Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
File: cV2dGCxjrtg5f743LjYA9D2-62o.mft (raw, json)
Hash identifier: ++Y+mzV2xjpPo/WFKOsl/G9ZZTZR70iYno7S899jfR8=
Subject key identifier: 32:CE:45:49:43:93:10:2E:E4:86:C1:DC:4B:91:F9:A6:E5:AF:93:0A
Authority key identifier: 71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
Certificate issuer: /CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Certificate serial: 0198D6614CECCE8552469B1EF4FD9928D8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 10:02:37 +0000
Manifest this update: Sat 23 Aug 2025 10:02:37 +0000
Manifest next update: Sun 24 Aug 2025 10:02:37 +0000
Files and hashes: 1: cV2dGCxjrtg5f743LjYA9D2-62o.crl (hash: vKLF0GP76IqT0aDq3ZU315Tzxv74toRQVj/OpS12K2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:4c:ec:ce:85:52:46:9b:1e:f4:fd:99:28:d8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Validity
Not Before: Aug 23 10:02:37 2025 GMT
Not After : Aug 24 10:02:37 2025 GMT
Subject: CN=32ce45494393102ee486c1dc4b91f9a6e5af930a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:80:a9:99:ce:58:97:6c:92:15:c1:a1:26:
43:70:f8:99:ce:53:77:a5:46:25:10:df:b2:a1:9a:
dc:3b:60:3d:f6:f5:d1:a4:7e:8d:5f:af:66:5d:69:
30:99:ce:e7:93:59:68:d8:d5:f8:08:a0:7c:52:49:
13:e3:75:a3:1c:ab:e1:05:e3:6d:5f:52:e9:85:38:
c3:ee:6c:88:0b:fa:8e:fa:0b:c8:23:03:31:d1:7e:
4d:5b:ca:61:f8:62:e3:ca:85:76:3c:99:25:b3:e4:
ea:2e:f4:66:75:a3:9c:b6:7b:85:6f:10:9a:c1:12:
0b:3c:d0:3c:1d:3c:4c:16:b4:4c:46:10:39:7f:df:
5e:3b:61:26:a0:20:c5:9a:bf:cc:66:d0:a2:dc:c9:
65:6d:42:a2:bd:48:9b:bb:c6:ba:ee:b3:22:47:dd:
3c:39:0f:4b:f8:e0:9c:e6:ca:e6:ec:c3:80:7f:1a:
a1:90:12:b5:ac:2a:07:b2:72:8c:e8:0c:52:87:58:
85:7e:d2:0a:7f:7d:0a:dc:1f:58:85:6d:2b:31:86:
eb:b6:57:c9:23:0e:97:4a:e1:0a:da:1b:82:36:db:
d5:07:5f:44:57:91:eb:2f:c1:d7:bb:40:cd:a6:78:
f9:96:bd:90:a8:73:fa:5e:93:b3:f1:bb:24:7a:46:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CE:45:49:43:93:10:2E:E4:86:C1:DC:4B:91:F9:A6:E5:AF:93:0A
X509v3 Authority Key Identifier:
keyid:71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bb:8c:88:ca:ef:c1:0c:eb:42:91:4c:81:ad:b4:f8:69:38:
49:4a:e1:00:fd:38:fa:df:59:d9:6e:81:08:05:31:c7:c6:29:
3f:2e:7b:07:ef:75:dd:3f:f2:8c:8a:c0:fb:14:cb:95:f9:b8:
c1:5b:19:e4:af:db:72:4f:c7:72:3e:99:9e:07:8a:2a:54:0f:
d4:c8:87:fd:83:89:46:b2:b9:9d:9e:d3:b2:6a:8a:81:f2:2c:
54:e5:9f:03:08:0d:c2:5e:c4:1d:bd:4f:ec:ee:bd:1d:c4:be:
cf:98:43:09:3f:18:41:15:30:7d:c1:85:60:d3:32:46:64:ce:
5e:f1:7c:9e:58:cf:60:2c:06:b4:e9:2b:2d:b2:c7:d1:f4:49:
18:7f:2b:a3:5f:87:41:c6:1b:f4:82:90:86:99:60:7d:db:1b:
25:1f:d4:1e:a4:d4:bc:5c:f3:53:b0:0a:07:31:69:b0:3e:0d:
84:35:10:f3:03:7e:c1:19:97:cb:1f:55:3a:a5:82:1c:6a:3e:
45:e8:bb:f3:34:60:1e:3f:c9:9c:87:e7:09:1f:e4:d3:44:56:
a7:53:2e:7a:58:82:43:ab:02:1c:b1:13:0e:e2:cd:76:6a:7a:
41:54:14:18:a4:ba:38:ef:ed:ca:57:7a:89:95:4c:4c:af:78:
f1:99:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:14 2025 by rpki-client