Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
File: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft (raw, json)
Hash identifier: VT3kynJJWoHqf5e1jE9SOTk2sqIdf0IlFFbBhQ+RqHw=
Subject key identifier: 59:6D:AE:BF:61:C0:C7:E9:FE:9A:C8:DF:4A:99:B3:30:9F:0B:69:A7
Authority key identifier: 31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
Certificate issuer: /CN=31fd401741e669e920b03c6c76aa3a7871403f54
Certificate serial: 0198D473628F0AF3BE0202BAD5871914F8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
Manifest number: 04B0
Signing time: Sat 23 Aug 2025 01:03:08 +0000
Manifest this update: Sat 23 Aug 2025 01:03:08 +0000
Manifest next update: Sun 24 Aug 2025 01:03:08 +0000
Files and hashes: 1: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl (hash: u5doj1pF6gUXynnwbRswgYUvoS5glx/lLNK/aQH4UHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:62:8f:0a:f3:be:02:02:ba:d5:87:19:14:f8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31fd401741e669e920b03c6c76aa3a7871403f54
Validity
Not Before: Aug 23 01:03:08 2025 GMT
Not After : Aug 24 01:03:08 2025 GMT
Subject: CN=596daebf61c0c7e9fe9ac8df4a99b3309f0b69a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:97:8d:1e:d6:4f:f3:07:c0:26:9b:12:1d:
e6:64:8e:5f:02:c2:d8:43:ca:a9:d7:4d:ae:c7:07:
03:0f:00:f2:94:0a:f7:a0:c1:67:20:b8:0e:32:2a:
55:12:2d:17:70:17:70:83:2b:53:09:e4:1d:42:38:
2b:3b:20:af:11:2e:93:1c:6b:87:e8:f7:d9:51:2f:
02:38:77:99:db:36:b8:52:67:54:bb:9b:d6:34:e3:
6e:81:f7:85:8f:db:17:44:d7:67:13:c7:8c:fe:9f:
9c:86:91:c0:a6:ca:eb:1f:2b:ec:ae:e0:10:0d:0d:
c2:80:b0:bc:d0:dc:9b:0a:37:68:39:22:bf:99:a0:
92:7e:59:d0:61:04:4e:70:e0:9e:f8:64:01:94:44:
5e:6c:af:f8:24:6b:18:4c:ff:d5:90:3f:52:24:99:
4b:ea:3a:33:fe:a1:3c:0a:18:5b:23:57:77:29:ad:
9c:5e:77:d1:b1:e4:cd:de:e2:52:96:04:30:5a:3b:
6e:bb:af:27:f5:27:52:21:ba:67:c3:83:19:1e:4f:
9c:79:74:43:9a:58:e3:dc:b3:f1:3f:03:97:44:2a:
40:52:f3:fe:e4:b2:a2:ea:6f:2f:1d:f7:35:0e:9f:
a6:87:49:d1:b0:7f:01:d9:c0:60:7e:b0:bc:e1:ef:
17:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6D:AE:BF:61:C0:C7:E9:FE:9A:C8:DF:4A:99:B3:30:9F:0B:69:A7
X509v3 Authority Key Identifier:
keyid:31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cf:d7:b3:11:09:80:c0:59:c5:b5:ce:d2:dc:1b:3a:05:c0:
9b:d5:35:86:bb:27:02:fb:f5:6c:aa:10:a3:8b:e2:fd:f8:fa:
d1:02:da:bd:da:a5:75:c5:a7:0a:2b:ab:0d:b3:59:e0:f6:0f:
cc:7c:01:06:0c:d9:51:df:c7:d9:5d:09:4a:14:cd:76:d8:5c:
0b:9b:c0:ac:79:ea:67:95:6f:5c:b0:f7:d3:e9:67:0a:55:2a:
8d:80:80:88:2f:e0:7e:78:7b:c3:62:51:e3:ad:1c:ce:c3:08:
88:a9:bb:ef:61:3e:73:0e:c9:82:5c:8d:2b:79:be:46:80:97:
a6:4a:be:14:ea:ec:a8:3e:60:06:f6:3b:83:77:0f:45:05:37:
bb:d2:11:ce:75:6e:c3:f2:73:42:6f:25:60:1c:35:66:18:7c:
29:a7:77:d3:36:04:a4:71:c8:14:69:ad:88:ae:75:06:2d:90:
f9:0e:9a:30:b8:2e:25:cf:3f:91:87:89:36:f8:28:21:55:04:
e1:95:1c:08:b3:ed:4b:f0:ee:1d:ea:ac:e2:3d:a9:07:0d:34:
c7:77:36:7a:ee:19:0c:8c:59:b3:88:54:5e:4b:1d:50:69:7d:
46:80:8d:59:73:30:66:f2:ec:14:7f:d0:c4:f3:71:8c:5a:25:
34:fa:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:03 2025 by rpki-client