Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: aBPs7F+ytr3j0DaE3Yzv4Dq+gX3FK9CAo81Ld0vEnkY=
Subject key identifier: 9E:43:BB:25:03:1F:3E:B9:19:E1:20:90:DF:55:59:68:5E:E8:78:5E
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 0198D6CD7F3EDEDDE5664AFD72204D072852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0C4A
Signing time: Sat 23 Aug 2025 12:00:48 +0000
Manifest this update: Sat 23 Aug 2025 12:00:48 +0000
Manifest next update: Sun 24 Aug 2025 12:00:48 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: 2beD3CFQe2fga+CFSX3+Cs70ifVcd5wUamXZC8PcRDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:7f:3e:de:dd:e5:66:4a:fd:72:20:4d:07:28:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Aug 23 12:00:48 2025 GMT
Not After : Aug 24 12:00:48 2025 GMT
Subject: CN=9e43bb25031f3eb919e12090df5559685ee8785e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:27:d0:cc:eb:40:4f:34:fc:e5:ae:df:8c:
0b:eb:d8:dd:6a:e4:b7:74:37:17:58:db:8c:e1:b2:
81:f1:15:ca:4e:ff:db:42:20:64:8c:db:27:c1:ec:
52:9a:c8:9d:5e:02:c6:10:86:fa:40:f3:78:83:bf:
40:6d:04:0f:a6:04:b0:77:f0:53:df:0e:45:7b:05:
82:6c:23:82:69:db:9b:58:fa:8e:ee:45:50:93:53:
ee:53:59:3e:fd:0e:57:cf:85:25:ef:d9:f9:c2:06:
53:6a:ef:b0:7b:56:1e:de:d1:cd:e7:c0:90:c4:c4:
3d:85:d6:12:df:2c:87:92:d1:50:d8:69:86:9e:7f:
6f:4d:15:96:99:de:df:c4:34:b0:48:5c:e9:e4:df:
be:81:ee:8d:53:cc:d6:0a:83:68:92:45:56:fa:cf:
27:3d:ac:4d:3f:18:28:5e:24:0d:56:37:b2:af:e3:
7e:9e:d9:ba:54:5d:f0:5c:07:89:22:ee:f9:55:39:
2a:c0:57:00:93:b5:27:38:6d:34:9b:7f:17:f8:91:
68:11:74:32:74:9a:e1:b3:f3:3f:d3:72:c7:18:79:
38:27:f8:8a:aa:24:c7:db:07:a5:83:26:e7:74:62:
80:71:60:36:d8:fc:bd:cc:48:80:ae:a4:cd:54:82:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:43:BB:25:03:1F:3E:B9:19:E1:20:90:DF:55:59:68:5E:E8:78:5E
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:da:e4:2c:63:79:fc:59:18:2c:33:e7:56:71:80:fe:f3:07:
a5:0a:04:13:9e:6f:9c:cf:e5:7f:f1:ee:d0:2d:7d:18:d1:cb:
a1:9d:43:41:e8:10:8e:ac:bb:c8:7c:8d:49:cc:76:c8:d7:c3:
02:18:2d:6f:18:c2:22:48:96:92:68:61:ee:7c:62:a7:73:9d:
00:39:e0:3c:50:54:b1:67:26:7c:3a:2f:1b:43:56:4d:68:ed:
ca:14:75:0a:35:aa:ee:50:6d:ff:b3:db:51:cb:64:96:64:25:
bf:43:b1:b1:b3:50:9b:2a:91:69:a5:86:75:df:37:ed:db:ae:
40:86:ae:e9:48:53:c3:de:2b:47:3a:82:a7:de:e3:07:72:8b:
04:21:78:da:27:ee:6a:16:60:87:af:88:73:a7:43:ad:c9:ed:
15:bb:13:3a:f6:88:f4:f9:86:db:b0:4a:5d:c3:ed:57:ff:a3:
9a:ce:c1:71:c4:ab:35:29:b6:1f:4d:da:4e:6f:b2:f5:fd:20:
e2:b5:55:bb:54:77:00:68:a2:aa:7f:bf:55:1e:7d:76:09:7b:
fb:d3:f9:56:33:49:62:40:3f:82:98:38:14:98:01:bd:ca:7b:
7f:41:03:e8:3e:26:af:77:3d:b7:61:20:a7:6f:37:0c:5f:fa:
07:17:a0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:18 2025 by rpki-client