Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
File: d11030Q8uAUXzkFQ3OImYpQPHXw.mft (raw, json)
Hash identifier: sXqEJPW9Vum88ZA2s+RTLnIW4XIIayzfFHqIMWw31hg=
Subject key identifier: 3F:1E:CA:DD:85:A9:F0:B2:57:DC:F1:4F:A4:16:39:5E:61:27:3C:0C
Authority key identifier: 77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
Certificate issuer: /CN=775d74df443cb80517ce4150dce22662940f1d7c
Certificate serial: 01987C098297A04FE587D685B5292B4B5549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
Manifest number: 0A56
Signing time: Tue 05 Aug 2025 21:00:54 +0000
Manifest this update: Tue 05 Aug 2025 21:00:54 +0000
Manifest next update: Wed 06 Aug 2025 21:00:54 +0000
Files and hashes: 1: d11030Q8uAUXzkFQ3OImYpQPHXw.crl (hash: hGhhi8eEcs0hIYXkXrBRLbGuhvS0izyPIxol2SWI5PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:82:97:a0:4f:e5:87:d6:85:b5:29:2b:4b:55:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775d74df443cb80517ce4150dce22662940f1d7c
Validity
Not Before: Aug 5 21:00:54 2025 GMT
Not After : Aug 6 21:00:54 2025 GMT
Subject: CN=3f1ecadd85a9f0b257dcf14fa416395e61273c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:2b:9b:41:5d:8b:75:e3:cd:d9:01:86:33:
ab:94:1e:b3:00:6c:61:7d:fb:10:28:43:3c:f7:33:
39:17:5c:98:ac:97:64:23:ed:6d:ad:57:e6:fb:48:
2e:a8:a5:32:2f:4c:cb:92:56:b0:e4:4d:dc:1f:ce:
b8:85:2e:73:3f:cd:7a:77:1f:74:af:5d:9e:cc:39:
28:6e:db:19:ce:77:71:ab:d1:b0:c0:91:93:be:16:
e1:8a:a2:20:b4:0b:c5:e5:66:9e:b1:15:ee:69:ae:
ab:bd:82:32:5b:b8:4b:b0:cf:4e:59:bd:84:3a:d4:
94:65:c9:b5:c7:b2:42:7b:69:b5:f6:dd:cf:fd:84:
0c:d5:b3:9f:05:a4:3b:64:d8:fc:e6:fc:b3:99:c8:
46:60:10:d5:23:92:b6:c1:2c:49:42:20:3c:a9:90:
01:b8:ef:9c:14:80:b6:49:5d:57:18:de:b6:c8:d6:
e9:63:68:40:19:4b:76:fa:49:ee:7b:bc:06:5b:db:
b7:de:2f:c6:56:12:ad:49:50:b2:1a:97:63:9f:8d:
e1:d1:b9:59:11:d2:8a:7a:ec:a3:a5:09:d4:9e:3b:
7f:e6:f9:46:d1:0b:ea:11:c4:ea:c9:fb:c1:93:25:
db:f9:c9:f8:fc:58:79:11:04:36:68:08:62:d9:e5:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:CA:DD:85:A9:F0:B2:57:DC:F1:4F:A4:16:39:5E:61:27:3C:0C
X509v3 Authority Key Identifier:
keyid:77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:47:a4:05:27:b8:bf:b8:4a:f1:2a:5e:63:21:d4:bf:5d:d8:
77:da:7b:1f:67:a9:5c:d8:33:db:3e:b1:0f:71:27:16:36:01:
61:f2:4f:82:14:6c:fe:b4:41:bf:4a:ab:b1:81:37:c4:22:ac:
56:7c:5f:64:25:58:d1:66:7d:9a:a3:16:41:9b:1b:f4:ff:96:
f2:cf:e3:4e:c6:b8:9b:b7:d0:fb:67:7f:da:3d:65:28:18:0b:
b1:3f:6c:5c:bf:52:53:96:c7:e5:2e:f2:d3:e9:68:a1:fa:1b:
db:59:b7:0b:64:ce:d1:00:99:20:5b:c6:e2:fb:be:05:1e:1c:
d0:60:11:5a:4d:f9:66:b9:ca:a8:85:d2:96:0f:da:ca:16:e8:
2b:eb:4b:c7:4a:a0:7f:0b:a2:06:24:b4:90:27:0c:2b:e7:6d:
c2:c4:8a:5c:3e:ca:ff:ad:d4:24:36:d1:77:9c:14:6e:ce:a3:
6b:46:94:f5:ee:31:b5:6c:0a:2f:42:c4:34:80:a3:70:56:27:
e8:52:a4:5d:dc:36:6d:74:0c:f1:32:dc:d9:c4:ca:bd:5e:c8:
fc:4d:9f:fe:64:c6:e9:50:21:b0:e8:ef:11:be:b0:e6:93:71:
56:6c:40:c8:27:c3:c4:83:fc:12:d9:89:29:2f:3f:3c:87:48:
11:9a:43:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:44 2025 by rpki-client