Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: aR9oLIE2EOP9bjHDTmmfqf0srrznMBnkoa+vLT6g6Es=
Subject key identifier: 23:55:AC:B4:54:88:2C:84:8F:94:34:55:EC:04:13:8A:3F:6E:B3:ED
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 0198D660B40D4EA4739B3333FC582813451E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:58 +0000
Manifest this update: Sat 23 Aug 2025 10:01:58 +0000
Manifest next update: Sun 24 Aug 2025 10:01:58 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: 7AE6HVzkodnud1t2bDF5kfjRU6XxtGWPA+q/MVNaGo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b4:0d:4e:a4:73:9b:33:33:fc:58:28:13:45:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: Aug 23 10:01:58 2025 GMT
Not After : Aug 24 10:01:58 2025 GMT
Subject: CN=2355acb454882c848f943455ec04138a3f6eb3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:98:43:9e:a4:13:25:d1:37:f8:3c:35:5c:
a6:3b:d5:2e:3f:c8:68:fd:ce:ee:6b:fa:b9:75:2a:
c0:88:44:01:10:fe:d0:7b:b2:58:83:a2:b7:a7:52:
b8:06:d6:46:18:04:27:ad:84:8c:f5:f9:ec:97:b4:
d1:76:d0:11:20:03:1e:c1:04:d7:c4:cd:d1:c9:44:
d1:a9:ae:d9:1e:7b:8b:4a:d0:d7:57:58:0e:e1:b0:
59:d8:e4:bc:2c:ac:61:ab:b5:99:e5:3a:49:5e:1e:
60:a2:0c:4d:f8:68:1a:2f:4a:11:41:98:36:01:0d:
88:7c:4a:e3:02:f1:48:e6:25:6d:e7:16:ab:29:8f:
37:2c:b5:ad:be:93:46:33:65:e7:33:80:a6:c4:37:
e4:76:10:2a:b9:cb:b5:4b:30:e3:bd:1f:96:e1:db:
0f:2c:b8:34:02:6b:0e:bf:1d:83:42:27:82:06:c7:
8e:fc:c8:8c:25:d7:eb:94:b4:ea:ef:a8:4d:8d:1e:
15:e5:c8:25:99:d8:9b:31:31:1c:30:f0:b1:2d:53:
c6:fb:52:ff:e2:95:d9:4d:f8:a2:78:aa:1a:01:eb:
06:96:5d:f7:34:c7:be:2a:99:14:ea:fe:42:c2:58:
6f:2d:3a:ad:91:d9:ea:47:73:a4:aa:e2:bb:0f:8f:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:55:AC:B4:54:88:2C:84:8F:94:34:55:EC:04:13:8A:3F:6E:B3:ED
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a9:bc:0a:82:73:f2:05:23:24:f4:e9:e9:55:2f:80:9b:c3:
71:09:86:34:7e:a9:23:5a:4c:8b:36:a3:61:0a:c7:2b:39:7f:
7e:5b:56:17:49:a3:d2:ec:e2:a9:17:cb:70:4f:4f:35:41:17:
d3:9e:6a:8d:ba:b3:f5:05:1e:8f:ec:7d:4e:c2:e4:76:3a:8d:
8e:a6:7a:6a:49:03:b3:e8:09:97:5c:75:2a:90:2a:4a:3e:84:
ed:5b:b9:f1:fd:ae:69:2e:28:83:61:9f:cb:ce:59:73:6b:5a:
e1:1f:02:2a:db:04:94:6e:96:9f:55:b6:2d:56:00:89:5f:7d:
9e:d6:c6:f4:9e:64:88:e8:eb:df:50:f5:55:2c:77:25:fd:bc:
24:5d:3f:d6:c2:61:d7:74:0a:3b:dc:d1:be:9c:2a:ba:1d:89:
f2:b8:e9:c7:32:51:f7:fc:df:fd:20:1a:49:36:8c:f4:6d:f7:
b6:8c:33:b0:12:c8:c3:b4:1a:79:5c:1d:9a:e0:13:0e:3c:6a:
06:c7:a9:7a:b3:1f:f4:02:7a:eb:68:74:04:22:a5:85:94:8c:
96:a1:40:21:c5:db:99:e3:7f:0a:8e:ad:e1:18:fa:1a:df:a8:
9d:e3:7e:b6:88:98:3c:79:c7:53:ae:8c:2f:03:b0:ff:1f:40:
75:9d:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:30 2025 by rpki-client