Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
File: rV3Hd3t3orNHfGernSbMeqAvOIk.mft (raw, json)
Hash identifier: 5/NBX4psgp6vEtnyf49AmpCdoBQ4aBSOdzoDLwZm3f0=
Subject key identifier: E8:FF:54:3F:15:23:EC:60:0F:6A:87:4A:43:58:2A:03:11:81:26:82
Authority key identifier: AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
Certificate issuer: /CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Certificate serial: 0198D4A8130DB8A797CDFA44BC1E916C3792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
Manifest number: 15C4
Signing time: Sat 23 Aug 2025 02:00:41 +0000
Manifest this update: Sat 23 Aug 2025 02:00:41 +0000
Manifest next update: Sun 24 Aug 2025 02:00:41 +0000
Files and hashes: 1: rV3Hd3t3orNHfGernSbMeqAvOIk.crl (hash: cMrmbEyT2ClAjiVEukhNCXPiPelgWCEnCXT1uu5onBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:13:0d:b8:a7:97:cd:fa:44:bc:1e:91:6c:37:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Validity
Not Before: Aug 23 02:00:41 2025 GMT
Not After : Aug 24 02:00:41 2025 GMT
Subject: CN=e8ff543f1523ec600f6a874a43582a0311812682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a9:b6:98:97:b4:07:7c:67:1c:ff:7d:64:ad:
2c:29:c9:92:c8:d9:db:28:d3:17:5d:30:43:95:00:
a3:c8:75:d3:05:f8:7b:08:8e:05:5b:2a:35:ad:64:
3a:84:9e:66:53:4e:26:c0:f3:e2:81:57:1a:27:e6:
5c:dd:c8:98:42:74:91:7c:4e:22:b7:e7:1a:07:e4:
cf:50:43:ae:db:88:d1:c0:5c:ee:b1:11:8d:47:1b:
04:91:e1:fe:64:d8:4e:da:c9:ef:cd:e6:c7:ad:4b:
b7:74:7f:7d:bb:e6:02:9e:98:09:17:cb:c9:62:6a:
7a:cc:e2:87:64:b3:2f:aa:44:33:08:03:89:87:0f:
98:7f:16:c2:f4:a7:1d:db:53:8f:fb:41:2a:b9:24:
68:5d:da:73:10:4b:97:9f:9b:c9:fc:0e:dc:40:ca:
78:9e:82:f5:ad:70:26:4a:85:d1:1e:6f:5c:5e:55:
d0:43:55:23:8f:c5:ac:16:a8:ac:57:4d:8a:b6:16:
21:e6:2f:ce:78:1e:de:d2:10:fc:3e:8d:e1:4e:bf:
08:46:45:8f:2b:50:e4:94:65:6f:d5:9e:aa:05:4f:
fb:ab:0d:a3:6e:c2:3e:bc:49:32:d8:0b:84:c7:e9:
c7:df:9c:6f:a5:9a:82:67:dc:73:07:d5:d0:28:9e:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FF:54:3F:15:23:EC:60:0F:6A:87:4A:43:58:2A:03:11:81:26:82
X509v3 Authority Key Identifier:
keyid:AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:90:76:1e:ad:ee:56:8b:d1:85:17:4a:c9:d7:f5:0d:2b:a3:
1c:89:a3:91:49:53:0b:35:b6:3c:9e:de:95:40:27:27:77:2b:
6e:45:3d:65:c3:0f:24:dd:fc:ca:b0:ee:98:d9:ce:b0:63:05:
11:54:a9:e2:d2:fd:3c:1a:18:4d:e6:b0:6b:a3:09:0c:fb:87:
c2:4e:ca:6a:6a:34:b0:2a:da:15:b8:da:73:80:58:ae:fd:e9:
65:e1:44:61:5e:58:d3:d6:71:89:6d:71:66:de:3f:44:59:7f:
59:c0:6b:9c:f1:f9:eb:bd:0f:4d:29:61:5a:30:25:a6:88:df:
80:d3:28:22:87:6c:e2:77:dc:af:db:63:fa:e5:76:c3:44:42:
8f:4f:44:be:44:27:a1:aa:b0:c8:27:30:fe:46:78:56:7b:4e:
83:f7:72:eb:86:7a:0c:da:a1:63:8b:4c:96:0c:06:1f:16:f7:
47:25:f2:cf:95:c0:46:90:ea:4b:84:a2:00:e4:04:51:11:03:
b0:ef:23:38:01:cb:2a:04:c1:b0:a8:9b:f4:2c:4e:53:71:6c:
a3:0f:2f:08:4a:bb:2d:91:a4:5d:7c:ca:5f:e7:33:c5:72:44:
77:bb:73:3f:12:55:93:49:10:04:e2:01:4b:d7:c0:09:3e:82:
b5:33:c2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:40 2025 by rpki-client