Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
File: Ad0iu63J75fJwaOGG21rTE3dhoc.mft (raw, json)
Hash identifier: cTnNDdQTkL/6kTIq+sTo2KREqtmL108sMyLVKoXS1eo=
Subject key identifier: 89:97:FE:52:01:DC:59:02:8A:2A:6F:1D:CB:F9:EB:E5:F6:D1:30:D1
Authority key identifier: 01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
Certificate issuer: /CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Certificate serial: 0198D47392BA1954AFA3B3B119485E757CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
Manifest number: 103A
Signing time: Sat 23 Aug 2025 01:03:20 +0000
Manifest this update: Sat 23 Aug 2025 01:03:20 +0000
Manifest next update: Sun 24 Aug 2025 01:03:20 +0000
Files and hashes: 1: Ad0iu63J75fJwaOGG21rTE3dhoc.crl (hash: BEkf9tubGoZBXQ8gnH9EXhk+n1/VZkQ/KxBQZ2iVVIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:92:ba:19:54:af:a3:b3:b1:19:48:5e:75:7c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Validity
Not Before: Aug 23 01:03:20 2025 GMT
Not After : Aug 24 01:03:20 2025 GMT
Subject: CN=8997fe5201dc59028a2a6f1dcbf9ebe5f6d130d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:56:13:44:c7:dc:e8:f7:e2:76:7b:b5:36:
fc:5a:af:20:8f:88:39:d5:d2:f3:8a:5e:ab:f2:b5:
55:e2:43:3b:f4:32:fd:b9:2f:bd:9e:87:6b:33:5e:
35:47:1b:ea:7e:1a:ed:96:4c:29:09:fb:40:d5:3d:
6d:27:16:51:54:19:b1:6d:0a:9b:3f:5e:05:8d:43:
8b:f3:ee:36:ab:ad:2e:74:e8:53:bc:d2:14:27:f9:
36:33:a2:98:7f:c8:9d:c4:f5:cb:22:5e:95:16:60:
9f:d3:96:02:59:34:44:47:e6:39:ad:e3:42:a2:d4:
3a:10:29:c8:94:26:b8:93:3a:44:7d:eb:b6:da:e9:
2c:bd:d0:fc:5d:1d:36:b9:07:fd:9e:8f:0c:dc:6e:
08:07:c0:52:6e:51:17:f9:10:b1:0a:9b:5e:d6:60:
bb:e3:8b:f6:42:7d:73:b2:dc:ac:49:d1:e0:62:7c:
4d:7d:5e:54:db:37:81:b2:f7:68:26:bf:53:65:46:
05:ce:e2:dc:ce:7a:fd:c6:e3:a5:a1:c1:eb:fb:c1:
ab:5e:be:51:4b:4f:b2:68:a0:66:8d:f4:68:8f:f3:
e4:c7:9d:4c:4f:8c:65:15:09:df:33:17:50:7e:66:
38:7a:ca:48:1a:91:17:17:e1:61:47:e2:df:b2:ee:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:97:FE:52:01:DC:59:02:8A:2A:6F:1D:CB:F9:EB:E5:F6:D1:30:D1
X509v3 Authority Key Identifier:
keyid:01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7c:3e:42:a0:9a:79:57:8e:3f:4e:0a:15:ea:ce:8c:9f:ad:
9c:7a:e0:05:0d:06:a2:0d:ad:bb:b0:9e:62:b6:bf:c3:bd:99:
42:26:65:06:ee:bf:ff:9b:85:8e:02:7d:ba:8d:90:68:fc:12:
7c:ea:d3:c3:d1:45:56:40:5d:0c:d1:4b:d0:38:46:e8:f2:ed:
2f:b6:ce:bc:50:69:e0:c1:d1:d4:25:79:28:13:f4:6d:a4:08:
f9:c3:9c:d1:70:6c:ae:86:2f:0a:cd:6b:49:e7:d6:b7:e4:42:
ca:79:9d:40:69:a4:67:4d:2b:9e:ca:55:2b:55:d7:ef:dc:18:
d3:fb:b0:64:36:17:d7:ea:ec:5b:12:90:69:fe:1a:25:ac:32:
6e:43:c9:7d:fc:c3:0e:4b:29:52:54:97:5e:67:95:d5:89:99:
25:88:6f:ea:1c:62:8d:3e:de:26:67:31:47:c2:62:5c:35:44:
25:c6:43:a8:4d:75:a9:dd:b2:ce:32:9b:98:d2:43:a1:49:c2:
b9:80:a6:f8:f9:5e:b5:2f:1b:7c:d6:94:68:49:bf:ef:4b:ad:
0c:4f:44:0b:cc:cb:5a:24:8c:3b:06:da:82:1a:2e:80:ba:b4:
9e:9a:d1:97:62:bb:73:bf:42:20:9e:8d:75:7c:99:15:c0:42:
b5:c2:20:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:04 2025 by rpki-client