Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
File: tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json)
Hash identifier: CuwsxjM/AeULwDj2usX52n/p6tniijfObYk9dQB1/sU=
Subject key identifier: 9A:07:25:2C:19:4B:4E:13:B0:87:D3:03:82:35:2F:8C:56:E7:45:56
Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
Certificate issuer: /CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Certificate serial: 01987F7A131CED8AD35FCB32B919149DD14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
Manifest number: 0F55
Signing time: Wed 06 Aug 2025 13:02:43 +0000
Manifest this update: Wed 06 Aug 2025 13:02:43 +0000
Manifest next update: Thu 07 Aug 2025 13:02:43 +0000
Files and hashes: 1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: M1FL5059KUVv4EoV+8vJNmXYmoE7QscUINSMUwaTKu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:7a:13:1c:ed:8a:d3:5f:cb:32:b9:19:14:9d:d1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Validity
Not Before: Aug 6 13:02:43 2025 GMT
Not After : Aug 7 13:02:43 2025 GMT
Subject: CN=9a07252c194b4e13b087d30382352f8c56e74556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:00:dc:97:e9:55:a0:10:26:3f:f9:06:22:
17:5a:4c:a4:ff:15:78:19:35:ea:38:d5:b7:57:af:
73:ee:91:ac:74:c0:38:f3:78:df:21:58:db:80:88:
fc:25:48:89:61:f9:20:f6:58:95:37:fe:9f:5b:be:
78:fa:83:f5:d4:f5:6c:45:2e:5e:b0:b1:f9:60:bc:
61:00:a5:36:75:30:09:72:b3:3a:30:5b:ac:92:14:
96:5d:09:f4:db:cb:8f:76:8b:97:a8:ee:2c:4b:09:
a4:95:8b:26:dd:bf:91:15:92:64:ba:6a:7a:57:77:
3a:97:be:7d:18:12:db:fc:f2:98:18:ee:94:dd:3c:
d7:83:56:f1:48:f3:38:f9:bf:f1:02:41:58:48:3b:
e4:a0:62:59:5e:ee:94:0e:66:0c:63:b0:37:3c:3f:
07:96:8e:6e:6a:5e:cb:13:fc:2b:49:47:43:e9:49:
10:e6:e9:a1:0a:6a:fd:4a:50:be:ba:1d:c3:42:9c:
82:0c:24:8b:8c:44:fb:c6:a4:5b:76:81:ac:0f:40:
6f:7a:04:4b:b4:a4:eb:63:d6:70:32:bb:32:dd:d5:
ac:a2:4f:23:d2:22:d0:3d:fe:36:2c:4e:66:6e:9a:
e5:36:cb:aa:6d:1b:48:f5:7a:99:2c:a5:24:87:dd:
14:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:07:25:2C:19:4B:4E:13:B0:87:D3:03:82:35:2F:8C:56:E7:45:56
X509v3 Authority Key Identifier:
keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:84:51:8a:27:c4:e6:05:2c:28:94:1a:4c:49:65:e2:b6:0e:
fe:90:f6:44:c1:69:98:96:fc:9e:55:bf:79:1a:09:e2:94:9b:
46:cd:0f:91:ae:7b:4f:c1:c9:bf:43:24:2b:6c:7e:d1:47:c7:
66:97:25:ff:96:a8:2f:9b:d9:cf:ab:d6:75:7d:49:e3:7e:1a:
c7:f3:59:bb:f2:fd:5f:08:7e:cb:d6:c1:6d:56:48:d8:91:d0:
c4:d2:57:ae:4e:3f:3f:f6:01:d5:90:bf:46:bc:4e:22:a6:3e:
c8:ee:6d:b3:a8:06:8b:67:b4:38:ef:c4:ac:88:9a:80:52:41:
e0:47:05:8e:e7:cf:9b:42:9f:69:27:81:4e:14:70:bf:a3:5e:
92:c6:a6:77:a1:5b:0c:15:78:b3:7f:40:62:af:88:c3:6b:99:
cd:f1:bd:9b:da:8e:ed:fe:1d:ea:94:15:2c:66:d4:f7:18:53:
ad:ba:c9:05:86:ca:a3:24:55:91:59:ff:57:0a:3d:71:7c:45:
f9:b6:d8:4d:38:9e:5b:bd:80:70:3b:e1:3b:b7:05:bf:41:e7:
cf:53:86:bd:aa:93:45:12:28:23:ed:49:32:3d:a6:52:6b:d1:
47:93:0a:34:cd:85:97:b0:76:d9:4f:a3:bf:3e:e4:3b:e7:51:
6d:48:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:18 2025 by rpki-client