Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json)
Hash identifier: MOh5oA+sIIFVotkLrG6SKxT90YCSIIfvJBcc8y3iI4E=
Subject key identifier: 40:51:8D:59:59:6D:31:DD:C3:5D:B1:F4:A1:06:C0:9C:8A:F3:D7:15
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 019896003E22885383FA58596D1C8070D7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
Manifest number: 162A
Signing time: Sun 10 Aug 2025 22:00:54 +0000
Manifest this update: Sun 10 Aug 2025 22:00:54 +0000
Manifest next update: Mon 11 Aug 2025 22:00:54 +0000
Files and hashes: 1: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: 0+bWgra9k3kuEuMoLcbcDPovP9pRSJKIHv9DzwiuZ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:3e:22:88:53:83:fa:58:59:6d:1c:80:70:d7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: Aug 10 22:00:54 2025 GMT
Not After : Aug 11 22:00:54 2025 GMT
Subject: CN=40518d59596d31ddc35db1f4a106c09c8af3d715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b9:3c:70:ea:93:ca:ad:4b:c6:bb:76:5e:17:
72:a9:22:8e:77:a8:ac:ef:7d:3e:50:03:e8:0c:d4:
50:83:2b:bd:1b:95:d5:8f:6a:18:dd:6c:85:e0:e0:
40:cf:08:92:6f:ce:20:5f:65:59:b7:5e:22:db:bb:
b9:18:79:2d:4f:76:e2:bd:d3:01:a6:f8:32:c7:8d:
fb:9c:3f:92:4b:48:b6:74:0f:6a:a2:80:41:de:7c:
c0:32:3f:7d:57:77:20:db:d8:36:37:40:f9:09:c6:
52:91:10:c5:a0:f2:1d:25:e1:79:4b:57:97:c0:9b:
08:cd:f8:4a:79:0e:e6:50:6b:99:3a:ce:f4:05:31:
41:8f:4d:b2:14:77:5c:e1:44:c1:90:1b:93:6f:ff:
92:d1:0e:31:1e:db:38:f8:9a:c2:a0:0d:50:11:ae:
d6:ef:7c:8f:4e:e4:f9:a9:b4:18:af:70:a8:0a:63:
bb:ed:02:b6:9f:f8:17:ce:7e:04:eb:d8:4b:37:09:
98:c1:dd:61:83:fb:34:ec:46:9f:78:9a:2e:80:2b:
48:34:30:3b:cf:2c:b0:d6:09:f4:35:75:80:ed:86:
ba:24:c4:cf:ba:23:fb:b6:28:90:ae:94:49:09:ed:
7b:e8:41:fd:57:89:5b:19:6b:0a:5f:8c:fb:1c:d7:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:51:8D:59:59:6D:31:DD:C3:5D:B1:F4:A1:06:C0:9C:8A:F3:D7:15
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:da:88:30:36:f5:15:9d:27:e9:4c:8f:49:38:17:49:ee:5c:
93:be:a7:db:1a:81:d8:43:8d:a6:3f:cc:43:9c:75:12:e8:50:
27:59:f7:61:3d:e7:8f:26:4f:dc:79:a6:5b:21:e3:81:e2:bd:
39:43:64:cd:56:54:29:b0:1d:4c:8f:6d:dc:2d:7b:7a:a6:07:
9f:62:19:ba:7b:89:58:1b:82:36:e3:aa:58:2a:38:03:bf:9b:
7d:02:a4:91:0b:49:ae:40:39:09:b5:3e:ce:21:b1:e6:cc:47:
46:a9:f0:54:fd:aa:82:24:dd:e4:b3:29:dd:09:6d:77:c5:85:
14:9c:1d:44:29:2e:38:d4:e6:7c:28:46:bf:81:ba:06:0c:06:
b5:b2:3b:e3:88:4c:1b:e9:3b:f2:5b:f6:d6:e7:17:10:0b:e1:
80:01:ca:e0:01:52:c8:c0:a6:21:53:be:a1:b8:dc:b6:ba:ad:
9a:d2:c2:ab:a7:74:37:6b:bd:31:bb:d2:1e:81:38:77:70:06:
30:9d:65:14:c4:c6:ec:d1:55:84:ad:97:f2:95:97:9a:7a:9d:
13:79:dd:e6:92:dc:14:ee:14:82:1e:05:1f:96:ce:82:a3:b4:
e6:95:07:be:e2:fe:a4:8f:84:f8:a6:1d:18:a8:cc:a7:ea:c1:
f4:48:7e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:03 2025 by rpki-client