Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
File: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json)
Hash identifier: nCMBD0UWz2JMSFHoooOXF8kf9Ux2hQej51t2EBh1rcA=
Subject key identifier: B3:EF:47:3A:EE:C6:AF:C5:FC:A5:C7:2E:43:F3:63:88:5C:FC:7A:7B
Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
Certificate issuer: /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Certificate serial: 0198D73B909CBB33C5B28025C2847B2AEDF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 14:01:01 +0000
Manifest this update: Sat 23 Aug 2025 14:01:01 +0000
Manifest next update: Sun 24 Aug 2025 14:01:01 +0000
Files and hashes: 1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: BRfkoEVUhgZQGueezNtqjgMuecG5F2GYRUBq/80IPXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:90:9c:bb:33:c5:b2:80:25:c2:84:7b:2a:ed:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Validity
Not Before: Aug 23 14:01:01 2025 GMT
Not After : Aug 24 14:01:01 2025 GMT
Subject: CN=b3ef473aeec6afc5fca5c72e43f363885cfc7a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:30:d9:66:aa:a3:2b:0d:86:fb:11:1f:e0:97:
fa:9f:aa:08:31:1d:b8:33:2f:b9:a7:65:bc:b6:91:
ca:a2:68:94:c5:47:50:1b:0d:07:fe:9d:41:ce:73:
49:b1:6c:16:ef:9d:38:b6:ca:5a:2b:10:34:d6:39:
f3:f7:74:11:8d:dd:68:01:13:c1:4d:bd:34:32:87:
54:4b:7a:52:0f:45:55:86:ee:fa:39:82:73:e2:40:
b5:35:76:8d:55:0b:1a:61:0b:b6:92:c2:3e:3d:95:
31:e0:03:a6:6b:fb:fe:80:0a:48:1d:9d:d0:dd:69:
2c:88:38:e5:9a:ce:77:3f:ca:9e:ce:0d:a2:da:79:
67:66:bd:70:8f:df:81:1a:97:ea:e6:4a:ac:4a:f3:
9f:d2:a3:41:80:8d:6c:22:d0:e1:8d:11:52:de:d5:
54:bf:f2:a2:9a:06:a7:05:e5:ce:28:9e:f6:cb:eb:
01:c1:92:34:64:3a:67:1d:59:a7:af:6a:d3:e1:15:
f7:74:aa:7c:5e:59:83:99:91:54:c4:dc:b6:66:01:
e8:0f:dd:69:d4:f9:b1:fb:0c:c5:b1:cd:be:22:5d:
02:2a:64:5b:85:dd:b6:48:27:8e:d8:89:3b:be:91:
67:c7:89:5a:c4:51:4f:17:14:f9:1b:72:d5:8c:27:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EF:47:3A:EE:C6:AF:C5:FC:A5:C7:2E:43:F3:63:88:5C:FC:7A:7B
X509v3 Authority Key Identifier:
keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0d:87:91:66:82:ad:e9:36:7c:50:29:b5:75:03:09:ef:1c:
02:9f:5a:68:ed:00:1b:e9:86:2a:ee:bf:d4:ab:b2:e5:d0:ad:
42:d7:c1:60:ae:af:bc:13:86:33:82:36:f3:6c:cc:1d:cd:7a:
e4:03:0f:0a:92:7f:67:48:83:74:84:0c:fb:b5:b7:36:1e:04:
27:20:3d:7d:f9:9f:e6:b9:d8:b5:82:5c:6e:c1:e4:a4:7b:5a:
35:d4:cb:fb:29:28:4d:8e:52:73:9e:b4:f6:45:5c:43:97:60:
93:a9:9a:3e:16:6d:32:7a:84:f2:22:5e:44:8d:5e:0d:29:f1:
74:9f:b2:d6:96:96:8c:f6:14:08:df:c2:9a:6e:f1:7d:ac:68:
cc:35:ad:89:97:5a:54:c8:d8:35:3a:5b:81:3f:5a:1d:73:36:
eb:26:ef:23:b3:89:ba:a1:fb:68:22:83:ce:e2:b1:57:05:7b:
09:54:b8:2c:e7:b5:11:9e:2c:19:01:27:20:f4:b5:4c:3d:5c:
f8:80:5f:7f:e3:b2:7e:31:f2:40:11:8e:49:1c:3c:ed:f6:77:
b6:b9:a0:c5:9b:13:e1:fa:a9:7d:b1:9c:70:75:f0:60:6a:ed:
49:32:9b:0d:b6:89:cb:14:63:99:43:b3:66:41:a9:e9:98:1e:
1c:54:12:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:39 2025 by rpki-client