
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
File: D4jGhrHhIvzcFlwCN6D149mQvwE.mft (raw, json)
Hash identifier: ijq4q5LoqgdOrlg72lozYE32yfj7CiKTMFWlygLn3aQ=
Subject key identifier: A1:F9:6E:2A:5A:1B:F8:5F:2F:AC:D3:E2:8D:D9:EB:CB:07:35:F2:AF
Authority key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Certificate issuer: /CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Certificate serial: 01987B9C47B58D4755EEF83BEA68C2EC0F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
Manifest number: 0BC8
Signing time: Tue 05 Aug 2025 19:01:36 +0000
Manifest this update: Tue 05 Aug 2025 19:01:36 +0000
Manifest next update: Wed 06 Aug 2025 19:01:36 +0000
Files and hashes: 1: D4jGhrHhIvzcFlwCN6D149mQvwE.crl (hash: ujp91RuVxkgvo0JnrAsuyXGXnoR6Kr6uH2qQ+mTNmWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:47:b5:8d:47:55:ee:f8:3b:ea:68:c2:ec:0f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Validity
Not Before: Aug 5 19:01:36 2025 GMT
Not After : Aug 6 19:01:36 2025 GMT
Subject: CN=a1f96e2a5a1bf85f2facd3e28dd9ebcb0735f2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:be:04:6e:02:fe:89:fa:ff:8e:ed:27:db:
90:f3:f6:25:e2:bd:0e:96:52:dd:5d:58:ec:73:aa:
a4:c0:69:4f:74:5b:56:33:cf:dd:d2:22:a3:5d:b0:
49:63:e6:d4:11:fa:81:b5:b9:e5:86:e8:20:f9:2f:
9e:ab:27:e7:ad:54:f4:63:d9:26:67:dd:0c:cb:43:
24:a7:a6:11:37:6a:5f:57:91:3c:36:c5:5d:41:a1:
d5:2b:dc:81:20:63:5f:2a:7c:6f:a4:47:2e:f8:73:
59:23:fc:3b:bf:4e:2a:96:74:3b:de:40:a7:d0:3c:
ef:e6:7b:d4:9e:58:5a:ce:31:3c:db:aa:4e:99:d3:
3d:e2:e7:b6:04:d8:01:aa:86:ef:86:f4:c4:e7:89:
42:22:d4:23:0a:d3:0f:f9:a2:2f:2a:8f:0e:4e:8a:
b3:91:2d:e3:3d:62:52:e5:65:dd:85:07:a2:1d:7d:
bc:c6:66:83:e2:99:40:ca:c4:b7:7c:48:f6:f5:63:
83:ef:1f:6b:e6:0a:0e:51:b4:86:bc:29:aa:ad:49:
fd:cf:8a:53:20:ba:91:6f:b4:8e:e5:da:be:b9:d4:
81:be:6d:62:f8:81:59:e6:53:5c:a2:f4:0e:01:d5:
a6:af:bd:b3:e0:d4:0f:5b:8f:db:b2:05:41:5d:36:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F9:6E:2A:5A:1B:F8:5F:2F:AC:D3:E2:8D:D9:EB:CB:07:35:F2:AF
X509v3 Authority Key Identifier:
keyid:0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:19:84:86:4d:65:ab:4f:36:d8:a6:20:23:1f:6b:f3:43:da:
8a:36:c3:99:92:a3:23:6d:75:65:0d:8b:02:de:85:3b:7f:60:
06:91:e2:ca:b7:0e:c7:ea:7e:03:c2:17:f8:b1:c4:10:0b:f3:
5b:dc:02:97:b4:32:91:19:f5:0b:23:b4:6c:32:13:ee:fe:09:
e9:d1:fc:18:a1:b7:e5:b9:b5:63:69:b1:5a:54:2f:e5:7f:d0:
36:b5:17:b7:ce:b0:1c:84:70:34:69:75:ab:23:50:6a:71:b3:
8b:a6:b2:c6:70:c2:e9:c8:e6:0b:6c:72:be:33:aa:f8:a5:72:
26:15:dc:69:78:d5:9d:58:a2:98:11:da:f6:e6:89:62:a4:a8:
34:41:6a:fd:f9:89:18:47:2b:23:08:79:2a:be:03:af:a8:95:
e0:92:04:d2:73:05:f0:ee:e8:38:09:dd:13:b2:02:bb:85:89:
1a:65:54:95:03:ea:32:51:2b:58:2b:59:ed:a4:16:f1:d4:a1:
e6:97:dd:d9:14:26:71:aa:78:ba:c7:4a:00:b2:a5:29:59:b2:
e6:71:3a:17:3d:3a:28:50:82:48:f4:99:01:42:94:c8:ed:f4:
05:68:4f:d0:75:c2:2d:e0:d2:2d:80:52:98:3a:c7:ad:d6:bc:
42:4f:e2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:55 2025 by rpki-client