Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
File: A1mTnOHGqpvru2WA4VbuvYcd87I.mft (raw, json)
Hash identifier: Iwtdj6HsVNwWD1cntEqqItzffJNSX6xbma7JcWSQw/Y=
Subject key identifier: DB:D8:F0:03:88:F5:11:9C:7A:76:88:7E:F4:7B:BA:F8:35:45:3E:40
Authority key identifier: 03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2
Certificate issuer: /CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
Certificate serial: 01988F590E387AD1A13CD459026A216FA7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
Manifest number: 047C
Signing time: Sat 09 Aug 2025 15:00:34 +0000
Manifest this update: Sat 09 Aug 2025 15:00:34 +0000
Manifest next update: Sun 10 Aug 2025 15:00:34 +0000
Files and hashes: 1: A1mTnOHGqpvru2WA4VbuvYcd87I.crl (hash: 4qQq96cjapHG91RePo8ZQ4pMvu+13ubzM9+l00xZoVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:0e:38:7a:d1:a1:3c:d4:59:02:6a:21:6f:a7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
Validity
Not Before: Aug 9 15:00:34 2025 GMT
Not After : Aug 10 15:00:34 2025 GMT
Subject: CN=dbd8f00388f5119c7a76887ef47bbaf835453e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:81:b9:59:21:b1:ad:5b:65:af:e1:cb:f9:
43:08:60:77:14:ad:5f:db:8d:5a:97:31:eb:58:69:
fe:e7:41:5d:c3:4c:a9:d6:93:79:59:3d:b2:01:79:
f7:f5:83:ca:ca:0b:7a:77:db:e7:23:5d:0a:0f:6a:
ab:4d:87:ef:61:13:da:fc:6e:a0:eb:e3:92:e0:37:
32:e3:5d:bc:a0:c7:0d:71:79:b9:ca:83:dc:b1:05:
fa:51:ff:02:2e:be:71:ed:38:b7:89:20:d8:72:45:
73:30:77:b9:4c:b3:e8:65:55:f9:34:0b:e3:99:3f:
58:1f:17:e0:be:b4:79:c8:9a:3d:71:f0:78:12:76:
41:54:fc:65:58:0b:f6:15:4f:c5:ab:55:19:92:23:
10:aa:0a:17:a9:25:39:1a:14:36:c2:0f:94:d5:1e:
a6:96:89:7f:ff:26:0a:44:7f:41:b3:8e:c4:27:fa:
ec:fd:c0:2e:11:64:82:01:b7:da:10:09:18:a1:cb:
1d:4f:da:50:c4:6f:e0:bc:ac:a6:73:39:91:64:32:
6d:24:30:81:58:33:91:5e:9f:ee:44:4b:df:b1:15:
1e:30:1a:b1:fe:bc:d6:23:2e:0d:a9:64:55:54:39:
77:7b:53:22:b1:2a:a3:0a:e6:38:40:c7:d5:5c:e5:
6f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:F0:03:88:F5:11:9C:7A:76:88:7E:F4:7B:BA:F8:35:45:3E:40
X509v3 Authority Key Identifier:
keyid:03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2b:05:ac:6a:aa:39:ed:6a:42:74:3f:74:24:cb:90:ec:58:
8b:f3:71:3a:c5:5a:2d:e2:de:3d:80:8b:68:ed:68:05:75:b9:
0d:8c:f7:45:8b:ed:81:34:5e:88:67:bc:c9:d0:6d:c4:0f:0e:
7b:c1:f3:a6:a0:4a:f9:28:8a:9f:80:c1:2b:1f:c2:d7:9e:1f:
32:bb:1f:ad:56:cd:37:7c:f9:c6:8c:6c:9d:5c:a8:a2:2f:09:
72:33:7f:12:ed:71:e2:8d:1d:dc:3a:d8:76:0f:56:8d:5d:ab:
62:66:1d:7a:81:15:b5:a5:e1:4d:65:ed:58:22:64:cb:bd:a8:
d6:fe:bc:64:68:70:4d:64:b5:14:20:aa:78:00:4a:1d:1d:e5:
52:4f:6c:e0:4d:23:1f:1f:0b:8d:7b:d4:01:71:ca:a6:4a:1b:
7b:7d:e1:1a:76:e8:ee:94:0b:85:b7:8a:2e:dc:08:7b:0a:f5:
e4:7e:82:fe:d4:ee:dc:ae:6c:ee:b4:0e:51:ab:fa:e6:cb:f4:
55:13:10:1b:9e:a5:89:be:88:2b:fc:eb:0f:f9:69:a7:1e:7e:
69:74:88:4a:89:a7:ce:98:0c:02:c0:d5:42:50:bc:b5:3d:b9:
20:a1:17:9b:2d:8e:43:16:1b:88:2e:5b:66:90:ae:70:66:74:
ad:9d:d9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:21 2025 by rpki-client