manifest number: 0870
Signing time: Sun 10 Aug 2025 00:01:40 +0000
Manifest this update: Sun 10 Aug 2025 00:01:40 +0000
Manifest next update: Mon 11 Aug 2025 00:01:40 +0000
Files and hashes: 1: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl (hash: GCJRQAVjeFrFhsA7mMqFrPO6M+5VlGH366ffroRopKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:48:71:33:bc:09:ce:20:d2:c1:be:12:1d:cd:f6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Validity
Not Before: Aug 10 00:01:40 2025 GMT
Not After : Aug 11 00:01:40 2025 GMT
Subject: CN=47acdd7f042ac1cbea36aae5e98739738c3efc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:5c:19:c2:aa:68:6e:68:49:e8:53:92:a5:
54:eb:ff:ee:78:f2:d1:ce:0d:8c:dd:0c:5f:a4:63:
97:07:07:5b:4f:e0:8e:2a:a0:a8:ee:1e:d8:8b:a3:
06:c0:f0:e2:ea:9e:f5:79:de:2e:cd:22:03:02:25:
e4:02:c3:86:a9:bf:22:fc:99:5b:61:5a:30:be:63:
65:7e:35:6d:2e:a1:eb:84:7a:38:d2:57:70:74:a6:
b5:56:b4:b1:39:f9:ab:af:3b:61:6d:3e:b1:72:ee:
af:30:42:35:54:8e:c0:97:5b:d9:c6:bd:81:57:bc:
17:0e:fb:0f:25:ce:be:5d:75:c2:ef:96:8a:8a:c8:
11:8e:6f:98:bc:a7:29:30:6e:b3:52:f0:f0:e0:3d:
60:e6:5d:b9:fd:c2:03:ed:34:6b:7b:cc:e9:09:45:
a4:ff:60:94:00:ea:18:e3:01:d8:06:96:26:b2:f0:
04:18:08:57:cf:11:d4:39:e2:65:5a:d7:37:22:5b:
5f:2f:7b:52:86:af:1e:81:7b:2f:df:58:cc:e5:5c:
01:4e:10:6d:37:d7:7c:16:ae:24:8f:dc:55:9a:a8:
87:2f:78:b1:20:e2:18:1d:b8:b3:67:91:fc:f3:42:
41:ad:ea:7a:06:3b:f3:d3:83:1f:30:9a:a5:b5:90:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AC:DD:7F:04:2A:C1:CB:EA:36:AA:E5:E9:87:39:73:8C:3E:FC:17
X509v3 Authority Key Identifier:
keyid:D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6e:d5:86:0c:c5:0a:ad:f1:3b:fa:f8:04:00:28:74:85:32:
b5:61:df:03:72:c9:07:ad:97:0d:c4:4a:b2:ed:cb:1d:b5:3d:
f3:67:14:60:b7:a4:ae:48:38:91:28:72:8e:5e:7d:94:b7:c2:
94:00:36:5c:32:bd:7b:6e:01:51:46:57:57:54:0b:26:ec:1b:
21:44:98:81:9b:a8:36:bd:99:27:79:57:76:ef:8b:0f:55:86:
18:39:0c:79:d5:76:fd:00:08:fb:9c:5a:54:35:90:ba:82:8a:
25:ef:ab:a3:17:48:1e:e1:99:0a:0d:4a:bd:e4:dc:d1:ad:f0:
7b:e2:00:5c:5a:98:56:6d:4c:b2:b9:7e:39:b2:48:7a:69:43:
fe:43:e8:2e:14:98:51:5b:b5:1a:4a:35:fa:fc:29:6e:94:9b:
9d:ed:4a:6f:90:93:c7:18:34:88:21:9b:e8:3c:5c:e9:90:7a:
72:63:66:05:43:b6:c1:c6:be:70:b3:63:6c:1b:b3:e5:d8:47:
82:35:f2:e8:84:e3:37:3e:75:a9:51:77:15:15:c1:cf:b1:10:
a5:b4:40:ea:90:e3:d9:61:0a:fa:56:75:81:4a:aa:34:08:cf:
b6:cf:39:ae:91:d9:39:e1:aa:11:01:17:87:cb:91:90:9c:6a:
7d:4d:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:59:00 2025 by rpki-client