Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: udzqscnqEty7En6OwxVIbKqqenZ7vyGokqzPpzEqpnQ=
Subject key identifier: 42:50:37:AB:14:F6:91:20:66:D7:A1:13:62:4C:BC:6F:5F:00:9A:A9
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 01987C777A54FB0AC625FB6267BE9C341FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 072A
Signing time: Tue 05 Aug 2025 23:01:01 +0000
Manifest this update: Tue 05 Aug 2025 23:01:01 +0000
Manifest next update: Wed 06 Aug 2025 23:01:01 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: fDuUr+z68BiUebnZBXNyM3wj057h87Q63CFlUxYHKJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:7a:54:fb:0a:c6:25:fb:62:67:be:9c:34:1f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: Aug 5 23:01:01 2025 GMT
Not After : Aug 6 23:01:01 2025 GMT
Subject: CN=425037ab14f6912066d7a113624cbc6f5f009aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a1:9f:4b:a0:e3:0c:aa:c1:92:c4:25:42:09:
36:9d:b9:12:53:c9:f9:3c:84:2e:f8:22:8d:15:62:
3c:30:6d:71:c1:6e:42:29:d4:b3:b0:43:c5:1f:87:
88:20:ab:cb:ae:cf:91:43:9f:2a:37:f0:18:01:d5:
75:a9:d6:00:14:ec:ee:3c:d0:1b:28:85:32:fd:6f:
21:ea:cb:2e:9c:9d:0f:ca:0d:ff:16:bb:13:c5:e1:
3c:da:b7:ef:48:86:7a:eb:bc:6d:a0:fa:6d:c3:f3:
f1:60:ae:13:ec:fd:2d:d2:1f:1d:45:14:aa:b1:72:
50:92:04:c3:b1:05:86:fc:13:6e:4f:f7:69:4c:2d:
a2:56:0c:ce:50:64:37:81:9d:2f:23:0c:53:fe:21:
f1:33:a3:65:a0:df:e2:c3:7a:a2:f5:1a:63:09:9b:
99:0c:97:44:da:15:00:91:03:87:a5:50:b2:84:49:
73:40:af:42:a8:b8:27:f1:80:8d:5a:ec:da:b6:c1:
eb:72:29:14:0d:0c:fd:5d:08:34:cd:c4:31:6f:3f:
73:d7:b0:dd:de:e5:cb:85:60:2f:97:8f:bd:a4:51:
4b:22:a1:03:3c:eb:0c:0a:44:9e:2f:b1:65:7d:f1:
8c:bf:f2:13:b7:d9:8d:a4:61:26:a6:b5:21:7c:59:
1d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:50:37:AB:14:F6:91:20:66:D7:A1:13:62:4C:BC:6F:5F:00:9A:A9
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c5:38:1c:f0:95:1b:08:8c:41:f3:2c:9d:f1:b0:1c:78:56:
9d:dc:cf:fe:7a:15:bb:c3:76:7b:f6:9b:66:02:fb:b5:d0:a0:
82:cd:93:b0:b8:31:c5:31:1c:9a:50:54:01:91:32:17:17:ac:
a8:7b:f4:e1:47:1a:a9:0b:e5:26:b3:c4:44:dc:56:8d:38:53:
f1:ff:3f:54:86:bf:73:b1:ff:bf:d3:7b:9e:75:95:4f:10:0a:
e5:ba:26:5f:41:50:63:4d:ae:d6:05:6a:bb:89:46:ab:ea:14:
b2:bc:9a:56:63:c3:b6:ec:aa:7f:52:5f:75:a8:34:90:fd:83:
2d:05:68:26:ac:d7:22:56:79:d9:f7:4c:f1:ac:50:fc:fd:ab:
8c:f7:0d:51:a1:0d:c0:73:bf:d9:00:96:55:14:3e:81:9c:48:
d5:a5:1f:2f:a3:86:83:07:7c:ef:f7:c0:97:ef:12:b1:b0:2f:
c1:53:0c:9b:ad:31:e9:c0:a0:2c:83:d6:9f:13:1b:29:77:64:
87:2b:80:3c:ef:10:f1:88:2c:59:9e:39:79:a0:59:39:9f:c3:
72:a6:60:fa:a2:92:eb:dd:01:2d:cd:2f:88:66:9d:9a:78:da:
e6:40:40:1a:87:db:4c:cb:06:15:43:65:9e:42:18:fb:dc:8a:
82:cf:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:07:48 2025 by rpki-client