Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
File: rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft (raw, json)
Hash identifier: Z/QA8YrmvIVYY81MyF6mK0+Zgtiabn1Etd0OyNC+ll4=
Subject key identifier: 18:C3:8F:41:74:EF:24:E0:2E:9C:D2:5C:AD:08:A0:94:C5:C8:54:99
Authority key identifier: AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
Certificate issuer: /CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Certificate serial: 0198D472FC80BA2028C6CA36CC237E809C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:02:42 +0000
Manifest this update: Sat 23 Aug 2025 01:02:42 +0000
Manifest next update: Sun 24 Aug 2025 01:02:42 +0000
Files and hashes: 1: rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl (hash: 3r6cjyJozk77xVT9IUb0oT0frTewDwD9bzOotkT+8fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:fc:80:ba:20:28:c6:ca:36:cc:23:7e:80:9c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Validity
Not Before: Aug 23 01:02:42 2025 GMT
Not After : Aug 24 01:02:42 2025 GMT
Subject: CN=18c38f4174ef24e02e9cd25cad08a094c5c85499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4f:1d:4d:e3:90:f9:cc:8b:1c:f4:06:58:a9:
4f:6c:70:06:9d:33:6c:6e:f4:d8:79:4b:d7:7f:07:
08:55:41:8b:2a:69:77:10:c5:9e:46:60:19:6e:8b:
6f:f5:8b:de:4a:fa:f7:73:87:08:59:10:dc:67:15:
df:89:b1:21:7f:48:5e:d3:e0:b7:ea:cb:de:94:79:
85:75:7f:1d:65:f3:8c:b1:26:95:93:41:ef:a5:ad:
26:73:0a:7c:ec:3d:37:39:a6:46:3e:b1:fa:37:1f:
d2:e7:d8:e1:6a:92:38:c0:18:0a:f9:85:dd:45:f1:
59:5c:dd:8b:40:34:37:f6:c1:38:3b:41:7b:a6:a6:
aa:d3:3a:4c:61:30:9a:38:62:7b:2a:a4:b1:a9:a1:
35:f1:31:27:09:d1:37:43:9b:be:43:e8:e0:1a:ef:
e9:e5:ab:eb:88:d5:1a:d8:18:42:29:6d:f9:75:e2:
85:a3:79:e2:f5:ed:a2:69:ee:05:60:03:bd:16:4b:
e9:f5:ae:ef:11:77:71:ea:7b:3a:2a:2e:3e:4b:f9:
b7:21:58:0a:bc:d0:5d:a9:3c:1a:62:23:96:3a:75:
e3:81:73:4a:8f:bc:53:ef:49:e0:ff:91:84:40:f6:
88:a5:d2:2a:ff:ef:2d:1d:91:b1:4b:fe:b0:3d:a5:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C3:8F:41:74:EF:24:E0:2E:9C:D2:5C:AD:08:A0:94:C5:C8:54:99
X509v3 Authority Key Identifier:
keyid:AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d9:47:2c:69:d8:47:74:df:b9:23:e9:99:2c:15:c5:4c:68:
2d:68:25:9a:b4:a9:f4:f8:e9:56:b8:29:1b:cf:89:6b:98:24:
65:86:4f:bc:07:66:09:8c:c9:ca:b6:00:13:0d:bf:15:f9:e4:
f8:fe:69:1b:c6:75:12:0b:58:7e:ac:8d:50:5f:1c:b6:5c:cc:
9c:d6:8e:d5:c6:3c:04:b0:55:a9:14:80:b7:6c:5b:da:0e:33:
6a:af:06:e3:94:f5:ea:9e:0c:d1:2e:20:7f:65:28:54:6f:5b:
46:91:bc:b8:ef:d2:cf:fb:df:f2:4b:d0:ac:97:8c:35:82:d5:
e1:da:48:2a:bb:84:b7:41:ef:1a:e8:17:33:7f:c6:fc:eb:69:
8e:6b:a6:4b:e6:b3:94:d9:da:c9:97:e6:ef:b3:f8:39:60:ca:
94:67:8c:33:f3:72:31:42:9d:49:ab:25:56:c3:95:59:9c:7d:
1e:ff:5f:cb:91:a1:f8:05:60:5e:dc:f8:71:c3:95:b0:90:a5:
bb:cb:28:90:2f:fb:2b:a1:3b:08:1c:47:d7:91:85:d4:a2:dd:
eb:1e:87:20:71:1c:4f:6f:e4:70:d4:5f:c7:13:fa:de:51:34:
73:93:f7:30:41:04:22:4d:a6:4a:09:3e:cb:91:bc:ba:e0:70:
60:d0:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:21 2025 by rpki-client