Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier: cKyNt41YFB7uNwwIQbfdt9zd/Oi2rJ5xmzd7vNTZbt8=
Subject key identifier: EA:A2:96:A8:E2:A5:9D:C4:31:57:54:1A:13:9C:DC:E5:AB:7A:4D:21
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial: 0198955B46CF5DAE69183D0FD269E1DDDFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number: 0999
Signing time: Sun 10 Aug 2025 19:00:43 +0000
Manifest this update: Sun 10 Aug 2025 19:00:43 +0000
Manifest next update: Mon 11 Aug 2025 19:00:43 +0000
Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: d5TEJ99omBzFpeHA8D4HX4myv45WF6OWm2i8U9PZ03E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:46:cf:5d:ae:69:18:3d:0f:d2:69:e1:dd:df:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Validity
Not Before: Aug 10 19:00:43 2025 GMT
Not After : Aug 11 19:00:43 2025 GMT
Subject: CN=eaa296a8e2a59dc43157541a139cdce5ab7a4d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:33:95:cf:f1:ef:fc:b1:7a:b4:e3:74:57:07:
17:87:75:ab:bd:1b:a6:af:e3:12:a8:e2:1e:f6:f9:
af:36:2c:48:84:aa:55:a8:d9:cc:e6:12:96:be:40:
08:17:f3:c0:1f:62:bd:ea:3a:bd:b7:53:11:c1:de:
48:a9:73:0f:a0:a8:a9:ad:f4:c9:26:3e:99:5c:73:
77:68:fe:dc:a9:67:3b:48:8a:49:23:b1:0c:f7:37:
da:d3:59:80:25:8f:f0:21:51:8f:d4:b1:64:2e:ec:
24:a1:f8:e7:01:e7:86:4e:e8:9e:6f:65:48:b4:6b:
38:a4:f6:43:c7:64:69:17:b1:a9:72:1f:ad:fd:dc:
cf:01:3a:ee:20:82:3d:46:e8:0a:cf:a5:48:35:bf:
9a:f4:89:90:12:aa:56:29:03:af:cb:df:32:55:06:
d5:df:c7:07:83:a2:4a:7a:e7:0a:0c:18:e5:57:d0:
8a:ea:4d:ee:a3:72:50:d9:c9:a2:d4:ba:57:52:cf:
d6:c0:74:ec:43:a8:e1:ca:d3:bb:03:6a:28:cb:a8:
3f:c6:26:25:5f:6f:cd:74:b5:b4:37:bd:66:c4:14:
46:81:53:6c:93:38:93:1e:73:6e:a8:d5:98:54:4d:
9a:0a:73:40:ef:3f:17:45:23:fb:39:43:9e:7d:f1:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A2:96:A8:E2:A5:9D:C4:31:57:54:1A:13:9C:DC:E5:AB:7A:4D:21
X509v3 Authority Key Identifier:
keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:57:40:34:ba:84:cb:59:42:97:4d:fb:88:3e:b0:1a:69:71:
ba:59:6f:a1:d5:0b:41:f2:ea:3a:27:59:ad:f8:9f:8b:ac:13:
25:c5:c1:61:de:3f:40:65:05:54:33:0e:f5:b6:05:b3:ca:24:
0a:22:55:21:8a:7a:0b:33:88:ac:2b:3c:8b:4b:5b:a8:1c:8f:
10:9c:c5:a9:ea:3a:be:e9:63:a6:05:7e:0e:86:67:16:3a:7a:
3f:03:d4:e5:65:4c:3b:8c:a7:c1:87:c3:f9:a3:f7:e3:c2:0f:
49:c1:b1:3b:a6:1c:6d:16:a5:7c:45:cd:78:ae:e6:ad:f7:ef:
b6:ff:ca:c5:92:83:91:b1:3e:f8:fd:93:25:78:60:87:52:47:
cc:c4:8a:1e:99:e9:80:d9:df:8d:26:17:09:46:b1:26:a7:b0:
4e:ea:87:ba:3f:bb:c5:78:5e:5f:5a:22:9f:9c:da:30:fc:bf:
0c:aa:63:7b:4c:56:d5:33:be:8e:c3:e6:09:d2:34:29:18:6a:
3d:a1:65:55:61:bb:2d:17:49:8c:62:a0:35:9f:2c:13:7a:bc:
37:2f:ac:8b:86:18:6d:02:fa:11:9c:44:3a:0d:e0:99:86:a5:
2f:b1:e1:0f:5d:a2:9a:dc:aa:a6:c5:d9:2d:4f:38:e1:1a:3e:
4e:fe:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:14 2025 by rpki-client