
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
File: V25aWVM8ptDwtIgH0Md-FWhgTl4.mft (raw, json)
Hash identifier: p7o+BcvAGCrDutIx+KYgdCGKfEPOn/wFodjbmH7Pbbw=
Subject key identifier: 2A:6D:2F:51:A5:CF:AB:9D:11:C3:DD:5E:50:72:36:62:EE:5C:AE:31
Authority key identifier: 57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
Certificate issuer: /CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Certificate serial: 019881D544E7AFC5C3536BF7D4FC73D6FBCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
Manifest number: 065F
Signing time: Thu 07 Aug 2025 00:01:34 +0000
Manifest this update: Thu 07 Aug 2025 00:01:34 +0000
Manifest next update: Fri 08 Aug 2025 00:01:34 +0000
Files and hashes: 1: V25aWVM8ptDwtIgH0Md-FWhgTl4.crl (hash: 89uaEK1f3m+DM9SpAyCy9rPFHYVeFTuz1z6cJu4AvyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:44:e7:af:c5:c3:53:6b:f7:d4:fc:73:d6:fb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Validity
Not Before: Aug 7 00:01:34 2025 GMT
Not After : Aug 8 00:01:34 2025 GMT
Subject: CN=2a6d2f51a5cfab9d11c3dd5e50723662ee5cae31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:1a:b7:22:30:70:54:b5:ac:0d:24:7d:62:
6c:91:10:9a:02:4b:4c:20:fd:4a:ff:a7:89:f3:20:
27:06:1b:14:fe:fe:7c:6e:04:90:c6:91:e4:cc:fd:
c7:c1:40:e8:55:c8:6d:85:0f:eb:31:71:f4:c0:b4:
d9:36:3d:c1:0c:2c:d6:0c:36:23:6c:ef:cd:c1:21:
95:c0:4d:38:af:bd:34:ad:b6:75:32:a5:1a:86:95:
06:60:5d:ea:56:94:6c:b7:9b:6c:aa:d4:5a:91:9e:
dc:93:62:ae:5e:d1:2d:5a:8e:07:09:8c:d4:89:a5:
0d:e0:db:b8:12:8c:ca:61:ab:c2:72:3d:db:f2:8d:
5d:00:9d:aa:b4:e4:37:f0:b8:f7:0d:2d:e1:ae:89:
2d:a6:cc:10:3b:4f:3e:68:f8:d8:8e:b6:8e:47:ec:
44:da:7b:21:d2:7b:0a:6b:bb:af:49:cb:b5:90:04:
7b:27:74:1f:c7:80:c4:a5:a5:3f:ad:47:5e:73:84:
0b:ab:97:97:d3:f4:d4:bd:9d:dc:b7:92:22:49:e7:
44:b0:70:fc:18:5b:20:96:66:e1:f5:87:77:fa:4b:
1b:62:77:b3:96:f7:2d:38:38:ad:1e:84:ae:13:5f:
c3:aa:4a:a4:49:4a:dd:2d:7d:22:53:a6:69:e2:93:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:2F:51:A5:CF:AB:9D:11:C3:DD:5E:50:72:36:62:EE:5C:AE:31
X509v3 Authority Key Identifier:
keyid:57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a1:90:f5:f6:ff:a8:51:df:28:ba:8f:c0:04:69:c6:c8:0d:
4a:5d:83:0b:83:f3:5e:56:e1:2c:a3:04:71:b2:8c:fe:56:60:
f3:15:dd:e3:f7:0a:7c:a3:dd:7c:22:43:80:a8:96:a6:8a:0b:
d4:bf:dc:b9:3e:39:cb:18:2e:bd:ba:00:92:de:5f:ca:ae:77:
0b:30:cb:0a:fc:b7:bd:a4:2d:84:53:c5:c0:87:b1:bf:74:d9:
71:3c:84:10:13:4a:63:ec:e4:a7:9b:ab:48:9b:08:69:1e:1b:
1d:63:5a:4d:2f:87:99:e7:6e:d6:9d:84:59:da:ea:85:85:3c:
b9:cc:f0:7a:c4:53:e1:0c:42:e7:bb:79:56:da:5b:77:c1:c2:
66:47:b8:f5:b2:4e:05:e5:7d:da:48:b1:91:72:9d:c5:4e:5f:
a1:cb:68:e2:c4:e5:3a:bb:b0:b3:45:29:42:68:07:6f:93:d0:
35:5a:8d:d0:91:01:be:65:02:d2:d5:91:f6:18:ca:2d:fd:d0:
81:1f:1f:55:ce:66:f8:88:a6:ae:a9:85:0d:22:7c:39:02:8b:
60:1b:0a:5a:d4:40:96:aa:1d:5c:24:93:f9:7f:77:2b:f0:40:
11:bb:ec:81:36:fc:db:ae:22:ee:95:17:82:c7:09:e6:ff:e0:
8e:df:a6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:01:49 2025 by rpki-client