Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
File: mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json)
Hash identifier: APOuKk58xDxHDMbT5QXXQLjYGoXKeZUUqg+488qMrAI=
Subject key identifier: D5:53:8A:49:2B:CA:17:AC:FB:96:87:F1:8B:A7:DF:DE:EC:FC:22:92
Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
Certificate issuer: /CN=983f1b139df24a05c2e5256052b0212517e47351
Certificate serial: 0199FB45E19FD980B42BA4CB07348A961D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
Manifest number: 02E3
Signing time: Sun 19 Oct 2025 07:01:24 +0000
Manifest this update: Sun 19 Oct 2025 07:01:24 +0000
Manifest next update: Mon 20 Oct 2025 07:01:24 +0000
Files and hashes: 1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: rmiwUnjha9zPx4n7ogpATBWRKtPpRoYs9uI5Oq3MmXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e1:9f:d9:80:b4:2b:a4:cb:07:34:8a:96:1d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351
Validity
Not Before: Oct 19 07:01:24 2025 GMT
Not After : Oct 20 07:01:24 2025 GMT
Subject: CN=d5538a492bca17acfb9687f18ba7dfdeecfc2292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:fd:e4:9e:8b:1b:fd:61:80:f4:8b:43:c1:
d0:13:d3:bd:32:66:29:2d:1f:36:b8:d4:87:08:a1:
60:e2:12:d3:ca:ad:da:19:29:8d:3c:45:ed:81:99:
78:06:33:df:c0:fb:ff:fc:13:ed:f9:5f:38:bd:f7:
55:c5:33:9a:9a:78:4c:ae:af:ce:1e:41:27:7e:bc:
c0:1b:a6:3a:d3:a3:4d:09:b3:c7:54:7b:59:98:db:
0f:ec:1d:31:1b:25:13:18:43:fa:4c:03:8f:73:e4:
ae:29:31:62:fc:8c:df:dc:0d:a5:ac:dc:d3:81:9e:
71:d2:90:dd:e6:c6:3c:06:44:54:59:32:ea:cf:25:
79:99:a5:ee:21:96:cf:1a:35:a5:b9:47:43:65:3b:
44:24:1e:f7:6c:b9:e4:94:4b:78:33:16:54:aa:38:
a2:92:b5:cd:72:34:d8:71:62:91:84:8a:ad:47:44:
8c:f4:d2:20:e0:b4:79:37:35:44:67:ed:a9:e3:5a:
5c:9b:7f:14:72:7c:b9:7a:07:e9:69:6e:e9:36:89:
6c:b9:e3:04:f0:59:aa:43:8b:1d:58:ec:13:77:b7:
1d:20:91:0e:d1:07:a7:f3:ef:28:50:83:f8:fe:75:
5b:9b:d2:11:aa:c4:7d:0c:33:05:9a:d0:1b:cd:b7:
05:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:53:8A:49:2B:CA:17:AC:FB:96:87:F1:8B:A7:DF:DE:EC:FC:22:92
X509v3 Authority Key Identifier:
keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f8:19:92:c2:51:5f:1b:4e:eb:80:c7:82:1a:92:de:6c:50:
c5:13:6a:cf:a9:75:b5:18:f9:ff:af:99:14:54:5f:42:37:48:
02:79:0f:8b:99:bc:4b:7e:82:8b:09:90:ed:d5:0e:0e:73:ef:
ea:56:c0:64:31:16:bf:50:ed:f4:9a:a5:50:d6:06:e0:00:76:
6d:e2:93:09:d6:40:3e:ae:28:fa:e2:f3:17:8b:20:82:42:ee:
bc:30:58:77:2c:d9:0e:b6:38:cd:fa:5c:b9:19:b3:ef:40:01:
56:d6:81:51:d4:1f:80:4a:5b:89:a5:b8:e0:5d:da:07:a1:3b:
db:2a:02:e8:9e:45:2a:53:77:6b:5a:6e:b0:2e:27:62:1d:bd:
1d:22:d6:20:b5:0e:19:fd:bc:73:a3:42:b6:27:2a:3b:46:f1:
b7:c6:a6:c2:da:80:19:20:de:38:92:86:f5:12:55:29:0f:67:
49:dd:5a:2b:81:7d:08:3a:60:d3:8b:35:2e:4c:f5:ec:85:61:
1c:51:20:2f:05:b6:35:01:5a:0e:5c:9d:6d:d3:e6:f2:c5:b4:
4c:07:46:d3:50:18:d1:92:b1:61:37:0a:91:b1:1e:66:a1:c7:
29:26:7b:71:1a:db:74:c5:63:0c:0a:5e:15:21:4f:4a:b2:94:
44:89:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:00 2025 by rpki-client