Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
File: dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json)
Hash identifier: QZQ5R4MQF4ORGOQE4P0ppkUTAqttKmS2LJ/chEt6quQ=
Subject key identifier: 45:FA:DD:13:C1:9F:83:A0:FE:FD:C8:F1:DC:AF:66:40:59:60:B5:2A
Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
Certificate issuer: /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Certificate serial: 01987D89F12DB6BA609BDA77718124651B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 04:00:48 +0000
Manifest this update: Wed 06 Aug 2025 04:00:48 +0000
Manifest next update: Thu 07 Aug 2025 04:00:48 +0000
Files and hashes: 1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: 4i+4U6+W9R0U7SX/NFwuBLuMPg1KRhPuyRC565VgA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:f1:2d:b6:ba:60:9b:da:77:71:81:24:65:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Validity
Not Before: Aug 6 04:00:48 2025 GMT
Not After : Aug 7 04:00:48 2025 GMT
Subject: CN=45fadd13c19f83a0fefdc8f1dcaf66405960b52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:f8:89:94:16:8d:79:3b:48:cc:fd:aa:ce:
a1:4d:5d:3e:1c:e4:69:b6:33:14:0a:dd:38:d0:f6:
58:a0:44:25:2c:31:d1:71:39:cf:92:fc:f8:75:c4:
88:dd:74:4f:d0:43:7e:5b:3a:12:39:6d:e3:db:58:
20:40:d8:40:f0:64:d4:bf:7b:de:b4:47:dc:77:54:
c1:68:44:ae:6d:c7:e5:cf:3f:a8:ff:82:fa:52:de:
9a:1a:7c:72:67:1e:ac:f4:c8:e0:08:be:8a:87:bd:
0c:ca:f8:d0:3e:3b:79:f3:79:70:d1:0a:ed:b8:14:
a6:01:27:3f:9e:32:87:34:be:54:61:9d:41:f1:02:
a6:5e:35:08:9f:eb:28:ab:51:b5:bc:8b:3e:1a:c4:
2a:33:71:e5:76:16:2a:38:c6:73:58:84:66:2e:4f:
c8:59:8f:b8:69:32:0c:60:9f:d8:9f:88:37:c4:21:
62:4b:a3:18:02:bb:05:30:7f:03:30:dd:1d:df:fd:
80:4f:56:72:60:8e:e6:52:be:3c:e4:e0:c9:76:66:
d3:e8:fa:eb:0e:a2:af:60:f0:a6:38:e9:97:77:c8:
e5:b5:99:1a:05:6a:9c:53:ff:3d:00:67:ba:ed:59:
29:99:09:60:d5:ba:e9:7c:7e:14:12:22:81:72:ce:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FA:DD:13:C1:9F:83:A0:FE:FD:C8:F1:DC:AF:66:40:59:60:B5:2A
X509v3 Authority Key Identifier:
keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f1:db:ec:3a:77:db:45:0c:a7:15:11:7a:d2:f7:4d:f6:8f:
0b:82:52:10:2a:b8:f6:d3:71:6b:a2:04:18:f8:c9:6d:6b:de:
61:28:07:36:18:f5:77:fb:d2:e7:a6:a1:32:13:f3:03:27:72:
ba:87:66:c2:e6:67:ef:14:90:24:ea:f9:f0:8c:38:e3:b2:d0:
83:64:84:a6:9e:9a:3f:98:0e:e2:72:35:94:6d:ab:1d:3e:59:
c2:f8:9f:a6:72:33:14:72:46:7a:1d:e1:a6:61:33:54:26:1b:
98:d6:d7:52:e0:d6:71:32:2e:fa:89:5a:10:7e:27:34:c9:4c:
5d:c5:8c:b2:8b:d9:48:9d:b6:8b:f5:0c:87:d4:89:ae:94:8e:
c8:bc:61:cc:47:b1:09:44:be:d5:ee:9d:c7:02:f6:04:e0:43:
3e:3a:64:ed:e6:25:ee:02:c9:d8:d5:bf:b1:36:e5:7c:5a:98:
6a:2d:61:b0:12:b7:83:47:22:1f:81:27:d1:d4:c9:96:e5:b7:
3c:bb:0c:cc:2b:64:ec:08:64:ed:07:2a:61:b7:b3:73:f2:a3:
df:a8:62:01:b6:d1:af:9f:4a:7f:d3:57:55:aa:d3:e9:a1:85:
17:d0:de:ce:b7:03:47:97:da:15:75:1f:4a:bc:05:31:a4:d0:
bb:81:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:24:11 2025 by rpki-client