Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
File: R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json)
Hash identifier: WQWycmfP9gx1b3qYhqtgmHHNb27xXtyjsphTB+g6h7w=
Subject key identifier: 29:76:BB:9F:91:D0:67:4D:7E:D6:3D:CB:E5:76:25:7D:C4:52:F2:BF
Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
Certificate issuer: /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Certificate serial: 019873E251531900C1151F2E8A407CED22A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
Manifest number: 1012
Signing time: Mon 04 Aug 2025 07:01:08 +0000
Manifest this update: Mon 04 Aug 2025 07:01:08 +0000
Manifest next update: Tue 05 Aug 2025 07:01:08 +0000
Files and hashes: 1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: 7+opQmmYH5uCtULnXF3wk1KU6IaJX4tvhncz+u/COuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:51:53:19:00:c1:15:1f:2e:8a:40:7c:ed:22:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Validity
Not Before: Aug 4 07:01:08 2025 GMT
Not After : Aug 5 07:01:08 2025 GMT
Subject: CN=2976bb9f91d0674d7ed63dcbe576257dc452f2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:f3:a0:0a:ba:38:74:3e:d5:e0:bb:51:c4:
69:8d:90:35:44:2b:da:2a:d1:15:1e:b9:51:ec:1b:
00:a8:61:4f:e2:e7:cb:01:cc:b5:12:81:8e:fd:33:
c1:e8:d5:65:56:a7:b2:cb:61:f9:9a:d7:68:21:58:
70:21:16:ed:2f:e5:64:24:82:61:8f:4e:3b:cb:f2:
10:25:d7:7c:7d:d6:7c:0a:ec:b3:79:cc:51:c4:a0:
42:42:b1:1a:17:53:31:80:02:8f:bf:e7:7c:bd:a3:
8e:20:6f:3d:23:2d:22:2f:62:8b:0f:3f:03:c2:11:
dc:0a:e2:1f:1f:2a:7b:18:29:0c:c7:6c:e9:68:c4:
42:39:a7:11:58:45:8e:05:ff:21:d1:91:a7:28:bd:
8b:b3:09:a7:a2:1b:b4:c6:0d:3d:05:c6:cd:b1:81:
0a:74:02:6c:01:e7:25:b9:3b:49:96:43:c4:ea:d5:
d3:4a:10:e4:24:46:65:43:a3:2a:58:fb:0d:c5:20:
52:b4:b5:8d:fe:5c:4f:7e:38:f5:8b:1f:ee:2b:33:
98:33:f0:f9:3d:d3:46:a7:57:09:cb:06:0d:63:e3:
df:37:24:dc:e0:0f:dd:e5:c3:30:89:9e:9e:03:2f:
be:e6:24:d2:c3:66:99:8d:c3:bb:49:25:a1:03:be:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:76:BB:9F:91:D0:67:4D:7E:D6:3D:CB:E5:76:25:7D:C4:52:F2:BF
X509v3 Authority Key Identifier:
keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c7:6e:37:87:61:7c:29:0c:d0:2c:88:10:83:c8:e2:eb:66:
61:dc:f4:8a:bf:53:cf:69:7e:52:a1:84:aa:c3:b6:1f:83:c5:
ac:c8:f7:1d:f4:ca:34:38:a7:67:e3:1c:91:05:62:c0:5c:8e:
21:e7:ed:34:b3:01:dd:11:d1:25:52:80:64:17:26:36:01:14:
eb:c7:7e:49:4f:97:bb:ce:b3:93:0a:38:43:a4:df:1e:32:f3:
99:e9:55:28:c1:72:47:e4:92:97:cb:d7:70:4e:50:6f:cd:85:
27:35:b3:da:b3:a0:1e:22:5d:f6:1b:d4:29:ff:19:7d:8e:56:
1f:27:75:f0:78:08:2e:29:0f:8b:07:fd:b4:38:cc:e2:8a:bb:
c3:84:f0:41:e0:ad:a0:3a:13:53:d5:38:65:f9:e1:0e:7a:af:
ae:ec:d2:97:a3:4c:f5:d5:a5:d5:58:ba:38:c6:48:31:c2:99:
b7:25:12:1e:00:3a:d2:97:da:90:70:70:8b:0e:a0:54:87:98:
bb:75:e4:10:1f:75:95:4d:8b:3b:86:8f:ab:ad:08:53:40:00:
e5:7e:83:41:51:c8:c2:38:6e:ca:37:ed:b8:ee:83:64:6f:0b:
b2:ca:65:eb:52:ed:17:c7:2e:93:00:f1:be:94:32:9e:5c:eb:
7a:66:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:17 2025 by rpki-client