Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
File: MU0IhXjsDimwS0PpAUk1hnJjZP0.mft (raw, json)
Hash identifier: 2w0hKRGMP1cfYdt+TUjK0+rYeSiLy4VTtOiWjU3drNk=
Subject key identifier: 2D:21:E5:45:F0:C3:F3:B5:A7:2B:28:C6:A3:50:16:DA:28:EB:B3:80
Authority key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
Certificate issuer: /CN=314d088578ec0e29b04b43e901493586726364fd
Certificate serial: 0198D65F0E2890B45F965E39E74B2D2CEF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
Manifest number: 1382
Signing time: Sat 23 Aug 2025 10:00:10 +0000
Manifest this update: Sat 23 Aug 2025 10:00:10 +0000
Manifest next update: Sun 24 Aug 2025 10:00:10 +0000
Files and hashes: 1: MU0IhXjsDimwS0PpAUk1hnJjZP0.crl (hash: lrTSB6S4IFvyCBZtxzLH5HmHYhc6IpUbf0q4yuyY7ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0e:28:90:b4:5f:96:5e:39:e7:4b:2d:2c:ef:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314d088578ec0e29b04b43e901493586726364fd
Validity
Not Before: Aug 23 10:00:10 2025 GMT
Not After : Aug 24 10:00:10 2025 GMT
Subject: CN=2d21e545f0c3f3b5a72b28c6a35016da28ebb380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:76:09:50:05:4b:83:31:e9:56:42:00:7b:e6:
84:d0:d0:88:79:27:03:f8:79:0f:4f:26:ab:8a:55:
a5:78:e8:ee:0d:25:b1:27:6e:2e:12:f0:1c:fa:1a:
db:53:9a:69:1f:50:d6:cb:3c:69:12:85:d2:95:95:
10:23:a2:19:99:d3:d7:7d:e7:6b:f1:71:d6:e0:d5:
d0:61:a2:27:f4:a4:34:c4:de:25:d7:0a:d2:5d:a9:
ac:21:fc:8f:2b:ec:57:81:fc:59:3b:ff:67:4c:85:
0f:f8:d5:be:08:14:a8:1d:33:97:cb:2a:77:ba:4d:
d8:18:4b:c1:0c:f9:ad:d1:55:28:c2:19:29:f3:33:
04:7b:92:b1:f6:5e:f6:36:2b:4d:1f:91:7b:48:bc:
ef:26:88:5b:5b:64:1a:08:7a:7a:d3:94:e2:e7:27:
b7:29:ae:a6:db:d3:81:76:6b:56:af:44:4f:22:b4:
14:0f:f4:ba:43:1d:3a:f5:ff:21:82:3b:75:77:d9:
5c:cd:9f:e2:bb:58:8b:ac:d3:59:ee:5d:de:81:23:
1f:fe:82:78:f5:93:77:3d:dd:dc:27:07:45:c3:d2:
7c:16:f4:68:c6:c8:b0:24:1f:1b:bc:6a:e1:81:17:
3b:65:9b:3c:68:17:57:cd:2f:1b:b0:5f:a7:cb:8e:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:21:E5:45:F0:C3:F3:B5:A7:2B:28:C6:A3:50:16:DA:28:EB:B3:80
X509v3 Authority Key Identifier:
keyid:31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ab:24:54:0c:7e:fc:20:0b:fa:bb:75:bb:76:33:a4:e6:e2:
0c:57:ca:20:f8:a7:a8:71:59:9b:58:73:a0:c9:76:52:c7:9a:
15:2d:5d:cd:6b:51:d9:f3:90:45:ed:bf:f6:44:2b:2d:11:96:
6d:01:62:f8:f3:d1:c0:1b:60:39:ce:8a:c6:9b:f3:25:0f:73:
d7:af:ab:b2:90:3b:a5:59:36:67:fa:ed:b8:93:e4:e6:f3:11:
2f:1e:68:99:37:75:39:4c:34:88:02:27:a3:da:9b:60:10:6c:
9a:78:dc:85:7b:57:ec:7f:6b:a6:64:c0:8f:5d:3d:ba:28:a9:
a5:d9:fb:12:18:df:c2:26:a4:8c:62:20:46:99:2c:cd:db:3b:
3d:6d:8e:69:86:bc:7b:f0:5a:b2:f6:b9:30:c4:d3:90:1c:11:
82:93:49:2b:02:8d:d5:91:58:69:39:1f:e8:fd:4e:f4:5f:26:
7e:3c:3e:b3:22:68:c6:14:b8:fe:51:59:b1:59:7f:33:a8:71:
28:9b:26:24:1a:75:e9:7b:47:d1:7a:aa:df:46:f8:74:2e:bd:
57:19:62:11:ef:9e:f7:81:ed:51:97:b1:d7:8d:2f:72:bc:65:
db:e8:a8:b1:bd:19:7c:79:d7:fd:01:fc:aa:68:fc:83:a8:ab:
5c:56:c3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:22 2025 by rpki-client