Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
File: cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json)
Hash identifier: 16v+6Jh8HwWvGLRM3W+Tyt0mFqN50YgbC2Ft4g9JUiw=
Subject key identifier: 35:BB:10:2D:53:49:E9:98:F3:04:26:D4:01:EC:4A:46:51:FA:30:B7
Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
Certificate issuer: /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Certificate serial: 01987F79F6399411F09BEBF4606CC7B91DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
Manifest number: 0F98
Signing time: Wed 06 Aug 2025 13:02:36 +0000
Manifest this update: Wed 06 Aug 2025 13:02:36 +0000
Manifest next update: Thu 07 Aug 2025 13:02:36 +0000
Files and hashes: 1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: G1QU1jWwS9vkzkTicextewDeitXdyH/SGtEN63HY/Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:f6:39:94:11:f0:9b:eb:f4:60:6c:c7:b9:1d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Validity
Not Before: Aug 6 13:02:36 2025 GMT
Not After : Aug 7 13:02:36 2025 GMT
Subject: CN=35bb102d5349e998f30426d401ec4a4651fa30b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:d3:ea:92:7a:a8:f9:2f:1c:8e:3a:c8:f5:
dd:5e:bc:de:06:4e:bf:7a:06:c4:64:73:eb:a1:cb:
05:94:48:8c:ec:48:a5:cc:b4:87:32:bd:0f:b2:64:
0c:3f:29:1b:54:83:75:f0:3d:0f:7e:64:f2:3a:9b:
e3:f8:7e:29:95:ae:0b:5e:c9:fd:bd:21:06:80:2b:
ff:57:fb:ff:03:e7:0a:a1:ba:d1:4e:ad:a7:4c:90:
d6:bc:b1:a5:42:17:cd:46:0e:df:80:ba:f5:92:a6:
69:51:71:df:ac:16:e9:ec:2c:75:88:2a:25:24:03:
f4:bf:6a:5d:62:43:6e:eb:8f:3b:b1:b0:93:b0:bf:
2e:56:22:f1:2e:fd:b1:35:7e:52:22:f5:99:ba:9d:
2d:01:bb:1e:7e:07:55:ad:92:2c:91:9f:18:bf:38:
d1:3d:f8:91:c3:fe:ec:32:51:c0:c7:c8:79:c1:70:
94:d1:97:c3:83:1b:9f:24:ee:c5:48:be:60:d6:86:
17:52:d9:a7:0b:8c:7d:fd:91:59:88:30:8a:56:f9:
b8:97:96:91:8c:78:e0:17:eb:dc:cd:e1:f7:81:74:
fe:e2:da:04:74:99:e9:8f:12:b0:77:07:35:b9:73:
29:ad:17:bd:5c:c2:2d:cf:5e:ea:41:25:53:54:5a:
06:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BB:10:2D:53:49:E9:98:F3:04:26:D4:01:EC:4A:46:51:FA:30:B7
X509v3 Authority Key Identifier:
keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:04:c3:70:7f:4c:bf:01:6e:ba:a5:a6:14:9a:8f:df:2a:0b:
a7:02:c6:7a:c5:20:18:28:35:36:51:47:69:99:0e:84:4d:84:
b0:08:6a:e1:ed:b8:90:fe:fb:d7:0d:47:f5:b2:db:c7:21:16:
3c:8a:1c:0c:a8:99:3f:2e:83:b5:5d:a1:63:d5:b3:35:0c:f0:
b0:c6:cb:c0:b4:59:13:5c:ed:97:cd:72:be:03:15:00:d3:e7:
22:23:5c:a7:ed:a2:3c:53:72:34:de:88:81:c4:f7:42:4a:5d:
99:e9:26:6f:a0:87:70:f2:56:c4:14:5e:39:3e:8d:e4:60:91:
2f:af:09:62:d8:9b:c3:4b:c5:eb:5e:68:93:02:55:0d:14:d3:
39:35:af:95:eb:3f:de:2d:27:20:af:08:7e:e8:89:f8:62:8c:
ce:7c:72:31:39:c4:98:7d:13:a3:01:04:59:92:cc:e7:d3:2a:
4f:2b:95:03:73:07:76:9d:ad:81:ff:da:ba:bb:dc:0c:9d:03:
f5:9e:72:e9:2d:46:b3:ee:b3:4f:6b:47:b4:c2:eb:b6:1a:3f:
ac:c2:16:05:81:9c:c4:45:fd:c9:35:2e:f2:f6:d8:6a:ff:47:
a1:0d:44:b5:f3:68:d4:6e:11:87:a1:d9:ba:47:2c:14:79:c0:
61:95:58:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:49:32 2025 by rpki-client