Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
File: rNbwonJnY07OGVnN2gPOvc5Yp70.mft (raw, json)
Hash identifier: 6Yg/aQHGhvpQGGUAXo0G4e7VNkzrnzBqpRCfoHwlES0=
Subject key identifier: F4:7F:38:7F:86:A3:AA:AF:10:BB:08:0A:FA:EE:0A:80:0E:69:B4:3B
Authority key identifier: AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD
Certificate issuer: /CN=acd6f0a27267634ece1959cdda03cebdce58a7bd
Certificate serial: 0198D5BBE9F9D84CF9145B4AEB2752880597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
Manifest number: D0
Signing time: Sat 23 Aug 2025 07:01:58 +0000
Manifest this update: Sat 23 Aug 2025 07:01:58 +0000
Manifest next update: Sun 24 Aug 2025 07:01:58 +0000
Files and hashes: 1: rNbwonJnY07OGVnN2gPOvc5Yp70.crl (hash: Z1Uzo9gUeZDLGZCxDxWsjtOKQb6gUi8Mx6eOvOBLwS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e9:f9:d8:4c:f9:14:5b:4a:eb:27:52:88:05:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6f0a27267634ece1959cdda03cebdce58a7bd
Validity
Not Before: Aug 23 07:01:58 2025 GMT
Not After : Aug 24 07:01:58 2025 GMT
Subject: CN=f47f387f86a3aaaf10bb080afaee0a800e69b43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:05:f9:b6:3d:07:9a:f9:8b:30:58:3f:2f:
47:4b:47:73:86:c0:55:f1:8f:45:b0:01:70:86:e7:
5b:e0:26:5c:1f:09:d4:42:4b:12:13:59:32:4b:e6:
c0:55:f4:e2:22:23:19:98:00:3d:95:a4:78:b4:7d:
32:1b:94:27:c8:50:21:a9:cc:c9:26:f8:a1:ca:af:
38:52:b0:aa:99:31:48:ee:8b:18:98:26:ae:ba:a2:
c2:9e:1f:0a:be:53:d4:58:26:e5:9f:5e:8c:e0:7d:
49:d7:0d:af:4f:e5:22:7a:5d:ef:c8:ff:e6:f7:35:
00:7b:c0:af:e8:1f:71:0d:7a:25:d8:5d:4b:b5:34:
f5:03:69:45:e2:6b:73:af:e1:28:f1:d7:44:02:01:
56:f0:6b:bc:ef:4d:9c:72:98:c5:dd:14:5f:ff:62:
0a:89:f9:f6:ef:ae:f4:fd:d1:18:17:a8:8b:6a:e7:
56:ab:e0:05:f2:1b:54:c6:f8:57:3e:c9:cb:af:f0:
a2:32:31:46:48:e9:d0:d4:aa:f5:be:b3:8e:fe:b6:
02:47:36:cf:9e:f6:4c:99:6e:48:23:aa:f7:08:1e:
49:a0:5e:31:e1:ee:75:79:6a:eb:d3:e6:38:15:49:
5e:4e:c6:ab:18:ca:de:1a:fd:ee:1a:db:c4:4d:26:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7F:38:7F:86:A3:AA:AF:10:BB:08:0A:FA:EE:0A:80:0E:69:B4:3B
X509v3 Authority Key Identifier:
keyid:AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e6:0d:d2:36:8b:64:b7:bc:eb:d2:f4:d8:42:15:f0:73:25:
ae:f2:21:e7:79:35:46:fb:96:b9:10:e7:fc:de:6b:c4:53:4f:
a0:fa:f7:6c:d4:44:f9:60:ee:cf:c3:90:8a:0b:ee:d0:95:7f:
78:42:72:5a:23:1b:27:38:87:c2:0e:b4:97:da:bd:f3:b6:ff:
9e:bd:7e:ab:29:47:9f:50:8b:c6:08:4b:59:0e:01:f0:5a:ed:
c5:97:02:9f:3a:4c:fc:e8:cb:8b:a7:c1:ee:8f:16:1c:df:d1:
3e:44:7a:99:36:ed:07:11:79:9c:64:cd:07:b9:43:ba:4e:b3:
55:87:81:c9:c4:d3:9e:0b:2b:22:ea:9f:3f:fa:28:fe:89:d7:
79:09:a5:3f:b1:e0:96:e3:8d:48:61:16:d1:2b:aa:3c:a7:58:
a4:cb:27:57:be:70:fb:16:4e:c6:c5:09:94:b0:e7:62:98:09:
25:44:c6:2c:95:4a:d9:29:b7:1d:6c:49:5b:aa:d9:60:e3:d2:
1d:74:e0:52:0b:af:d1:89:ae:b6:54:b3:76:5c:3b:5a:d9:de:
ea:5f:52:2f:6e:e2:df:ab:f1:56:d7:27:1b:26:79:24:56:ce:
83:0c:db:e8:da:23:6f:bf:aa:72:99:a0:53:d1:89:39:19:46:
36:a6:75:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:32 2025 by rpki-client