Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
File: Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft (raw, json)
Hash identifier: yeOvx+HT27gevVzzcbyOq/dO5jCWhDxrf8OaFbFFt9Y=
Subject key identifier: 73:9D:AF:08:DA:DC:82:D4:A0:7F:56:EF:4F:0F:16:7D:85:F3:AB:2C
Authority key identifier: 46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
Certificate issuer: /CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Certificate serial: 0198D5161116DB1ACB1CA0909816FC0EEA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
Manifest number: 1306
Signing time: Sat 23 Aug 2025 04:00:49 +0000
Manifest this update: Sat 23 Aug 2025 04:00:49 +0000
Manifest next update: Sun 24 Aug 2025 04:00:49 +0000
Files and hashes: 1: Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl (hash: MlZU+R6f++Q1EJaPOn+1mzQi69UuBH/fxqgBhSaDuPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:11:16:db:1a:cb:1c:a0:90:98:16:fc:0e:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Validity
Not Before: Aug 23 04:00:49 2025 GMT
Not After : Aug 24 04:00:49 2025 GMT
Subject: CN=739daf08dadc82d4a07f56ef4f0f167d85f3ab2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:40:b1:5a:d4:d7:5c:8f:55:ea:6d:0a:e3:
2a:41:97:bf:cf:3c:1f:b6:15:5d:95:3c:a8:9e:82:
35:5a:ca:3f:99:31:88:5a:c5:26:48:df:ad:7a:3c:
bc:3a:db:1c:7a:fc:94:fb:e5:1a:e4:8c:19:2f:70:
7b:e7:15:67:89:53:3e:c4:25:9c:2f:ad:df:a8:87:
dc:60:a8:12:8e:2e:41:c8:59:f8:24:8c:77:88:a8:
20:6b:8f:6a:fc:59:33:b2:df:57:02:76:61:83:f1:
c6:b8:24:75:ea:69:fc:fb:bd:b8:c0:bb:12:2a:f1:
f7:d6:90:44:43:45:f5:77:9c:95:13:7a:63:20:46:
7c:28:f3:83:4d:a0:79:a1:f4:cc:6f:83:80:82:75:
be:18:e5:4e:9b:82:2b:4e:27:da:7a:24:60:c9:eb:
70:1d:9e:01:54:18:75:28:3d:67:db:6d:18:55:6d:
df:f9:5d:b1:1f:d6:13:a2:a6:38:62:9c:2d:4b:09:
ac:e0:5c:be:ad:fd:1e:0c:02:87:38:25:92:63:e6:
11:c8:07:0a:3f:a8:6d:5b:8e:8e:fc:e1:81:e0:af:
a3:ff:4a:f0:2a:ac:9a:c5:cf:9d:7a:7a:22:90:39:
32:63:a6:f5:37:e3:04:59:36:6f:bf:d3:b7:b9:c7:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9D:AF:08:DA:DC:82:D4:A0:7F:56:EF:4F:0F:16:7D:85:F3:AB:2C
X509v3 Authority Key Identifier:
keyid:46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:59:8b:b3:1e:40:ce:15:f7:d5:21:46:84:24:d7:6f:e4:ac:
6c:ce:b7:e3:2d:3c:e4:cb:23:e3:95:69:57:6d:51:4d:67:93:
79:77:a8:57:d4:cd:a7:60:e8:13:37:d9:7c:2c:21:f9:27:eb:
e2:c9:56:96:e0:bd:f1:db:32:c2:83:c6:10:5e:96:2a:e6:d0:
a8:37:d9:71:5b:fd:70:24:01:62:03:68:d7:4c:60:d8:58:5e:
72:70:2b:45:58:cb:7e:83:4d:ea:9d:e9:29:20:05:b8:1c:ea:
d0:01:e7:31:38:4d:d9:3d:49:cf:64:17:11:67:ce:7b:a5:76:
8b:33:cf:42:79:98:7a:0a:12:1d:6b:61:13:53:28:8c:79:5a:
45:b2:d5:82:19:a1:d0:d5:15:dd:d0:a1:1f:75:1f:fc:fd:cd:
f7:80:7b:4e:b3:6c:d2:51:34:24:78:c2:d9:6a:fa:f1:03:62:
33:f5:9c:0f:2e:49:e4:e8:a9:eb:b6:f0:7f:1d:5f:69:f7:bf:
28:1d:20:3b:cc:f7:fc:40:a8:86:ec:2c:db:78:8d:e3:70:f7:
57:59:cf:68:c5:27:1c:e0:b9:db:7a:cc:a3:c7:7f:4f:ef:bd:
58:cc:01:f2:e5:7e:2c:d3:b2:3c:b4:14:00:f5:fc:54:d9:57:
a5:5b:2f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:47 2025 by rpki-client