Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
File: MFKpUR4ZpULAuyN4td6PT7RSHb4.mft (raw, json)
Hash identifier: +B5zL4a2NIOlChXcEu3wwooYLnuDkRvruS2yOaUznn0=
Subject key identifier: D3:FF:6D:BA:16:AD:BC:F3:01:BB:70:55:56:1D:F6:2A:8C:4C:EF:34
Authority key identifier: 30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE
Certificate issuer: /CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
Certificate serial: 0198D472E5443C0CF735F900F4838DBE22F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
Manifest number: 15D8
Signing time: Sat 23 Aug 2025 01:02:36 +0000
Manifest this update: Sat 23 Aug 2025 01:02:36 +0000
Manifest next update: Sun 24 Aug 2025 01:02:36 +0000
Files and hashes: 1: MFKpUR4ZpULAuyN4td6PT7RSHb4.crl (hash: mJd5BLQN9tlvVSl9gIzDaKmMDIcXG1Cw4ERzb0kw4OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e5:44:3c:0c:f7:35:f9:00:f4:83:8d:be:22:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
Validity
Not Before: Aug 23 01:02:36 2025 GMT
Not After : Aug 24 01:02:36 2025 GMT
Subject: CN=d3ff6dba16adbcf301bb7055561df62a8c4cef34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:fc:42:97:6c:2d:cc:0b:ba:d4:d8:d9:36:
93:e3:19:ae:da:96:81:f0:a1:34:9e:70:62:f6:26:
42:46:d6:3f:da:a6:17:34:4f:3e:12:20:5b:ad:18:
da:80:01:be:2b:ba:16:cb:71:e0:83:49:da:f9:0b:
23:96:33:fd:4e:2f:fe:9b:bd:38:86:6a:f3:91:82:
db:e4:16:a6:dd:db:06:10:a1:f6:86:a5:c9:35:2c:
ab:bb:ef:13:ff:3f:bb:d8:15:97:7c:46:c2:5f:2f:
27:e4:5f:0a:f1:c4:e4:47:f4:55:29:49:13:c0:44:
27:ac:a4:6d:e3:62:7e:84:d7:f0:5a:4d:f3:41:81:
eb:69:3a:fe:a2:98:3c:0b:33:c9:32:1f:58:93:3b:
51:3d:b8:fa:d6:52:06:dc:05:4a:f1:eb:d6:94:0a:
d7:2b:b2:1b:53:bf:04:71:3f:ec:ab:ed:2e:d5:99:
3b:5d:9a:a7:2f:42:7d:74:27:d2:04:72:24:8b:e8:
39:2f:99:43:25:1e:03:6b:d3:a5:78:0c:8d:77:a4:
5b:e4:07:e9:7e:16:04:94:3d:53:19:d0:fb:36:03:
9b:65:68:ad:dd:91:9d:5c:dc:a2:ad:34:03:9a:8a:
ba:16:a1:52:88:62:00:63:31:60:23:17:cf:fd:57:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FF:6D:BA:16:AD:BC:F3:01:BB:70:55:56:1D:F6:2A:8C:4C:EF:34
X509v3 Authority Key Identifier:
keyid:30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0a:11:ca:c9:93:31:50:b1:dd:9d:61:33:b5:8a:fd:85:06:
0e:64:01:c7:ff:31:b4:75:70:d5:d5:6b:ab:6b:e3:d5:b2:35:
c1:bb:93:ed:8e:ea:51:9d:fa:ed:b3:14:77:3d:cb:8f:b4:27:
fc:19:b7:2c:f1:be:45:24:97:e0:fc:f0:d5:3f:8a:40:4f:73:
b1:82:b0:fa:62:cd:63:59:12:f5:2f:a3:39:e1:e2:ea:ad:68:
79:e8:78:08:b2:f2:40:5f:90:cb:8a:a1:3d:3f:b4:f9:c1:04:
7f:70:9a:cc:01:e8:d0:7e:95:86:b6:fe:d0:98:c9:1c:d5:6a:
76:fe:11:5d:31:f6:24:07:a7:68:61:57:c5:21:88:52:09:d0:
46:92:6b:53:38:a6:45:85:8c:c3:ec:76:bc:4d:e5:92:66:46:
05:38:79:c8:29:ae:37:04:da:91:28:cf:84:1e:32:a5:69:80:
b3:58:1f:4a:2f:cf:c5:7d:8b:dd:ee:6c:72:df:68:f8:c5:e3:
80:9d:f5:40:47:97:da:54:91:fa:10:2f:f9:66:c2:3a:2b:65:
ea:63:01:01:ae:e6:76:08:d3:a5:99:1f:73:72:3b:1c:5e:43:
3e:77:58:4f:a1:ff:f7:88:17:86:76:ca:71:a3:d3:16:61:c8:
6a:6f:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:18 2025 by rpki-client