Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
File: mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json)
Hash identifier: dq6KNOrPYuaM49KDe1tJ5qPCNxaHfPFJUAbKBueK9Ac=
Subject key identifier: 6F:01:DD:B2:33:7E:1C:B4:5B:43:3F:0C:57:20:D2:7E:4D:07:42:77
Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
Certificate issuer: /CN=983f1b139df24a05c2e5256052b0212517e47351
Certificate serial: 0198D5BB97B21FEC58843E3BFF7540212658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
Manifest number: 024B
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: RSmIHAXp1D2R/42yG9mxIUOrOfUPjYLaMUqlu3PHC2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:97:b2:1f:ec:58:84:3e:3b:ff:75:40:21:26:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=6f01ddb2337e1cb45b433f0c5720d27e4d074277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:b3:32:fe:66:fd:86:8d:82:29:f5:b1:9c:
7e:9f:79:cc:7a:ab:ce:88:a6:20:e8:1e:53:63:fe:
e9:ec:85:27:c6:54:6c:23:33:c7:d5:3a:60:24:e0:
95:7b:6d:c2:40:7f:67:35:36:c6:3d:3d:a4:d5:ee:
a9:5b:3c:24:e1:55:8f:7f:e6:2c:52:5a:8d:a5:81:
a7:88:68:66:70:f6:3a:1c:9f:56:58:18:9b:82:57:
ef:3a:46:c1:29:8d:2c:0b:df:15:f8:51:c2:7a:e5:
1d:31:95:e9:6d:f8:a0:70:b8:25:00:ca:70:cb:c1:
1b:3f:ad:bc:d8:d7:e0:46:41:78:9d:1f:aa:5b:13:
2a:9c:8c:2e:be:a8:d2:93:0f:22:40:70:50:c7:2e:
66:28:33:1f:92:7f:1d:b1:80:61:11:24:96:61:ab:
4c:84:cb:70:57:17:17:f0:af:87:ce:67:c3:c7:63:
bd:b6:4d:1b:50:21:a2:ad:90:1d:2c:9f:96:33:10:
1a:ce:7d:73:08:cd:2f:4e:5c:d2:26:74:9c:1e:87:
d3:ad:50:21:b6:a9:30:95:8e:61:88:c2:03:1f:7d:
cc:4b:71:4e:59:c7:80:ac:35:35:9e:92:8e:ed:9f:
13:3e:5e:66:6b:36:be:d5:87:07:ad:88:d2:07:15:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:01:DD:B2:33:7E:1C:B4:5B:43:3F:0C:57:20:D2:7E:4D:07:42:77
X509v3 Authority Key Identifier:
keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fd:b1:8f:dd:d1:7b:11:1b:74:bc:a1:f2:14:81:f5:74:bc:
50:f7:e5:0a:20:9c:8e:64:ac:60:24:ad:b8:e4:32:c9:c0:27:
48:4d:40:b9:63:0d:0a:e5:d6:1d:cc:64:4b:36:87:a8:03:30:
dd:1c:1e:61:97:8a:9a:ef:40:65:9f:59:6c:21:0a:06:df:08:
29:e2:d8:ef:ee:09:a7:4f:03:91:4e:cd:2b:cb:31:c8:f8:58:
e4:01:df:d8:92:73:b5:a0:90:ff:1f:dd:e3:a0:4f:39:37:69:
eb:2b:61:51:2f:94:c6:dc:e6:f3:e3:20:b7:6b:5e:ed:80:9f:
82:17:ad:a2:53:04:dc:5c:17:6b:9f:c7:db:ff:4f:9c:f1:b5:
c9:f3:87:60:87:50:4d:d2:88:67:ec:1c:fc:18:f2:fb:c8:fa:
e8:e9:81:b0:8a:b2:f0:cb:1c:1f:c9:a2:f5:64:4d:a9:dc:62:
34:d7:05:1b:fe:53:f4:1d:87:51:a5:81:68:39:e5:4f:4f:8d:
63:d0:4a:11:17:aa:73:05:cd:ea:b1:77:f1:db:a5:98:81:ad:
97:e5:f2:66:f9:f7:32:17:38:12:c0:ab:e3:80:3f:cf:0a:bc:
39:f5:75:88:5b:b8:2b:c2:70:dd:69:dd:a2:d8:e5:35:93:28:
55:60:e0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:06 2025 by rpki-client