
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: TCUNif0RFCD4GbpWBquUHl4Pm5bovL84sb8pvbMzbdQ=
Subject key identifier: 51:66:72:F4:43:37:6D:C2:82:27:3D:9E:5C:36:F8:CA:86:87:38:6A
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 019880C24D7F0DF7999C685367B82380D080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 1341
Signing time: Wed 06 Aug 2025 19:01:14 +0000
Manifest this update: Wed 06 Aug 2025 19:01:14 +0000
Manifest next update: Thu 07 Aug 2025 19:01:14 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: 0QH/UuCz9aQUBQiIkXzvvBQYP8rqgecyyB+D4Ut+KlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:4d:7f:0d:f7:99:9c:68:53:67:b8:23:80:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Aug 6 19:01:14 2025 GMT
Not After : Aug 7 19:01:14 2025 GMT
Subject: CN=516672f443376dc282273d9e5c36f8ca8687386a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:38:60:9d:b4:c0:88:b5:62:7a:0c:98:86:
a3:fd:09:91:29:c4:1d:8b:0b:92:60:0c:37:23:73:
ab:58:3e:e3:51:05:a6:68:98:54:d1:43:00:fa:bf:
00:ae:e9:e0:89:01:2e:5d:3c:95:d4:c7:7f:da:b7:
c7:76:2d:18:18:ba:6a:c4:91:19:88:a8:83:36:f2:
23:43:a0:b6:2b:7a:9a:92:fb:d2:d1:40:4e:82:35:
b6:f3:5d:fa:e6:18:f8:f6:65:89:31:27:27:72:06:
14:a5:76:fc:2d:9f:02:27:73:76:eb:a9:3a:87:0f:
b7:c3:29:57:7d:8c:a3:50:dd:53:63:bc:66:f5:1b:
20:3e:85:36:0b:18:46:be:41:78:16:e8:4a:58:97:
8d:bb:c1:fa:66:7a:25:7c:cc:0e:60:7d:19:e3:03:
89:6d:21:02:a5:21:58:9c:ce:ab:98:dc:11:29:26:
76:a4:d1:4d:d8:2e:f1:e0:39:b8:6f:27:cc:02:fd:
4a:02:b6:7d:a1:59:30:23:e2:f1:16:66:41:20:c4:
45:7a:d2:ab:1a:6d:3b:5d:72:8f:80:cc:22:ee:90:
43:38:de:18:b4:40:d4:98:ea:a5:5e:e2:13:77:35:
c5:da:d1:e8:e7:d7:d0:07:4a:e2:d1:0e:6d:fb:df:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:66:72:F4:43:37:6D:C2:82:27:3D:9E:5C:36:F8:CA:86:87:38:6A
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:00:fc:94:92:a1:0d:be:0c:63:bc:3a:46:3a:86:0f:09:5f:
99:f6:10:bf:7e:0d:fb:7f:0f:a2:a7:ac:68:d9:ef:69:d4:fd:
88:73:09:58:a5:00:51:90:93:85:a1:47:04:85:45:7a:a8:82:
fc:29:0e:90:0b:db:30:69:e9:d3:30:9e:0a:78:ee:8c:4f:64:
21:0d:38:84:25:21:c0:c6:26:f2:70:3b:cd:02:49:e3:8b:f2:
f3:de:f4:25:9d:4f:c1:7f:4b:f5:f1:f2:3d:e8:c5:e5:12:f7:
a4:21:cf:7c:56:75:16:6f:1f:9f:bf:9d:9a:54:d3:5c:1e:ca:
5b:6e:48:07:32:90:d7:4d:ae:7a:c2:d0:b8:ef:5c:52:5c:b0:
0e:18:b2:ec:26:c3:f4:e7:9e:8a:d6:c4:5a:10:f2:98:85:35:
26:b2:de:c5:ca:b0:86:b9:5d:75:7b:f9:78:e5:84:47:69:45:
f1:95:cf:44:96:4e:88:1f:7b:ad:49:9c:e4:e6:ae:ea:00:b8:
b4:3c:95:f2:0d:19:bd:bf:ac:8a:ac:38:60:f5:25:83:8f:50:
5c:cf:4a:c0:d0:e5:b0:f6:06:1c:77:f5:a9:0a:27:77:89:0d:
87:a4:fc:7d:83:6f:85:d8:cf:e1:20:3e:9f:90:e3:ca:09:59:
7b:bb:32:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:29:57 2025 by rpki-client