Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
File: T1VxCj6EBcGv2mxj6edzZu_GHnw.mft (raw, json)
Hash identifier: U3jYZI0xTHNJdDyf+20FqjUreBBVR4mJEyZdyskcqYs=
Subject key identifier: E4:64:93:43:06:85:9C:3C:1F:8F:39:E6:A8:62:AC:94:37:8E:F5:74
Authority key identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
Certificate issuer: /CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Certificate serial: 0198D4A7854B4D44ABA2F98A8A626D84BCFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
Manifest number: 024A
Signing time: Sat 23 Aug 2025 02:00:05 +0000
Manifest this update: Sat 23 Aug 2025 02:00:05 +0000
Manifest next update: Sun 24 Aug 2025 02:00:05 +0000
Files and hashes: 1: T1VxCj6EBcGv2mxj6edzZu_GHnw.crl (hash: oUpW9moQgyKAHkdsZewIyxWMunF60YJexEBJ6wWGn9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:85:4b:4d:44:ab:a2:f9:8a:8a:62:6d:84:bc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Validity
Not Before: Aug 23 02:00:05 2025 GMT
Not After : Aug 24 02:00:05 2025 GMT
Subject: CN=e464934306859c3c1f8f39e6a862ac94378ef574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:fa:b5:05:b2:98:da:8a:0d:a3:8d:0c:5e:
c4:d4:c0:53:ba:1d:d3:a3:7f:1f:e5:dc:1c:ec:89:
1c:62:13:78:6b:31:eb:6c:5c:21:49:cd:df:a9:97:
34:60:4c:c6:db:56:80:5f:3b:95:00:8d:93:e5:cb:
6f:0d:e4:75:88:e0:b2:02:82:8e:eb:ed:98:57:11:
09:64:d6:71:ef:46:e2:06:93:e2:89:83:a0:32:bb:
1e:4a:35:6f:b8:5e:95:82:6c:68:8b:04:7a:06:74:
f3:dd:5d:b2:6f:85:e4:c5:51:ce:1f:fb:70:ae:85:
a2:33:bf:b8:d9:98:8e:44:8f:71:f2:93:47:da:f6:
64:3e:bd:e2:c9:18:fe:40:7c:54:f9:83:91:5b:9d:
19:6e:47:bb:2e:2e:0a:17:d8:6a:e0:1e:db:15:e5:
1b:a5:a3:1b:15:69:1c:65:73:da:10:e5:77:61:dd:
09:b5:04:79:3f:d9:53:01:85:a2:32:2c:56:4d:21:
66:76:71:84:29:f4:a6:5a:93:22:83:82:0e:47:95:
96:3b:d2:78:fc:33:91:b2:88:4b:2f:77:8a:04:07:
77:43:d5:aa:53:68:9b:e0:b1:92:92:c8:9b:14:04:
32:4d:ec:57:9f:b4:35:30:b5:8f:97:2b:5d:a4:5e:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:64:93:43:06:85:9C:3C:1F:8F:39:E6:A8:62:AC:94:37:8E:F5:74
X509v3 Authority Key Identifier:
keyid:4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:8b:2c:b3:f4:a6:b8:5e:aa:66:a1:f1:2b:84:8a:e0:25:5a:
7d:22:d3:bd:3c:21:0f:6c:12:ed:37:05:59:2d:2d:e2:3a:57:
5b:29:b6:bc:d8:ca:fd:19:6e:93:84:0c:0a:05:e7:39:77:1f:
da:a2:cd:e2:ca:3e:61:25:58:da:b8:3b:b8:44:8f:8e:4a:e5:
6e:c5:c3:20:ab:eb:8e:9d:9b:c1:56:ec:34:ea:b5:a9:da:e7:
3f:58:3a:9d:91:fc:78:0a:a4:6e:a1:09:a3:e9:1d:ad:a3:8b:
00:dc:d0:6f:4d:77:53:de:74:d6:20:0f:c8:e2:22:50:c9:70:
31:75:b4:68:98:d1:c3:79:21:fb:4a:ad:8b:35:d4:57:06:81:
9c:04:eb:34:39:58:89:88:f6:88:c1:73:00:ca:87:f4:5a:a2:
ff:98:f0:aa:5d:84:4c:ec:22:5e:05:ac:b5:11:2d:a7:b9:65:
d2:10:df:ac:bf:27:c2:21:ef:55:4b:24:34:30:b6:f7:1e:65:
a1:9b:b2:e1:6b:e0:d8:35:2e:bb:8c:22:5a:2f:16:68:bb:c7:
34:1c:a8:5f:d5:05:cd:ec:36:6d:9c:83:f7:5d:29:45:77:ba:
a3:e9:10:86:e5:ef:a6:f0:ec:6f:9c:8e:2e:b4:67:6e:ec:85:
f1:4f:c4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:32 2025 by rpki-client