Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
File: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft (raw, json)
Hash identifier: aIXCzP/2tr59EiZr+KAOl9drs+WYa+oF2Rv6Tck4WvU=
Subject key identifier: 61:71:12:C1:75:8D:CF:CD:50:DC:B0:E1:15:D7:41:45:93:79:00:24
Authority key identifier: 46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4
Certificate issuer: /CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
Certificate serial: 0198D472EC6854129B026D3A57FB52E6A367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
Manifest number: 05A3
Signing time: Sat 23 Aug 2025 01:02:38 +0000
Manifest this update: Sat 23 Aug 2025 01:02:38 +0000
Manifest next update: Sun 24 Aug 2025 01:02:38 +0000
Files and hashes: 1: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl (hash: kqu+6GuKrWAyXEA3ck0QR7kzM4KuqH8mqa7SULexsfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ec:68:54:12:9b:02:6d:3a:57:fb:52:e6:a3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
Validity
Not Before: Aug 23 01:02:38 2025 GMT
Not After : Aug 24 01:02:38 2025 GMT
Subject: CN=617112c1758dcfcd50dcb0e115d7414593790024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:a9:23:2f:12:6d:12:07:86:4b:06:bc:4b:
c3:72:b6:ee:ca:57:da:58:69:8c:87:3f:2b:6f:35:
5b:7f:28:b6:ef:1f:ac:ed:52:d4:db:78:b4:d6:6d:
71:f5:aa:3b:57:66:12:db:01:a9:70:66:db:e3:aa:
16:eb:1c:54:a8:55:18:3d:7c:2a:ac:e8:32:22:f4:
b0:1e:c3:dc:f8:0f:53:26:7d:45:1f:91:56:f1:78:
2b:43:d5:36:a4:48:98:4e:bf:a5:16:60:74:21:fc:
ed:81:d6:72:bd:5e:79:9b:71:e4:33:ce:09:bc:9e:
38:a9:df:d1:38:e3:7d:fd:a3:af:41:0c:c8:d7:58:
64:22:1e:1e:4d:58:30:7c:64:32:b2:e0:2e:aa:4b:
13:66:e1:03:ad:71:89:c9:f9:8e:43:e0:60:f0:90:
82:83:ab:ac:2b:25:7a:5c:a2:e0:ee:cb:15:7f:c6:
bd:10:08:8a:15:35:01:aa:4c:9b:59:a2:7d:b2:22:
f5:a9:46:05:63:db:29:37:4a:46:12:05:0f:10:93:
33:0d:90:e4:5c:03:26:03:85:c8:74:26:4d:6a:63:
7e:a9:90:b6:bc:f8:dc:0c:91:42:7c:6b:f1:b4:4a:
1c:22:d7:f9:c1:3e:13:d3:a2:33:4e:64:0e:c7:20:
2b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:71:12:C1:75:8D:CF:CD:50:DC:B0:E1:15:D7:41:45:93:79:00:24
X509v3 Authority Key Identifier:
keyid:46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:81:59:f2:7a:4f:43:e2:9d:57:46:33:b5:40:72:1e:62:ea:
ab:c7:10:6b:22:5a:4b:74:c9:ec:1f:82:e8:99:4a:55:00:2b:
3e:5f:14:ed:a5:40:fe:f8:ef:e4:f8:be:3d:e9:b0:e8:b2:c1:
bc:90:aa:05:97:94:e4:5c:0d:60:64:b3:91:9d:2d:76:72:28:
1c:be:8c:ef:3c:ac:24:ae:fa:ce:a6:94:fc:67:b6:21:47:76:
87:73:a8:91:c9:9d:e0:3d:eb:76:51:d2:0f:4b:77:8b:12:c6:
60:66:fc:d0:c5:39:3e:fb:4f:ae:5d:f2:fc:18:99:0f:bd:ed:
7a:e2:d9:bc:b8:b7:d0:13:48:ab:79:0b:46:5c:85:ea:5a:30:
95:99:ae:9d:9e:6a:1d:45:7a:10:2d:b2:46:cf:1b:7f:b2:89:
cc:9f:10:0c:ab:bd:17:f7:71:05:43:6d:c6:81:2e:e5:29:e8:
af:68:29:b6:d6:c5:df:9b:7b:04:77:d2:6e:d4:85:65:c3:47:
4f:a8:c7:56:3b:1b:72:5b:ea:9f:9a:97:59:a7:7e:7f:43:54:
af:19:3f:2a:5b:4c:65:89:41:7b:8f:e6:1f:0b:f9:55:63:62:
f8:58:a3:8b:4c:f4:ea:2d:bb:70:a6:28:38:31:74:fa:a1:cd:
36:36:ea:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:02 2025 by rpki-client