
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
File: D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json)
Hash identifier: bQxxdvVHOjcAfQlt1HODqUn0nq+TjluqPDI7NUabZl4=
Subject key identifier: 1C:C1:B3:8F:D5:42:04:68:18:F2:F7:BD:68:10:16:C0:14:AE:97:09
Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
Certificate issuer: /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Certificate serial: 01987BD2497F1F501C7B102278FE5EBA45B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
Manifest number: 0221
Signing time: Tue 05 Aug 2025 20:00:35 +0000
Manifest this update: Tue 05 Aug 2025 20:00:35 +0000
Manifest next update: Wed 06 Aug 2025 20:00:35 +0000
Files and hashes: 1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: 1yjBFAPUlWs1c+jyksr93ohK/bVZXXFpbXZoGYcywq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:49:7f:1f:50:1c:7b:10:22:78:fe:5e:ba:45:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Validity
Not Before: Aug 5 20:00:35 2025 GMT
Not After : Aug 6 20:00:35 2025 GMT
Subject: CN=1cc1b38fd542046818f2f7bd681016c014ae9709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:97:5b:35:b7:0a:94:99:17:28:23:5c:c1:c6:
a3:42:5f:9a:ca:8f:97:39:11:72:1a:3c:7f:18:d7:
5d:18:9a:3b:6d:cd:63:f6:58:41:3c:9f:c9:97:77:
1e:93:f6:d8:19:b1:09:97:f9:0a:a9:a1:34:7a:12:
91:ea:b6:9f:db:d4:55:27:b5:7d:65:48:b9:74:c7:
b3:74:4f:23:bc:c3:79:c5:69:0c:b9:cb:b2:2d:b3:
ff:bc:cd:97:2b:35:07:26:da:83:a4:d6:ce:9f:1e:
ac:aa:5d:41:1f:f0:92:62:6e:eb:a3:7d:ee:ce:e1:
56:a0:e2:4d:bd:05:99:5a:56:03:af:15:6c:29:3c:
8e:b2:01:0e:9f:53:7c:7b:34:b0:96:af:1c:86:7e:
ec:f0:23:78:bb:d6:d9:16:de:89:dd:03:51:db:97:
5c:b1:fe:e3:b2:3b:2d:11:ce:23:77:0a:fa:c5:f9:
1c:a0:18:1f:0e:70:75:ff:ca:03:de:fc:9c:eb:3b:
2d:d6:b5:c8:18:fb:ed:f9:0f:35:7a:e4:72:c6:5d:
a5:cf:07:a0:a6:5d:36:b1:5c:7e:3f:69:70:f1:f5:
66:92:c1:18:ae:87:08:15:91:19:69:0d:88:65:af:
c7:18:89:94:70:8a:9c:a8:f8:52:2a:f2:54:55:e2:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C1:B3:8F:D5:42:04:68:18:F2:F7:BD:68:10:16:C0:14:AE:97:09
X509v3 Authority Key Identifier:
keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:47:0c:80:5d:b3:5d:aa:53:9f:20:e6:13:96:77:2c:88:10:
4b:b6:fb:a2:cf:32:8b:39:46:b9:ad:2a:d7:fc:59:11:10:b4:
86:8b:b5:90:be:db:19:26:ef:b5:9a:a7:de:84:85:26:b0:f4:
88:a2:e5:7f:fa:e9:35:f5:78:00:21:01:56:82:bd:00:ac:ec:
cb:7f:91:e1:b2:5c:69:5d:4f:92:75:60:c9:d2:1e:4c:35:43:
da:60:2b:ab:bc:19:15:a4:c9:8e:ca:8f:0d:6a:23:99:7a:01:
35:f7:bf:6c:c6:87:83:8e:f8:e6:2c:a5:0b:63:d2:07:8d:de:
a2:b7:08:51:00:38:8d:01:2a:6c:ba:55:28:5a:ff:90:f4:1e:
28:5f:47:d4:f0:46:05:f1:53:5b:92:67:57:3f:de:ed:df:c5:
ba:7a:5a:89:fe:3a:81:e3:17:a9:7b:91:e9:1e:24:c0:13:0d:
68:99:7b:af:dd:be:a5:e3:6e:17:ed:13:3e:b2:9d:eb:6e:4d:
f5:a2:be:15:79:c0:c5:32:b2:95:cc:00:18:a4:96:3a:88:aa:
69:44:5c:89:62:fc:6d:fd:95:f3:7e:8b:1f:93:d2:23:02:31:
c4:a8:ca:2b:33:92:87:58:0a:99:55:0d:5f:61:27:9b:bb:de:
b5:e0:41:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:32 2025 by rpki-client