Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File: 0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier: KeRPelV/LH9CqNArO4AOxkJ8qY0zFAYrJVapCttufZE=
Subject key identifier: 5D:07:92:13:9A:27:DC:D9:F8:94:32:77:F8:EA:7D:8F:F3:00:E3:7B
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer: /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial: 0198D73B8B9FC676F6CAE2FCDEC083855D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number: 134C
Signing time: Sat 23 Aug 2025 14:01:00 +0000
Manifest this update: Sat 23 Aug 2025 14:01:00 +0000
Manifest next update: Sun 24 Aug 2025 14:01:00 +0000
Files and hashes: 1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: 2u/ooaVruqOfKfh8dZonNCD2D26TrvlYMDAYk/hTerQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:8b:9f:c6:76:f6:ca:e2:fc:de:c0:83:85:5d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Validity
Not Before: Aug 23 14:01:00 2025 GMT
Not After : Aug 24 14:01:00 2025 GMT
Subject: CN=5d0792139a27dcd9f8943277f8ea7d8ff300e37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:4b:70:9c:64:d4:74:50:f0:1f:cb:f1:53:
26:cf:31:41:6c:aa:20:3b:05:74:e3:b1:50:93:33:
fd:a9:e7:0c:ec:14:61:7c:57:5a:d1:5e:94:b1:98:
67:7f:6c:9a:cf:3e:4d:9c:1b:c2:af:41:54:14:37:
4c:ed:8f:ee:ff:af:b5:22:79:5d:5c:a6:fa:e7:23:
5c:1d:b2:15:e8:cd:a2:75:a6:12:45:c9:e7:cc:74:
bc:12:53:f0:18:7b:09:63:fc:7e:58:5c:ee:7b:a4:
9a:88:47:1c:24:7f:9d:3b:5a:df:ac:41:66:45:7a:
86:9f:9e:77:c3:43:9b:6e:58:90:4e:32:4f:26:62:
4c:a3:cb:58:f5:d1:a5:e4:c8:70:be:8a:62:d3:f1:
c9:8a:88:74:68:5e:11:f6:0e:58:ac:05:1f:87:25:
3e:51:4a:1a:3a:05:16:11:c7:a5:5a:28:c6:e2:49:
cb:7c:47:52:c4:c7:49:a2:e2:0e:73:a1:9e:03:54:
96:3f:be:ff:f1:a9:d8:2e:9e:f2:d9:08:36:b3:84:
aa:fc:53:b1:55:03:ba:cd:78:50:7d:63:63:7f:ba:
49:c1:0c:dd:a0:14:8a:3e:b4:9f:ca:e7:3f:5f:65:
35:b6:27:50:54:87:86:fe:c8:10:d0:07:c6:79:c8:
40:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:07:92:13:9A:27:DC:D9:F8:94:32:77:F8:EA:7D:8F:F3:00:E3:7B
X509v3 Authority Key Identifier:
keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0c:f6:b7:63:63:f0:b1:a9:0d:a8:8b:39:86:02:70:20:49:
3e:eb:54:7f:a5:2d:ec:ff:7e:9d:cd:97:0b:f6:87:87:e6:ad:
46:c8:71:9f:95:d9:9f:ca:eb:05:9a:bb:2c:31:8b:f0:62:1b:
a8:e3:ed:3f:2f:0a:60:3f:31:10:db:48:ae:20:ae:1a:7c:94:
9c:1f:0b:37:9e:fd:f7:ca:aa:3b:d4:db:49:5b:0b:da:f4:90:
13:b1:c3:6c:54:57:bd:11:21:56:b6:17:83:ba:bb:22:1b:0b:
a3:63:31:b7:e0:27:c4:cc:aa:95:67:75:77:77:9f:9d:41:d9:
eb:00:43:8c:fe:b3:63:ba:5c:2b:75:d1:3f:86:74:e0:47:06:
fb:f9:d4:f1:23:d0:f1:22:4c:f1:09:22:af:f2:d4:72:c1:08:
fc:91:e9:e0:eb:d1:0c:54:9d:ff:d3:cf:32:6f:a7:ff:cd:de:
32:03:12:54:95:67:d8:34:66:ab:03:4c:c8:ec:1b:2e:e4:bf:
e4:33:f8:1f:a2:b4:53:26:21:bb:57:86:94:2d:3e:ae:29:b9:
cc:b6:23:6e:4c:9a:f9:e6:e9:8e:ea:19:29:53:2c:60:43:e3:
bf:18:2d:8a:71:72:1d:e5:61:e7:c8:cc:aa:45:ad:63:b4:75:
cb:43:60:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:52 2025 by rpki-client