Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft (raw, json)
Hash identifier: HhmfrahKzDfJUYhpmjqY0r0MT1l2cQx0IGwCfI49CRQ=
Subject key identifier: C1:E6:D0:BE:5C:D9:BF:1C:4B:AE:56:BC:67:B1:5D:72:23:BA:D1:FC
Authority key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
Certificate issuer: /CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Certificate serial: 01987298F09871BDCE240D8F22350047604E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
Manifest number: 128B
Signing time: Mon 04 Aug 2025 01:01:22 +0000
Manifest this update: Mon 04 Aug 2025 01:01:22 +0000
Manifest next update: Tue 05 Aug 2025 01:01:22 +0000
Files and hashes: 1: msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl (hash: Hcs42vzqsK706t3aQjUoJ/lShIe86eA1qY+UAiwZxzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:f0:98:71:bd:ce:24:0d:8f:22:35:00:47:60:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Validity
Not Before: Aug 4 01:01:22 2025 GMT
Not After : Aug 5 01:01:22 2025 GMT
Subject: CN=c1e6d0be5cd9bf1c4bae56bc67b15d7223bad1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:78:ce:17:68:1b:5e:fd:31:2c:f2:32:0f:
1a:67:d3:75:31:8c:2c:bb:9f:5d:05:51:f9:f6:64:
bc:34:74:e6:91:7b:88:c1:09:1f:92:cc:85:b9:cb:
06:16:3f:00:d0:c0:f4:1c:75:60:1f:30:cc:ec:6b:
c2:a8:48:96:11:da:c2:f7:d2:45:cc:e9:ba:a1:b8:
a1:32:38:e8:40:af:d4:16:92:18:97:82:2d:db:a9:
92:68:5a:52:87:eb:48:d7:e7:c3:9e:3c:19:14:dd:
e6:ac:58:b3:89:98:8b:c9:e3:63:0c:c5:9d:65:ce:
1a:74:3b:99:06:68:96:1e:a5:07:94:7a:e8:88:36:
f4:bc:3e:1d:99:b6:2f:45:03:17:e3:49:86:90:3a:
d6:5c:c0:ca:a0:2d:01:4e:ee:c8:1a:2a:31:c6:77:
72:c7:b8:1b:4d:03:2b:c8:b7:29:e3:64:b2:2f:47:
57:46:8d:a7:88:d5:16:78:9d:72:d5:3d:61:bb:f2:
b2:b8:7c:82:a9:b7:41:34:01:14:43:2e:de:ac:8b:
bd:b2:21:c9:9b:b6:7b:a9:99:71:74:93:2d:e5:64:
15:0e:f1:ea:02:14:63:fe:1d:84:1a:41:34:f7:63:
98:1d:cf:43:c9:cc:c4:e0:a3:03:81:94:9e:65:c3:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E6:D0:BE:5C:D9:BF:1C:4B:AE:56:BC:67:B1:5D:72:23:BA:D1:FC
X509v3 Authority Key Identifier:
keyid:9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ae:9c:d0:2e:94:b2:39:91:7a:72:f4:22:49:a6:5c:b0:b8:
a5:6e:a4:d2:3a:4a:2a:2d:df:72:90:82:87:ba:34:9a:55:62:
59:64:77:86:01:ab:55:21:d1:51:cd:9f:3e:da:9b:b6:ed:1e:
92:db:ff:1d:ac:96:fd:c6:54:aa:f5:f6:3b:c8:bc:96:52:18:
12:6c:0a:4d:87:2d:16:f9:8e:0e:3c:e6:0b:8b:81:29:86:cd:
b6:19:31:09:a7:91:78:02:c6:6c:68:bb:0f:68:95:22:c0:71:
db:32:13:24:2b:e4:fa:a4:c7:69:f6:7a:0e:32:e4:58:07:c4:
cc:8d:d9:28:19:e7:fa:05:17:51:b2:d7:93:21:b7:e1:39:01:
3f:09:02:5e:7f:c8:b3:86:ed:40:98:d9:61:e1:93:9e:7a:29:
a0:49:b9:94:f9:2e:63:5a:28:92:7e:1d:7c:eb:0a:99:5d:ce:
39:fc:87:1c:82:4f:fd:e8:8e:f7:7c:8d:a3:1b:64:6e:ba:c6:
2d:20:4f:0c:c8:2a:cd:31:21:0b:39:86:56:78:21:86:9c:d1:
c8:20:cb:41:85:31:4a:b7:1d:13:b7:db:be:58:5e:37:78:0e:
c6:e4:72:59:3a:78:18:3b:39:55:c3:3b:78:b2:a8:01:f3:7e:
dd:22:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:38 2025 by rpki-client