Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
File: D2HrqF8lrXvk2foP9UUoqUorNjc.mft (raw, json)
Hash identifier: cwUS478X748D9NEj2/Ar7k+JqxdLpb8AzGSPynrxDQA=
Subject key identifier: A4:76:3E:16:FD:97:AC:A0:17:8F:B3:22:31:D5:61:96:83:3D:71:02
Authority key identifier: 0F:61:EB:A8:5F:25:AD:7B:E4:D9:FA:0F:F5:45:28:A9:4A:2B:36:37
Certificate issuer: /CN=0f61eba85f25ad7be4d9fa0ff54528a94a2b3637
Certificate serial: 019881D5168B3CA1E051513E0461AC2E53EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2HrqF8lrXvk2foP9UUoqUorNjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
Manifest number: 018D
Signing time: Thu 07 Aug 2025 00:01:22 +0000
Manifest this update: Thu 07 Aug 2025 00:01:22 +0000
Manifest next update: Fri 08 Aug 2025 00:01:22 +0000
Files and hashes: 1: D2HrqF8lrXvk2foP9UUoqUorNjc.crl (hash: beRxXw38BSgUHA1jpgP0OMVf8jAoa6G6KmRLQmZfXeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2HrqF8lrXvk2foP9UUoqUorNjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:16:8b:3c:a1:e0:51:51:3e:04:61:ac:2e:53:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f61eba85f25ad7be4d9fa0ff54528a94a2b3637
Validity
Not Before: Aug 7 00:01:22 2025 GMT
Not After : Aug 8 00:01:22 2025 GMT
Subject: CN=a4763e16fd97aca0178fb32231d56196833d7102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:dd:9c:01:d8:58:a3:7f:b1:bc:11:e1:a0:
b3:56:48:4f:99:92:2c:51:f9:cb:69:ba:32:3b:85:
8c:32:96:6c:bf:45:88:3e:44:75:a9:81:c7:7c:0c:
e0:44:99:56:8f:7b:9c:be:36:22:48:5a:90:8d:65:
b0:97:91:58:2a:24:44:d8:5d:fe:98:d0:ff:7d:9f:
04:11:d8:a0:39:e8:b0:92:55:27:99:29:e5:f3:e1:
b7:f9:0f:06:0e:5b:b5:f7:91:91:6f:10:42:b8:1e:
1e:21:9b:83:2e:04:ec:c9:af:4c:27:10:2b:46:38:
c6:ac:58:12:da:8e:d6:9d:c7:44:dd:7a:eb:5d:5c:
45:39:15:0b:8d:d4:13:c6:87:5e:ba:62:e8:b8:e5:
2c:d4:9a:b8:c8:51:2f:30:4b:52:b4:e5:5a:80:99:
45:27:59:43:d8:74:c6:b3:8f:3f:44:4c:23:f4:c5:
5f:15:26:54:25:49:7f:1d:8b:7d:37:ac:d2:ad:1d:
eb:39:c9:e1:b3:ca:5d:b9:3e:a6:5e:11:28:b3:5c:
fc:90:b2:92:ae:20:61:0d:3b:ec:05:0a:f4:d8:a3:
52:21:33:11:6f:3c:a8:a6:bd:bf:cc:f4:7e:0e:ca:
06:1c:d4:3a:f2:ef:b3:2b:2c:60:27:15:4c:cc:38:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:76:3E:16:FD:97:AC:A0:17:8F:B3:22:31:D5:61:96:83:3D:71:02
X509v3 Authority Key Identifier:
keyid:0F:61:EB:A8:5F:25:AD:7B:E4:D9:FA:0F:F5:45:28:A9:4A:2B:36:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2HrqF8lrXvk2foP9UUoqUorNjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ba:3b:25:f7:a0:9b:f7:0e:24:71:f9:cd:42:c2:e1:98:e7:
74:63:0f:87:3a:77:7f:1e:d9:7f:e7:ad:af:83:6c:34:0f:65:
13:fc:b9:0e:9b:8b:e7:3c:7d:c4:6e:33:40:95:42:cb:33:f7:
fa:d2:b0:f7:30:a8:ef:11:ca:ba:f5:05:80:52:87:38:64:71:
d6:ec:ce:ef:05:a9:79:01:70:a7:a9:f4:a4:d2:ed:38:7c:1c:
9e:1c:45:fa:b4:54:e2:d5:9d:3f:33:a5:bd:94:dd:c8:0b:68:
b7:b7:cb:61:24:3c:1e:69:69:1e:81:c4:5c:de:fc:5f:d5:66:
c3:e9:46:0b:f9:f6:48:70:e5:1d:19:f1:8b:ca:a3:4d:75:43:
2f:97:80:2e:ba:44:78:47:20:8d:b5:f0:8c:28:75:79:f2:92:
4c:e6:58:ed:a4:f0:e4:21:16:b3:67:5d:eb:59:63:59:c0:81:
19:18:38:59:18:ee:3a:39:b3:c9:9e:86:80:81:f6:2c:72:0e:
ff:80:52:af:0a:db:00:90:5c:84:68:9e:5f:1d:e9:0c:31:6f:
11:d5:6e:05:ac:04:ba:a4:64:a4:a5:6e:ab:6f:57:08:e5:83:
6d:34:cb:08:9f:92:45:13:3b:97:b7:28:1f:09:2e:e3:b0:ae:
f8:02:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:13:05 2025 by rpki-client