Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
File: dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft (raw, json)
Hash identifier: v3HB3t7taQXVFGKgHwOMpqpekIVfE+sv0zYHaYBTL7o=
Subject key identifier: 19:F8:9B:80:43:D6:1A:F2:9E:01:02:F3:2A:0E:BA:10:5A:B4:0A:7A
Authority key identifier: 74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
Certificate issuer: /CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Certificate serial: 0198D4A831C724AFFAADA2FA6AB2B6EC28E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
Manifest number: 0F3D
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl (hash: sl94Ajyc6KFtEz3BAdK3iLh2CPJ6kq8reAzg9aeFog0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:31:c7:24:af:fa:ad:a2:fa:6a:b2:b6:ec:28:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=19f89b8043d61af29e0102f32a0eba105ab40a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:ed:24:4f:09:41:90:e9:17:f5:c2:dc:d0:
3a:86:bd:46:c5:77:ae:8d:95:57:f2:37:ec:ed:b4:
29:9e:c1:3d:62:75:67:4a:07:24:7f:ee:77:85:53:
65:95:8d:46:fc:89:f4:3a:3b:eb:8f:4c:74:76:fc:
48:ec:c3:df:84:43:14:1e:d3:d3:0c:25:a1:30:ad:
fb:b5:5a:81:f2:3d:a4:c3:d6:15:ab:3b:81:f0:18:
67:b6:3c:db:a8:20:9e:56:62:3c:e6:8b:78:46:1d:
5b:c3:5f:da:cf:ca:7b:27:81:55:77:47:c3:bf:ab:
2a:3e:30:2d:9c:1b:81:cd:29:0a:75:03:26:e9:a3:
7f:de:da:aa:de:cf:0b:ef:29:c4:72:16:1f:ee:a1:
eb:65:fb:f6:73:ae:12:f2:09:a3:90:c1:52:cd:ac:
b2:d9:15:d1:6e:c3:1b:81:70:3e:05:d3:3a:c3:5f:
0d:b7:53:1d:f5:5b:36:d0:ce:2d:3a:22:b7:67:f9:
7f:11:5c:d9:0c:ee:50:87:31:d1:49:df:51:15:e6:
7d:de:51:21:0c:50:c5:60:29:19:68:7e:d3:14:6d:
ab:dd:b7:b9:87:15:2f:0d:2d:14:9b:6a:34:d4:de:
33:92:cd:2e:44:aa:40:a6:bb:bc:fb:ca:8c:96:ae:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F8:9B:80:43:D6:1A:F2:9E:01:02:F3:2A:0E:BA:10:5A:B4:0A:7A
X509v3 Authority Key Identifier:
keyid:74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:eb:7d:5b:32:d5:b9:d2:c2:80:72:26:76:f9:a1:fd:f9:31:
33:47:a8:32:1f:4c:49:41:a2:87:eb:67:ee:c9:f4:3d:29:c6:
dc:87:d1:82:9a:ef:9c:3e:10:78:46:e0:f6:93:ff:8b:a7:b7:
28:f4:3f:ba:dc:33:4d:7b:29:9d:de:a5:18:aa:b5:87:36:6a:
e6:39:e1:7e:34:db:14:9c:88:00:da:60:c7:19:84:26:10:cd:
2e:74:d5:12:4c:77:ee:a0:53:13:2b:44:f2:f2:18:49:ea:c5:
e3:5d:d4:10:24:01:f9:3d:18:cf:b2:e2:2d:41:35:30:8f:01:
86:66:fc:fc:fc:f0:dd:3a:42:ea:50:cc:d5:23:85:e9:00:77:
c4:a0:09:f8:3a:1e:d4:61:4c:44:3a:90:c9:9b:96:3d:48:e5:
eb:02:0a:73:7c:a3:24:7b:85:62:db:f9:f4:97:d4:45:8f:8c:
ae:21:be:86:ff:c9:05:a4:77:32:5d:d7:29:9f:ec:0d:b5:4c:
85:6d:3a:f3:9e:e7:2e:9d:2a:3a:ea:2d:47:4d:41:be:a6:45:
bb:2d:37:0e:0e:08:98:fa:2e:ba:d4:e5:cb:68:22:ca:b2:6c:
cc:f5:b1:84:ea:df:6f:3d:4c:fd:dd:75:9b:ff:23:ca:48:63:
19:f3:88:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:48 2025 by rpki-client