Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
File: skdjJsizNc1GFWo9VpBcbp0NhbU.mft (raw, json)
Hash identifier: WN55FAHaa19nBpxLDYi5sjwoDEQbA6fysZD4rZRpnjI=
Subject key identifier: B4:7A:F0:25:26:F6:00:E3:6E:E8:5C:1B:E0:05:97:B0:D2:FB:D5:4B
Authority key identifier: B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5
Certificate issuer: /CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
Certificate serial: 0198A0F1A365AAFCB33EB3EBC4B39E8C37E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
Manifest number: 0528
Signing time: Wed 13 Aug 2025 01:00:47 +0000
Manifest this update: Wed 13 Aug 2025 01:00:47 +0000
Manifest next update: Thu 14 Aug 2025 01:00:47 +0000
Files and hashes: 1: skdjJsizNc1GFWo9VpBcbp0NhbU.crl (hash: JG3cU6bKphL/HeHMm99p34Y0Yt3Fn3sDHpYRaRebzRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:a3:65:aa:fc:b3:3e:b3:eb:c4:b3:9e:8c:37:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
Validity
Not Before: Aug 13 01:00:47 2025 GMT
Not After : Aug 14 01:00:47 2025 GMT
Subject: CN=b47af02526f600e36ee85c1be00597b0d2fbd54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:e4:88:b0:c1:e3:03:4c:06:99:5c:4b:06:
6c:66:a0:cb:c2:a0:21:56:17:73:f5:6b:5f:f4:77:
9a:37:13:ab:00:77:01:5e:2e:08:69:a9:71:18:5b:
4e:b6:c8:0a:88:0a:39:51:bc:ac:cc:38:6d:08:37:
6f:27:f8:bd:f8:12:5e:f1:07:ba:c4:8b:ea:fc:b7:
0d:c3:cf:35:69:3a:a5:86:24:27:09:93:81:2f:08:
46:d6:8a:6e:a8:b7:36:05:71:50:cb:1e:f7:90:27:
12:19:0c:69:35:19:69:b7:bd:15:ae:5e:53:3b:58:
73:a3:b8:de:6e:cc:cd:8d:c0:67:67:b9:97:58:24:
d0:a1:ba:35:85:20:38:9a:82:86:9f:5b:73:e0:4f:
43:3d:b8:26:11:57:31:06:09:48:f3:61:e6:25:30:
f8:2b:ef:1a:69:39:50:71:3d:52:66:7c:2b:5a:2a:
5b:30:c9:33:ef:6b:17:78:f1:3d:f8:ac:b2:34:16:
00:5f:a9:a1:b5:08:bc:ce:2c:85:32:66:a9:bc:ce:
ea:73:e2:c4:f9:60:5c:74:03:d9:0d:cf:b1:63:0c:
f5:c0:16:ce:c4:8e:b4:14:b8:9f:40:37:9e:d6:65:
e8:cb:28:cf:1b:49:0f:7c:52:63:ff:44:1f:d0:6d:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7A:F0:25:26:F6:00:E3:6E:E8:5C:1B:E0:05:97:B0:D2:FB:D5:4B
X509v3 Authority Key Identifier:
keyid:B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f5:ab:15:a4:e3:08:8a:55:b8:b7:7e:13:b1:a7:60:0f:29:
32:63:4b:d8:ea:6a:30:71:4c:ea:86:e8:44:b4:b9:0a:7b:42:
9f:b1:98:37:72:58:d8:bf:8c:d1:39:e2:b0:fa:6f:c2:47:14:
37:f1:2b:f7:7a:59:48:bc:2f:4f:4a:98:0f:82:4b:f0:2d:60:
f1:5d:ca:30:6f:c0:a8:8b:68:81:8b:1a:15:ee:72:6c:c6:95:
44:b6:69:80:03:4d:f5:38:de:c4:c6:04:d9:d9:13:fb:41:33:
e2:1e:7c:41:88:ec:3d:ed:ee:a7:14:7c:ad:7a:76:76:aa:f1:
80:ae:f1:64:52:67:ec:79:20:04:69:1b:ad:b4:bd:6f:15:04:
d7:41:a6:5b:bb:a5:47:45:cf:c8:ff:60:81:8f:97:63:8c:ad:
e9:08:8d:d4:92:71:58:a2:02:2a:5d:fd:aa:9a:a1:e3:8d:71:
66:ca:68:78:74:91:8c:93:52:5e:ef:86:bc:e7:77:ca:fa:5e:
5a:70:e9:98:73:4c:26:e4:82:a9:78:cb:20:cb:4b:e7:fa:2d:
e0:e0:36:17:96:11:60:39:b8:2f:96:e6:d1:42:68:a2:4a:f7:
b3:3c:08:55:af:40:c2:1e:92:7a:96:65:62:91:86:65:18:9f:
6e:04:51:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:47:07 2025 by rpki-client