Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft
File: dqIj-utMXd95nTyiqWDAbB1tHZY.mft (raw, json)
Hash identifier: vkI5RTi4qoR3TK8g2V6w+MDJAE5hLHgs692hLMIil1w=
Subject key identifier: 6D:A8:62:02:C3:F4:27:1C:85:23:F0:F8:92:A1:D5:3A:91:E8:B2:15
Authority key identifier: 76:A2:23:FA:EB:4C:5D:DF:79:9D:3C:A2:A9:60:C0:6C:1D:6D:1D:96
Certificate issuer: /CN=76a223faeb4c5ddf799d3ca2a960c06c1d6d1d96
Certificate serial: 019895C99E1CD90D15A92453FABFD7496400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqIj-utMXd95nTyiqWDAbB1tHZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft
Manifest number: 0BD7
Signing time: Sun 10 Aug 2025 21:01:15 +0000
Manifest this update: Sun 10 Aug 2025 21:01:15 +0000
Manifest next update: Mon 11 Aug 2025 21:01:15 +0000
Files and hashes: 1: dqIj-utMXd95nTyiqWDAbB1tHZY.crl (hash: VnFbKdJH7vp5JCwtv3T/jFBk/h2ifKfMc1hcCsjwliw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqIj-utMXd95nTyiqWDAbB1tHZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:9e:1c:d9:0d:15:a9:24:53:fa:bf:d7:49:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a223faeb4c5ddf799d3ca2a960c06c1d6d1d96
Validity
Not Before: Aug 10 21:01:15 2025 GMT
Not After : Aug 11 21:01:15 2025 GMT
Subject: CN=6da86202c3f4271c8523f0f892a1d53a91e8b215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:82:ec:80:36:e0:5b:da:10:5a:2a:21:f9:
6e:c6:b3:5b:58:1f:b3:5d:0a:b4:8a:df:72:1d:82:
8f:00:90:8a:9a:37:79:b2:46:fe:43:98:8b:de:79:
89:97:7b:89:7f:81:90:49:31:82:f8:23:ef:62:fb:
22:87:07:24:6f:0b:3c:dd:e4:60:b5:7e:ba:a1:30:
52:df:c7:95:fe:31:0b:58:22:f7:f0:bf:96:20:62:
28:ab:2d:8a:ae:0e:d6:2b:7f:da:0b:71:1a:4b:3b:
ff:66:cf:42:28:d8:3e:55:5a:3a:d7:73:b8:62:9c:
68:ca:bd:e0:ce:71:93:9e:d1:21:14:c2:45:58:2b:
4a:e7:64:7f:13:ea:ce:7e:07:2e:66:2f:07:f0:1a:
af:91:37:89:0c:c8:17:bc:4f:31:d9:6c:28:cd:d8:
c8:a2:17:47:56:7a:94:da:80:74:35:9b:06:a6:b0:
75:47:13:be:f9:b8:43:45:0a:91:c3:d8:3f:dc:56:
c3:aa:a6:6a:80:55:43:b7:b2:ba:b9:ee:69:f5:cd:
12:38:89:d1:a3:f9:f6:89:5f:dd:e3:0f:85:ae:e4:
38:bc:2f:cc:11:a6:bb:5f:4f:3a:95:46:fe:d2:aa:
22:10:83:ec:e6:2f:c6:52:32:70:c1:af:61:42:05:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A8:62:02:C3:F4:27:1C:85:23:F0:F8:92:A1:D5:3A:91:E8:B2:15
X509v3 Authority Key Identifier:
keyid:76:A2:23:FA:EB:4C:5D:DF:79:9D:3C:A2:A9:60:C0:6C:1D:6D:1D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqIj-utMXd95nTyiqWDAbB1tHZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2a:3b:ff:78:b6:c2:d1:b4:f5:36:34:a2:f9:b7:fd:99:89:
3c:ff:61:f8:aa:a1:5b:a4:3d:f0:9e:8a:0d:ca:af:cc:5d:24:
3c:89:9b:b5:15:24:bd:0e:48:ff:2f:83:7e:ab:ca:96:6c:77:
30:fa:2b:f5:f1:90:b6:6b:3e:1e:0f:6c:55:fa:0b:4b:3b:9d:
a1:14:57:08:ed:c7:f6:b5:86:b1:00:08:30:6c:91:08:c3:85:
46:05:dd:8c:6e:20:17:c3:8e:17:2b:29:2a:3f:23:d5:0a:d7:
97:b5:32:0c:f2:f7:a3:0a:3e:f7:ff:b0:dc:4d:3f:2b:6a:69:
3f:d9:98:9c:0c:02:55:ed:ae:08:ae:62:ed:60:e2:9f:71:a8:
40:ae:14:79:e7:61:94:d3:9e:27:b9:6a:29:d3:3c:16:24:3f:
0c:0c:ea:27:aa:2e:8b:e8:ca:34:74:c3:16:44:d6:49:24:37:
f8:97:c4:c6:44:9b:4a:9b:a4:93:7f:06:dd:e9:45:40:f3:1e:
b9:9e:1c:fe:29:43:26:75:fa:71:30:2d:3e:a5:75:3d:52:fa:
44:38:dd:96:fe:b2:5b:82:1c:14:6a:d1:91:4c:28:ee:62:df:
02:cf:99:9d:47:70:07:af:27:8b:43:6b:86:97:22:ef:e3:79:
ee:69:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:58 2025 by rpki-client