Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
File: SRrcI2V17CPX67-9wgQ5kYAmvvw.mft (raw, json)
Hash identifier: Di1qoF9Xm1ywppNkY9QJDsZn6GIQTs0p3UwPFcJw1qA=
Subject key identifier: 77:46:8D:FB:9B:64:9A:29:E0:67:57:8F:48:3A:86:45:57:C4:D2:04
Authority key identifier: 49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
Certificate issuer: /CN=491adc236575ec23d7ebbfbdc20439918026befc
Certificate serial: 0198D660D96F30D7F81DCA5B65CF7ACB3A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
Manifest number: 1371
Signing time: Sat 23 Aug 2025 10:02:07 +0000
Manifest this update: Sat 23 Aug 2025 10:02:07 +0000
Manifest next update: Sun 24 Aug 2025 10:02:07 +0000
Files and hashes: 1: SRrcI2V17CPX67-9wgQ5kYAmvvw.crl (hash: AWg9I3ABK7i5n69Vk/9YWAOZ0Sif/oGgb269kpVkSFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:d9:6f:30:d7:f8:1d:ca:5b:65:cf:7a:cb:3a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491adc236575ec23d7ebbfbdc20439918026befc
Validity
Not Before: Aug 23 10:02:07 2025 GMT
Not After : Aug 24 10:02:07 2025 GMT
Subject: CN=77468dfb9b649a29e067578f483a864557c4d204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:bc:44:34:ea:ba:14:93:15:65:a7:bb:ff:
46:ed:8c:d9:8d:e7:f3:cd:93:48:ab:82:e5:4e:f7:
07:e1:be:f6:0d:74:ca:fd:f2:67:32:4e:f0:09:66:
51:61:3a:10:c1:22:ab:8b:bf:40:1b:2f:a5:c9:ad:
aa:59:13:cc:6f:aa:4b:5d:26:61:54:0e:70:ae:d1:
82:28:e1:36:0a:f2:39:6e:0a:c3:3d:36:27:03:74:
25:e9:bf:3b:e3:53:b5:fe:c6:91:39:3a:2e:01:00:
59:71:19:89:f1:c7:2d:57:b8:db:f9:36:be:c1:fa:
a4:c5:2c:dd:6d:18:20:f5:88:cb:05:50:ab:ed:8a:
c6:d1:12:13:bf:78:70:7c:f7:58:26:96:44:f5:8b:
9b:f3:ca:6a:cc:e5:15:6c:c7:5b:5b:78:0f:b4:1c:
83:f4:05:b7:70:42:26:d5:66:95:a3:65:da:21:f1:
56:d6:92:f0:a4:70:54:5f:eb:84:d5:29:bb:30:84:
6b:b1:c6:66:a9:c2:7d:76:da:d9:42:41:40:26:3d:
01:7e:f5:7c:9a:53:3f:b3:59:cd:e1:6a:43:e2:54:
8d:1c:15:4a:ec:7a:07:45:4c:6c:67:a8:6f:11:31:
d6:ac:cb:a9:b4:d0:13:a0:bf:2b:85:17:aa:f0:b3:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:46:8D:FB:9B:64:9A:29:E0:67:57:8F:48:3A:86:45:57:C4:D2:04
X509v3 Authority Key Identifier:
keyid:49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8c:eb:79:91:59:b5:26:19:2c:62:77:74:5d:ca:db:0f:15:
37:22:cb:63:46:66:b6:a1:90:3b:07:5f:72:33:ab:77:66:cf:
38:3a:45:3c:2f:78:56:2a:b3:e6:40:97:d4:bd:b7:85:57:bd:
93:33:67:96:75:92:6b:04:84:66:ef:31:d1:00:15:fa:6a:4a:
33:7c:a7:45:2b:f8:17:d4:17:44:d3:7d:44:27:2d:a7:1f:c3:
7b:f5:1e:9a:ab:d9:8e:b2:08:99:33:fc:3d:47:e6:bd:56:ab:
5c:06:07:90:b5:e2:bf:54:12:65:c4:6d:4f:45:7a:1a:e0:cf:
06:8d:be:1d:92:b5:fd:b9:bd:01:54:ca:5f:f0:71:7a:d8:f8:
bb:b1:2a:3d:99:0b:c9:88:aa:d8:66:76:b3:9f:bc:b9:14:08:
e4:8d:67:ed:5d:21:cf:96:dc:4d:b1:68:76:15:af:96:94:c4:
51:5a:fd:6f:2e:74:da:cf:0a:c1:6a:69:e3:a9:0e:e2:d0:cc:
ef:e5:a3:93:55:fa:ef:d3:2b:61:0b:0d:ef:1a:ef:7f:c1:2e:
d4:a1:d8:5c:95:7a:3c:c6:b0:83:04:fa:ff:63:38:04:5c:9d:
98:5b:e0:74:f2:97:14:c3:ba:d3:3c:26:ea:4f:db:0b:f2:0f:
79:82:68:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:57 2025 by rpki-client