Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
File: s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft (raw, json)
Hash identifier: xTB+m6mO6U9cjzDHYVEmtKIKhsRlI62xUeaoFAjc9tM=
Subject key identifier: F5:6D:9F:A4:C3:E3:52:05:79:7B:B5:B7:2B:8D:45:0E:72:AF:41:E7
Authority key identifier: B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
Certificate issuer: /CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Certificate serial: 019885E843CC6E53DA932B2AB610D1DDE5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
Manifest number: 0C3E
Signing time: Thu 07 Aug 2025 19:00:47 +0000
Manifest this update: Thu 07 Aug 2025 19:00:47 +0000
Manifest next update: Fri 08 Aug 2025 19:00:47 +0000
Files and hashes: 1: s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl (hash: xO9EQIcnEAhyLH/wnHmj6TXSkwBOAPT9V1A0ZD49+9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:e8:43:cc:6e:53:da:93:2b:2a:b6:10:d1:dd:e5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Validity
Not Before: Aug 7 19:00:47 2025 GMT
Not After : Aug 8 19:00:47 2025 GMT
Subject: CN=f56d9fa4c3e35205797bb5b72b8d450e72af41e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:5d:29:03:83:75:85:b7:c2:d1:03:f0:56:
c1:e4:b4:62:f5:71:28:43:a2:53:2a:13:a9:60:4b:
08:8d:10:be:9b:40:a0:b3:84:4b:bf:a7:0b:07:fe:
b8:fa:27:0a:a9:08:22:5f:47:1e:b7:33:c4:97:f6:
e4:d4:5e:06:f4:05:0a:2a:89:c6:bd:48:ee:86:b2:
3e:ce:bb:6e:fc:33:76:8d:63:c4:fd:09:9b:8d:88:
33:51:e5:0e:86:ad:10:a0:47:59:51:31:0f:bd:93:
0d:c8:35:7e:bb:59:8a:09:c7:af:ea:46:b5:1f:9c:
15:00:d9:7d:76:88:8d:32:64:8c:ab:57:2c:e5:ef:
b6:9c:61:3c:57:dc:dc:07:23:c2:ed:1c:4e:0f:62:
0c:36:dc:8b:6c:ca:3e:ba:e6:5d:b8:54:f5:08:c5:
fe:81:2c:fc:04:23:58:e7:61:0c:9d:e0:39:7e:09:
db:5e:21:e4:76:67:88:d8:d3:33:ed:15:70:73:ac:
4b:06:ba:44:20:67:fb:e2:eb:77:51:d4:52:17:ec:
34:6f:4f:40:28:47:ee:8a:27:53:62:54:8c:30:28:
13:d9:77:ff:b8:55:4c:e1:74:0f:9c:d0:24:ff:d7:
c8:ae:f4:44:f0:e1:fc:98:0e:c7:ed:e4:38:89:da:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6D:9F:A4:C3:E3:52:05:79:7B:B5:B7:2B:8D:45:0E:72:AF:41:E7
X509v3 Authority Key Identifier:
keyid:B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:db:9d:cf:37:e0:4d:0b:8a:6d:8e:e8:9b:76:ef:b1:6f:95:
aa:d9:b3:2f:a7:33:f4:c1:59:2f:2b:18:a7:41:0b:4c:58:8c:
df:15:91:eb:53:8a:b8:2a:b4:71:af:61:49:54:2a:e0:f1:94:
9c:3f:fa:67:7a:19:1c:2f:ff:f1:4f:4e:d4:34:e3:4c:68:35:
0f:33:f4:c3:0d:c1:c9:61:ab:73:4b:e9:0b:5e:c4:29:b4:4f:
63:79:65:97:f3:e9:4d:ae:e8:ab:00:8b:da:31:7f:54:fb:9d:
3f:a3:86:16:9a:36:a3:bd:78:4c:d2:ad:32:c9:11:d0:90:78:
07:fb:e6:d0:7a:3f:3a:13:75:00:cd:8e:0a:f1:69:06:8b:45:
58:f7:23:b7:b0:cf:18:98:39:c8:98:f1:b5:ea:ab:34:d3:be:
00:50:23:ec:e2:21:0f:47:4b:48:21:cf:19:79:09:28:16:44:
4b:0f:cf:58:eb:2e:18:ec:ab:04:10:cf:e5:aa:7e:be:e2:1a:
1e:58:5b:37:12:30:26:f3:e3:a5:94:cc:9a:8e:3c:7a:b0:ef:
44:d8:a0:6e:33:66:72:90:83:df:e3:84:48:04:c2:4b:62:c2:
f8:ad:87:02:7d:ee:d8:a7:6c:4a:cc:d3:3d:fd:f4:83:22:89:
0d:e4:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:47:20 2025 by rpki-client