Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
File: pN15cHEksgZy5pw44Xtma3-ufB0.mft (raw, json)
Hash identifier: BaPFr8VCssuoIb5RQLG0VdJpy6VFuGPcL33TnKnoXW0=
Subject key identifier: 77:98:80:90:26:6C:58:97:4D:7E:B1:F0:16:72:D4:B2:FC:3A:DA:C7
Authority key identifier: A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D
Certificate issuer: /CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
Certificate serial: 019872CF9951DFAC3E21BB855BB29C2C7AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
Manifest number: 04ED
Signing time: Mon 04 Aug 2025 02:01:04 +0000
Manifest this update: Mon 04 Aug 2025 02:01:04 +0000
Manifest next update: Tue 05 Aug 2025 02:01:04 +0000
Files and hashes: 1: pN15cHEksgZy5pw44Xtma3-ufB0.crl (hash: /aXDuRCRX2ReLnh/IHcZFCXvIl5vJyfeVlCqX/NdDjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:99:51:df:ac:3e:21:bb:85:5b:b2:9c:2c:7a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
Validity
Not Before: Aug 4 02:01:04 2025 GMT
Not After : Aug 5 02:01:04 2025 GMT
Subject: CN=77988090266c58974d7eb1f01672d4b2fc3adac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:2d:1b:51:a8:a4:ad:72:82:b4:76:ce:7f:
ce:37:ce:ff:45:d2:ce:98:83:5c:04:50:88:35:c1:
6d:87:b0:e4:29:25:67:78:d5:20:22:7c:b5:45:2e:
b3:c4:62:fa:5d:9a:01:e5:ff:cf:77:fa:cf:19:4d:
c4:73:c9:2c:72:54:18:74:29:08:bf:64:90:b3:7d:
c1:90:7b:a4:7c:54:3d:96:df:28:7e:1c:b8:32:be:
90:6d:19:32:dc:72:9b:a5:d9:f5:be:05:04:cc:65:
63:c8:ce:3d:bf:96:d3:0c:07:7f:31:72:7f:eb:6b:
ad:0e:a8:14:85:18:71:ca:40:59:70:14:89:41:b8:
7f:33:b7:2a:08:7c:84:9f:7b:f8:75:03:40:6d:9e:
5a:d0:49:38:21:80:ab:4e:9f:be:35:50:67:da:25:
f8:a6:98:aa:a2:34:d8:8f:3a:f2:5a:da:9b:a7:e0:
2d:9c:dc:29:81:58:3e:a6:f9:0f:51:39:5e:68:44:
57:b9:71:cb:95:7a:11:a4:07:13:9b:1f:d9:7d:fc:
27:f2:e3:f5:04:eb:78:65:82:17:65:42:6a:58:4b:
e1:41:87:5a:b9:85:c7:d8:79:58:b0:f0:de:72:16:
e2:cc:fd:42:47:1b:39:b8:8f:50:22:47:02:63:32:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:98:80:90:26:6C:58:97:4D:7E:B1:F0:16:72:D4:B2:FC:3A:DA:C7
X509v3 Authority Key Identifier:
keyid:A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:12:b8:fa:81:80:34:5c:b6:54:ab:2d:c3:9d:d3:c1:a4:fd:
c2:4b:a2:90:a5:4e:b2:91:6f:9a:c0:ef:b4:cf:f0:96:04:80:
8d:84:3d:bf:79:85:1a:a5:ae:a9:48:1b:e4:17:0a:58:7a:cb:
91:88:80:52:cc:2d:3a:75:c9:06:d8:2a:49:9a:b8:b1:99:b5:
05:e6:3a:c5:1d:85:5f:87:6c:39:ad:e3:e6:a4:89:d5:15:ae:
e5:55:5e:d2:19:75:32:e4:c3:2f:7b:02:a7:b3:ca:37:3f:cc:
05:4a:7a:cf:81:9b:c2:ec:63:80:7c:a3:98:a5:f4:3f:bd:b5:
ae:3a:e9:d8:40:98:41:fb:32:78:ff:ef:25:35:7b:ee:c0:92:
a8:80:27:03:3b:fd:e1:29:e8:64:87:a8:9a:e5:f1:a8:0f:34:
9a:2f:b3:9b:49:af:bf:f6:18:db:68:a6:fb:dc:6a:4d:19:d7:
47:26:35:c8:e0:db:6a:67:96:96:8d:3b:16:1d:38:c1:95:22:
f9:99:0c:99:84:a1:70:7d:5b:25:b4:92:b9:c7:a9:c0:1e:16:
5a:d6:91:7f:d3:ac:bd:48:ff:03:b2:7b:5b:11:84:0e:c2:44:
e0:2b:f6:a7:74:c7:ab:f3:1e:f2:45:45:5b:1c:6c:a3:f4:5b:
e5:3f:97:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:18 2025 by rpki-client