Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
File: _x2DMuEYqaIYfqtYhCedZYDxGfc.mft (raw, json)
Hash identifier: C7RYUhpl/EAU7uNUjHISXWZUlntXMbppVA3bjUupqsM=
Subject key identifier: 38:E2:97:BB:88:A5:73:E9:91:A9:3F:5C:BA:67:0F:84:6E:A5:47:6C
Authority key identifier: FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
Certificate issuer: /CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Certificate serial: 0198D51572740B11FFB01B184AB8181CEB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
Manifest number: 04A3
Signing time: Sat 23 Aug 2025 04:00:08 +0000
Manifest this update: Sat 23 Aug 2025 04:00:08 +0000
Manifest next update: Sun 24 Aug 2025 04:00:08 +0000
Files and hashes: 1: _x2DMuEYqaIYfqtYhCedZYDxGfc.crl (hash: japrHiFyEoD28tu7trRlM6+8bzsDCQWDbgETl4Waqyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:72:74:0b:11:ff:b0:1b:18:4a:b8:18:1c:eb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Validity
Not Before: Aug 23 04:00:08 2025 GMT
Not After : Aug 24 04:00:08 2025 GMT
Subject: CN=38e297bb88a573e991a93f5cba670f846ea5476c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8f:20:4d:11:ad:fa:a3:06:33:e6:7b:4b:a5:
eb:9e:7d:b9:8b:0c:d9:d7:ee:d7:88:4f:a0:5f:66:
fa:9d:b3:ce:42:67:bb:bd:ee:78:6c:66:82:b9:6c:
d1:3f:19:28:ad:8f:c3:2f:8d:02:67:81:93:cb:e7:
af:e9:6f:73:a9:fe:b4:9b:ac:08:f7:32:74:c9:42:
f8:ac:7c:cf:3f:ec:ac:16:be:97:ac:d5:ca:06:9c:
b9:1f:c8:ab:09:d6:50:6b:99:ce:f9:d0:4c:b1:6e:
68:3d:37:c1:ee:1b:14:57:27:e9:a3:39:8c:59:e5:
ba:28:f6:79:43:0e:f5:2d:47:5b:b8:cc:f9:41:3a:
cd:2c:f2:a9:86:88:a5:39:14:4c:d7:0f:26:df:a1:
97:47:8e:2d:c8:4b:bb:01:e0:58:64:6e:5b:63:28:
9f:d5:b4:29:d7:9d:58:22:65:a3:af:9f:e3:26:a2:
aa:7f:78:a0:2d:88:02:3a:29:67:eb:bd:57:b7:59:
44:42:af:91:4e:11:e3:fa:fc:2c:58:92:e1:5a:95:
bc:4f:ac:d2:4c:55:0e:85:b2:89:c3:46:37:df:d4:
59:cf:22:3f:f0:f0:93:6f:1e:af:f6:29:c9:ee:cd:
9e:4b:64:9d:70:91:75:bf:98:38:44:8f:b5:30:aa:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E2:97:BB:88:A5:73:E9:91:A9:3F:5C:BA:67:0F:84:6E:A5:47:6C
X509v3 Authority Key Identifier:
keyid:FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:67:1f:bb:f2:76:7c:fd:70:fe:b5:52:5e:db:cf:27:22:38:
f8:82:a3:b8:23:74:3a:86:16:ab:0b:e8:28:89:ab:51:45:43:
d5:3f:f7:11:49:12:6f:ae:5c:1e:69:e5:50:d7:e3:44:a7:c7:
00:73:e9:c4:73:90:75:88:b5:5a:cf:45:d7:2e:cf:c4:ad:63:
bc:b8:57:9d:f9:a7:bb:24:3d:39:5f:bb:b8:47:a5:b6:df:50:
02:a2:3a:4e:c9:16:47:aa:b5:9c:85:fd:4c:f9:68:09:da:6d:
48:4d:2c:27:19:6d:8a:79:58:98:ad:22:45:ff:c3:b2:8c:bc:
3e:2c:14:15:08:b2:36:1c:b6:a3:2f:b1:28:94:4f:20:84:b6:
dc:6e:de:c7:fa:a7:78:88:5b:04:c3:59:c5:1c:82:8c:ff:f4:
77:4e:d5:be:4d:c6:65:f0:40:3e:42:12:e5:eb:25:5b:52:3d:
42:32:52:d1:26:d7:71:93:2e:55:9f:c8:f8:5c:58:08:c7:6d:
36:37:af:93:c8:c1:db:4f:10:db:64:2a:51:97:44:73:fc:59:
1a:1e:34:60:9a:e6:a6:e6:4e:72:cf:94:ee:44:57:1a:34:08:
76:1f:10:3f:77:0a:cc:88:d9:c1:5a:bd:cb:e1:8c:b6:98:6c:
2f:8a:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:14 2025 by rpki-client