Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
File: RoWpxIcmUu55Z7pfSieCDGcVKNY.mft (raw, json)
Hash identifier: urhIhaMhihxbc6J+/huehnUBuWuymDWolrmC3ZbD+qw=
Subject key identifier: B3:BF:46:8D:8E:5F:AD:2E:A5:E9:58:B0:2C:80:70:6D:CC:7A:43:CE
Authority key identifier: 46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6
Certificate issuer: /CN=4685a9c4872652ee7967ba5f4a27820c671528d6
Certificate serial: 01988B7C963B37579885B8636801796570CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
Manifest number: 051D
Signing time: Fri 08 Aug 2025 21:00:54 +0000
Manifest this update: Fri 08 Aug 2025 21:00:54 +0000
Manifest next update: Sat 09 Aug 2025 21:00:54 +0000
Files and hashes: 1: RoWpxIcmUu55Z7pfSieCDGcVKNY.crl (hash: 8uEXcQu6zUeZ+nKvLH59/D9r0B6L47UZhECIxOfYHUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:96:3b:37:57:98:85:b8:63:68:01:79:65:70:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4685a9c4872652ee7967ba5f4a27820c671528d6
Validity
Not Before: Aug 8 21:00:54 2025 GMT
Not After : Aug 9 21:00:54 2025 GMT
Subject: CN=b3bf468d8e5fad2ea5e958b02c80706dcc7a43ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:f2:c1:a3:17:87:d7:bf:54:67:55:83:21:
7e:d8:f6:16:9d:88:e1:59:aa:25:3f:0a:69:e2:4e:
32:10:92:31:12:a0:6b:9c:27:d4:15:e9:cc:b0:74:
33:c5:89:14:eb:6d:9e:00:6d:b2:2b:e1:69:03:bd:
c5:ba:a1:44:5d:c3:23:fb:a8:5a:c6:f9:dc:f3:82:
a2:0f:5f:06:88:25:7c:f5:d5:34:63:bc:87:ed:33:
38:5c:d1:9a:77:68:2f:8c:d0:b1:05:a0:a8:a7:47:
81:98:b6:49:6c:a1:11:66:94:73:95:61:cf:01:29:
70:36:53:c4:30:b5:42:1d:5a:f8:6e:59:d0:fe:69:
e3:1b:e5:de:8d:8e:40:59:ab:f0:b9:68:5c:59:8f:
df:38:de:8d:6a:f0:ce:71:48:fa:0d:c5:a9:69:a0:
69:b7:92:0e:44:5f:fa:84:7a:d6:e4:c6:1c:21:84:
36:0d:e1:65:02:31:fb:16:b1:ee:73:99:07:1d:4b:
08:fe:88:0a:c2:25:7d:92:56:75:4b:32:8a:b8:e8:
b6:ba:e2:3f:91:17:fd:42:d3:f2:21:85:c5:81:c2:
ad:89:0a:65:b4:3f:2f:65:0a:72:b9:51:c5:be:65:
7f:55:7f:73:77:90:32:34:59:93:2a:de:29:f2:21:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BF:46:8D:8E:5F:AD:2E:A5:E9:58:B0:2C:80:70:6D:CC:7A:43:CE
X509v3 Authority Key Identifier:
keyid:46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:65:f4:70:c6:00:79:6f:54:83:6a:5a:11:06:bc:15:c2:0f:
ca:e8:87:fa:8a:7d:61:a3:62:ac:14:b1:68:98:d8:6c:4a:7a:
4a:07:34:9c:82:91:5f:bc:68:8a:5c:57:f7:a4:9f:c4:b0:db:
9f:2c:49:a9:83:63:07:2d:9d:4b:87:ca:9d:44:42:ec:20:ea:
9d:2b:a9:69:a5:a9:36:16:a2:e8:f8:ec:72:96:dc:b4:01:1a:
dd:87:4a:84:c3:4b:3e:ac:2a:f9:d6:53:f2:ad:54:e6:cb:66:
f5:0c:92:38:6c:21:20:43:40:0e:fe:77:1c:35:26:d8:5c:05:
2b:c7:21:5f:f1:bf:81:f5:8f:3c:88:27:26:81:b4:77:8e:25:
dd:cf:0a:ef:b8:a4:94:04:88:35:f5:ac:b7:c0:82:6b:6c:5c:
d6:8c:6c:79:8f:e8:c0:91:19:05:aa:d4:0d:02:78:e7:c6:07:
2f:96:46:2f:cd:c1:9a:9f:9a:7d:97:b7:90:fb:9b:0d:76:86:
a4:94:06:75:e4:33:20:ef:37:ed:c5:d6:0d:bf:a8:99:89:c0:
e5:14:a0:53:6b:93:dd:61:71:50:6c:67:a6:5e:1d:1f:db:cf:
34:68:97:ec:2b:69:ce:34:8f:4e:53:91:b4:2d:1a:92:a6:e8:
94:0f:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:46:08 2025 by rpki-client