Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File: V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier: IPcL6lMXH7QzqWQxSFB+gJwYz93LwbqGSK/CP1N8Htc=
Subject key identifier: 8E:9C:E2:AB:83:18:61:70:61:51:EC:E5:5B:2C:5B:E4:5D:89:E8:57
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer: /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial: 0198D65F4BA4A3BD794D905440018B12ECF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:26 +0000
Manifest this update: Sat 23 Aug 2025 10:00:26 +0000
Manifest next update: Sun 24 Aug 2025 10:00:26 +0000
Files and hashes: 1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: bidTFf+EXrbg0+0yAF8TK1M7Eqn12KOsu0IXFgZFpxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4b:a4:a3:bd:79:4d:90:54:40:01:8b:12:ec:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Validity
Not Before: Aug 23 10:00:26 2025 GMT
Not After : Aug 24 10:00:26 2025 GMT
Subject: CN=8e9ce2ab831861706151ece55b2c5be45d89e857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:8c:56:ad:d5:a6:25:56:7a:7e:99:0d:59:
e2:2c:c4:66:d8:a5:e8:4d:e6:84:4f:d3:ff:03:b6:
27:b1:ac:a6:e0:9a:33:4c:e2:02:8a:af:4e:21:47:
4c:0b:0d:97:bb:83:7b:51:21:58:a5:30:3c:cc:4a:
7f:1a:9e:2f:54:ab:08:90:4e:a2:57:7a:59:06:ec:
27:63:35:a6:02:5a:55:fd:37:58:19:bd:f7:54:b0:
71:0f:f4:4e:c8:3f:1f:1c:8a:a3:cb:f5:2d:6b:86:
3b:89:91:33:52:a0:91:98:b9:3f:47:94:81:af:dd:
35:4c:72:21:37:ff:5f:09:e2:43:82:a8:ae:66:41:
96:87:92:9e:f9:3e:9f:06:55:f4:81:91:90:96:be:
26:fe:8d:15:85:3e:5f:e2:f8:a7:be:fc:5d:e6:2a:
a6:de:1c:24:f7:47:5a:27:a5:c1:52:12:aa:46:ad:
09:9d:96:25:4b:e2:38:1d:3d:25:52:76:f3:53:4c:
0f:35:15:c4:a2:d1:3e:a7:c8:f4:ce:9b:24:97:86:
92:13:1f:12:84:b0:86:4f:86:03:eb:b3:aa:4e:c8:
86:f8:69:b5:76:81:e3:bc:7f:45:6b:7d:ad:4a:4d:
49:68:76:4c:83:06:f6:d2:84:3c:67:a5:45:87:cf:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:E2:AB:83:18:61:70:61:51:EC:E5:5B:2C:5B:E4:5D:89:E8:57
X509v3 Authority Key Identifier:
keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:db:06:58:f5:9c:54:57:64:9c:f4:5e:2a:a7:34:35:92:f8:
5e:90:57:39:b9:a3:a9:22:94:7a:c8:20:84:ac:9b:3d:a7:9c:
b9:8e:41:f6:1e:8e:dc:5a:cd:58:f2:5e:50:40:74:3d:ea:33:
ec:3d:e9:75:0e:b0:ec:e8:53:10:48:32:32:d2:54:4d:2b:03:
69:b5:79:1b:1c:bd:c7:5f:93:1b:e9:13:11:e3:53:05:29:a4:
ed:82:34:34:f6:36:a3:15:b7:63:79:61:0f:b3:98:7a:23:ce:
86:55:1f:57:32:1e:6d:51:fd:87:09:47:47:c3:e2:9c:0a:36:
ee:ab:32:50:db:73:3f:53:5b:41:48:a5:9a:1c:06:65:f5:50:
5b:00:15:0f:d8:7a:bc:84:30:99:ac:ea:e6:31:63:52:4b:b2:
c5:78:11:cf:d8:9d:3b:59:2f:22:0f:8b:46:d9:cc:9b:71:6c:
d2:c7:c5:4b:5a:d1:00:10:d2:20:0b:9d:3b:d1:ee:d1:df:97:
7a:e1:4f:4f:05:52:3b:64:a1:08:02:16:52:72:0f:04:64:cb:
37:64:27:cc:d7:50:ed:d0:36:55:dd:f1:a3:2f:dd:d0:04:9e:
43:f8:a4:26:8f:05:20:06:cf:6c:8f:c8:c7:39:76:b8:0e:c5:
36:77:91:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:56 2025 by rpki-client