Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier: pIH9fTSUN0fT1RisWDtstYXEzibMjFUEWdi7z0yq0DY=
Subject key identifier: B3:87:D2:D0:7F:B5:3B:0E:F4:94:1E:1D:5D:E4:E0:77:16:B8:E1:0A
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer: /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial: 01987B9B9EC9A834732FBDD33E80B76D3D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number: 0C15
Signing time: Tue 05 Aug 2025 19:00:52 +0000
Manifest this update: Tue 05 Aug 2025 19:00:52 +0000
Manifest next update: Wed 06 Aug 2025 19:00:52 +0000
Files and hashes: 1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: 3wiGPfYElqsmh9uIsHTlO1COkyxDobJ2qNDSj7E2+Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:9e:c9:a8:34:73:2f:bd:d3:3e:80:b7:6d:3d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Validity
Not Before: Aug 5 19:00:52 2025 GMT
Not After : Aug 6 19:00:52 2025 GMT
Subject: CN=b387d2d07fb53b0ef4941e1d5de4e07716b8e10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:4b:c3:74:4d:fd:6a:13:27:b5:bf:dc:7f:
60:cd:92:03:dc:1d:0d:97:c8:fa:5e:6d:11:9f:81:
d2:4e:5d:ba:af:45:54:f4:55:af:19:a9:7b:97:a3:
e4:28:27:23:15:da:24:c5:5b:e1:54:3d:7d:e2:07:
68:d1:ce:c5:98:b1:f0:1d:61:39:82:90:6d:b8:60:
f3:85:19:35:f4:fd:60:a5:b2:6e:52:ea:78:8b:05:
e6:da:9a:b1:80:9b:bf:2c:f7:2d:07:e3:d8:d5:3e:
a1:92:c9:8a:fe:c0:f3:ca:38:6c:98:aa:3c:01:7a:
a7:24:5c:d9:ff:78:6e:5d:3e:35:6e:b4:9f:f1:f8:
95:dd:94:4e:d4:e6:32:57:3a:83:9e:0f:42:b0:69:
ad:82:08:18:f8:20:c3:94:01:9f:0c:e5:8b:d9:e2:
89:04:18:14:b1:a3:c6:7d:ba:03:1e:1b:eb:06:d0:
7e:a5:79:f5:d0:fd:05:11:1b:88:70:00:de:9e:f1:
4a:32:b6:b0:a0:3c:9a:b1:31:28:fc:a7:a2:8e:9f:
c1:99:3f:b6:e5:fc:30:0e:d8:a1:0e:59:41:e6:79:
04:a4:ca:17:b0:bf:22:cd:63:ed:e2:6f:ba:40:22:
42:17:2c:d1:66:7e:4a:30:df:05:8a:c0:e5:a2:87:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:87:D2:D0:7F:B5:3B:0E:F4:94:1E:1D:5D:E4:E0:77:16:B8:E1:0A
X509v3 Authority Key Identifier:
keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e3:ac:85:11:66:64:d1:a1:6c:af:cc:b2:21:6a:2d:b2:59:
8e:9a:9e:95:de:33:36:a5:aa:06:1b:33:3d:d2:67:41:ae:6e:
7d:85:18:ab:01:5d:0d:19:1f:55:e5:b1:4a:91:2c:2e:79:11:
a2:e5:57:89:a5:2a:48:9e:f7:38:f5:29:a0:80:86:0a:4b:48:
62:40:73:be:10:63:f8:3e:6a:26:cb:7a:b7:39:b7:8d:1e:9c:
74:d1:e1:fe:ab:b1:cc:2e:1e:00:58:1f:d1:20:bd:02:a7:5e:
ff:ac:7f:e4:31:35:ad:c5:25:ae:72:ed:b8:6b:a2:ad:72:bf:
31:b6:4a:69:44:c3:7f:fe:cf:a5:11:e0:e1:aa:47:e7:17:9c:
24:57:ec:9f:c0:d6:5b:1e:1a:e5:66:7e:5e:ee:a3:fc:98:7b:
3a:e9:82:c5:ce:15:ce:bc:60:f6:9c:26:79:d3:6c:38:d3:70:
a4:ea:82:65:43:79:fe:ea:ef:e8:e2:2c:37:54:12:8b:33:b7:
fc:98:77:41:68:40:11:8a:fb:47:56:8f:0d:f4:ae:d4:5d:52:
65:c6:cf:21:29:aa:1a:9d:df:ce:ee:d5:10:17:9c:aa:48:14:
da:c2:db:c0:f8:63:4c:92:57:13:c5:9c:a8:39:84:b6:c0:98:
f8:ba:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:58:07 2025 by rpki-client