Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
File: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft (raw, json)
Hash identifier: NaBbRt0LdDREHT9nfw/N348O8A3J1gCP451Uw0tSLZ0=
Subject key identifier: 38:36:98:BE:56:C3:40:04:08:E2:C7:3A:84:3D:F2:38:FD:21:E2:B4
Authority key identifier: D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
Certificate issuer: /CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Certificate serial: 019895248B8744EE7C7B9718E66E6527B513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
Manifest number: 0CD2
Signing time: Sun 10 Aug 2025 18:00:56 +0000
Manifest this update: Sun 10 Aug 2025 18:00:56 +0000
Manifest next update: Mon 11 Aug 2025 18:00:56 +0000
Files and hashes: 1: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl (hash: JOGP/iTSArE83dgf3273FvwxnDFdlGLet2czo/frWHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:8b:87:44:ee:7c:7b:97:18:e6:6e:65:27:b5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Validity
Not Before: Aug 10 18:00:56 2025 GMT
Not After : Aug 11 18:00:56 2025 GMT
Subject: CN=383698be56c3400408e2c73a843df238fd21e2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:5f:1d:b5:e8:60:c1:e7:41:a2:b0:16:57:
cd:24:bf:79:df:80:41:93:31:22:1e:a9:29:71:a8:
59:1b:77:a0:4d:c9:0d:3a:d8:41:e4:b1:60:b5:02:
49:1d:7f:a9:d8:ec:63:07:02:4f:a9:07:bc:53:26:
25:ee:86:26:a7:c8:d9:53:c1:ef:c8:c5:01:b0:02:
0c:75:43:34:92:f5:8a:20:95:8f:6d:c7:57:cf:2c:
d9:cf:f3:ed:22:32:82:37:97:86:f6:6c:05:97:04:
8c:a2:e3:ab:a4:f1:6b:13:b3:a6:fd:4f:03:aa:7a:
20:e2:aa:4d:8e:10:27:bf:c0:2f:a7:c6:3a:11:32:
49:7e:67:bc:68:22:e7:fc:11:aa:cd:c6:96:94:6e:
fa:1d:14:51:5b:6d:09:1f:a8:27:c2:d3:1d:92:3b:
47:88:b6:cb:e8:17:61:0a:1e:1b:37:7d:fc:4e:da:
09:6d:1c:9e:87:f2:a2:fe:7e:ef:ce:1c:72:05:f8:
12:08:b1:c6:63:a7:78:d2:4d:f1:d0:9b:88:4a:b0:
6f:84:61:01:11:d0:22:eb:27:a8:d7:ad:74:7a:6d:
ae:75:f3:8a:ca:e0:86:5a:cb:c0:b3:25:51:2e:27:
0f:a5:14:01:50:2a:75:91:a3:b7:e0:8a:3f:e9:5c:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:36:98:BE:56:C3:40:04:08:E2:C7:3A:84:3D:F2:38:FD:21:E2:B4
X509v3 Authority Key Identifier:
keyid:D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2d:5e:00:ad:f2:25:d8:a4:d8:91:e4:35:de:71:8c:7a:c3:
1a:51:d6:dd:dd:7e:c4:32:05:ad:7f:0d:18:62:b8:8d:9b:86:
e8:90:4a:6b:53:9a:13:c0:d0:ce:0c:ac:f0:6e:13:53:6d:7a:
ab:b9:59:2e:f1:b4:a1:e4:56:ef:fd:c2:77:48:04:0d:8f:3d:
0c:45:3a:13:22:01:d3:1d:bd:ae:b3:c4:55:6e:f0:1e:3d:e2:
c9:f3:76:4a:d5:97:71:ad:26:b7:57:b6:4f:28:5c:e0:11:06:
e1:e3:7b:41:22:87:2d:ef:59:c5:aa:af:22:88:47:14:35:d1:
8e:66:82:97:b3:53:c4:92:8d:2d:3e:94:d3:90:ee:de:be:e4:
83:43:71:f5:6a:1b:5a:a2:17:83:94:20:8d:66:c5:12:3e:49:
cb:42:da:7b:f3:7d:3a:d7:32:0e:33:03:24:40:af:3f:11:a4:
06:f6:70:26:53:8a:d1:a5:c8:1e:69:8f:94:05:98:7d:e9:90:
cd:f2:be:0f:ca:de:ca:70:32:9b:6a:e5:6e:d6:71:2c:77:96:
5d:46:fe:63:89:05:b9:9b:48:25:5e:10:73:c1:a8:aa:ec:10:
81:f5:95:ea:b0:c2:a6:8b:39:76:bb:11:a1:46:da:67:9b:75:
24:49:f2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:55 2025 by rpki-client