Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
File: _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json)
Hash identifier: J/S6bYA38Qqg9CofHZqD/1e203zt6jIBgA/riO0uKdo=
Subject key identifier: A4:B8:98:69:DC:2B:9D:C8:E0:D1:DC:DB:66:C9:30:EE:81:AE:09:55
Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
Certificate issuer: /CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Certificate serial: 0198D54E96C1E52B81CF640F7DE80ED77AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 05:02:34 +0000
Manifest this update: Sat 23 Aug 2025 05:02:34 +0000
Manifest next update: Sun 24 Aug 2025 05:02:34 +0000
Files and hashes: 1: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: fXTTTGqTwfQ/aQktgMQY1oMkznqQ7nOWEg1m4asGfwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:96:c1:e5:2b:81:cf:64:0f:7d:e8:0e:d7:7a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Validity
Not Before: Aug 23 05:02:34 2025 GMT
Not After : Aug 24 05:02:34 2025 GMT
Subject: CN=a4b89869dc2b9dc8e0d1dcdb66c930ee81ae0955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:cd:42:fa:56:75:db:13:d2:de:a0:e5:4f:
74:72:69:39:db:d9:41:a7:39:95:52:4b:72:dc:9b:
98:33:41:2b:32:e8:c6:f5:19:29:59:77:51:79:c4:
86:e4:1c:31:59:7b:c5:3e:77:6f:2b:8b:98:09:3b:
61:0d:07:e9:e9:40:59:08:86:0c:78:5b:a2:9e:91:
f9:b7:f3:ac:8e:8f:1b:f3:7e:bf:83:15:c9:c5:ff:
5d:51:98:31:ec:bb:2f:51:5a:25:65:94:98:41:73:
f6:50:a2:76:b4:ff:2a:2c:73:63:cb:1a:49:2b:55:
e5:88:04:51:a4:37:6d:63:28:97:86:99:9d:f9:0b:
28:03:05:85:09:03:3b:a0:76:1b:33:3f:90:de:1f:
ea:8d:56:57:ac:ea:f3:2b:f8:88:6b:18:d5:e7:06:
a2:75:21:ae:26:6c:1f:57:72:15:85:a1:80:10:49:
49:f3:70:73:f6:eb:0e:1a:96:13:6b:e7:43:09:08:
a1:f7:1a:e5:d1:b7:56:95:62:1d:6f:d5:01:26:3c:
0e:99:46:ad:b1:ac:6e:55:59:27:b1:48:a8:b7:9c:
2c:61:f8:95:45:3b:5d:c8:60:90:fd:fa:26:af:05:
9f:d3:70:57:00:43:a4:83:f0:db:89:f1:6f:a3:15:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B8:98:69:DC:2B:9D:C8:E0:D1:DC:DB:66:C9:30:EE:81:AE:09:55
X509v3 Authority Key Identifier:
keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:fc:ae:cc:e9:fb:e1:e4:bf:32:2c:2f:37:bb:d2:fc:76:65:
20:cf:de:32:43:13:35:c8:64:da:c3:87:d0:3e:cd:b3:93:ef:
b8:64:ba:f8:40:f1:c8:2a:9b:bd:4d:33:68:2e:b7:d7:77:ac:
05:cc:e3:44:8e:02:ca:94:1e:5e:d1:a8:b8:d1:41:0a:90:c0:
62:69:64:cc:83:35:dc:57:c1:5a:e0:3a:75:4f:48:88:80:32:
4c:7c:1a:a9:e2:49:a3:57:d9:2f:92:c1:f6:e8:d3:ec:f6:f8:
72:b5:fd:8d:2f:5e:0b:73:75:82:b9:14:f6:d0:00:85:5a:58:
39:f7:90:02:40:4e:1a:6b:34:1b:88:ca:e9:6f:47:ba:9e:3a:
4a:1b:c6:cb:95:30:75:b5:34:26:c4:be:4f:d7:0b:92:48:39:
9d:21:78:f2:1b:d8:26:ff:af:c4:7a:bf:9f:e1:0f:40:04:d4:
0c:f2:90:e8:cb:fa:bb:a8:5d:23:9b:79:f4:d0:f0:03:c3:9d:
d6:45:f5:59:75:bc:86:04:82:8b:3c:b7:f0:1d:11:b7:09:f2:
44:32:c8:32:a9:55:c5:3a:d6:bf:70:8b:d2:1b:f7:43:7c:a3:
09:8d:a9:54:d1:73:7e:86:89:e9:87:87:f8:c5:e3:65:16:bf:
a2:82:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:25 2025 by rpki-client