Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
File: d1xabqkPXz0AfBDkROO5Y7bTDMU.mft (raw, json)
Hash identifier: C1ZDlyisOKz0jFnv+aj5CymnK00Zx3nijfVCc7K2UhQ=
Subject key identifier: 8D:1E:6B:39:CB:94:51:36:B7:2C:83:9A:F1:F1:7D:BF:85:76:5C:52
Authority key identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
Certificate issuer: /CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Certificate serial: 0198D54E5C329637E9D4CF73A315849B5AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
Manifest number: 0423
Signing time: Sat 23 Aug 2025 05:02:19 +0000
Manifest this update: Sat 23 Aug 2025 05:02:19 +0000
Manifest next update: Sun 24 Aug 2025 05:02:19 +0000
Files and hashes: 1: d1xabqkPXz0AfBDkROO5Y7bTDMU.crl (hash: Gqh+SfX3SBROeMKwXudfcr9s/BhOHnKbGBkcbefltm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5c:32:96:37:e9:d4:cf:73:a3:15:84:9b:5a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Validity
Not Before: Aug 23 05:02:19 2025 GMT
Not After : Aug 24 05:02:19 2025 GMT
Subject: CN=8d1e6b39cb945136b72c839af1f17dbf85765c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:37:ab:44:89:1a:eb:83:7c:cc:2f:e8:9d:
81:ac:0d:8d:d1:5a:c6:a0:bc:a0:1b:99:84:7a:c3:
89:1d:21:9b:93:1d:21:99:e6:fa:85:d4:87:60:db:
f2:c9:ca:ae:0f:e8:6a:b7:32:b5:7b:9d:f8:7a:27:
c9:e9:ad:80:4b:d9:12:c1:62:39:2f:fa:27:5b:86:
96:ec:c0:2c:9d:79:94:e4:e1:aa:f7:e9:2b:1f:d8:
e5:9e:bd:e0:df:04:53:a0:fe:f2:a9:5c:94:f6:14:
5e:56:ca:88:69:41:9e:05:af:7f:64:c2:04:6c:d0:
a1:52:4a:f4:00:2f:cb:f3:97:d6:78:73:aa:d8:7b:
cf:3f:db:71:b3:71:80:fa:d0:ee:3e:9f:09:4e:89:
73:8e:b6:d8:7c:ec:49:15:62:44:60:c6:83:31:4a:
9d:da:32:5f:02:83:a8:25:c1:af:2f:3f:4d:46:42:
dd:2a:3c:83:2a:76:e0:02:17:37:e8:c0:9b:ab:ae:
c5:43:09:7c:40:1b:4c:30:b2:cd:3f:75:13:43:cc:
ac:39:f1:ea:4e:02:55:42:61:07:3c:7b:f1:81:8d:
c2:f2:ad:a1:62:fd:0d:6e:c1:f3:6d:f2:56:d1:e5:
f1:4a:02:55:89:27:1d:c1:45:9e:aa:36:fc:67:e5:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1E:6B:39:CB:94:51:36:B7:2C:83:9A:F1:F1:7D:BF:85:76:5C:52
X509v3 Authority Key Identifier:
keyid:77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:30:0d:9f:5e:53:c3:fb:2c:41:9f:85:8b:de:9c:6c:d4:0b:
73:73:6a:73:10:14:a9:a1:87:a2:66:77:34:de:93:86:98:b7:
2e:07:2d:2c:ef:96:a5:e5:82:50:31:e0:8d:12:a5:fc:a3:e3:
b2:e3:d2:0d:5d:e7:50:a0:87:6e:54:cd:84:53:80:7b:ec:93:
c6:f0:1f:87:fa:dd:ed:df:4b:d6:44:56:63:6c:3b:0b:03:ad:
3b:1a:5f:48:57:51:4c:34:44:29:5e:fe:86:10:b9:e4:0c:d9:
b9:0d:6d:98:40:e2:e4:5a:9a:d3:d9:8b:d9:b4:fd:8a:16:36:
74:e3:d1:fd:61:e9:13:fb:07:81:39:00:a6:f7:57:49:7a:b1:
60:a3:de:7e:1e:75:83:f4:56:72:c3:42:0e:de:f6:0b:b6:f0:
ba:31:77:0a:31:b5:07:17:c3:11:fe:2d:9a:06:69:46:79:db:
44:b5:85:9c:c9:df:3e:68:29:5a:62:c2:1d:ae:e0:18:92:a7:
aa:df:02:bd:2e:87:3a:64:5f:ba:4b:9c:a4:ed:cd:ab:dd:29:
2e:08:61:8f:db:f2:3a:fc:a3:a8:7d:4d:53:97:eb:51:8d:73:
ea:5b:54:38:dc:36:f8:96:9b:3d:ef:9e:ab:1d:9c:92:1f:68:
c9:41:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:20 2025 by rpki-client