Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
File: dJFafoze18DuIhnnMMGYy7eLxfI.mft (raw, json)
Hash identifier: I104fQRMSHklfYyNXceBK+kvP3dE+iM3h+2WE7YWCyU=
Subject key identifier: BE:BD:61:48:8D:FF:07:76:C9:B6:F2:6B:B0:6D:8B:7D:86:6F:EB:10
Authority key identifier: 74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
Certificate issuer: /CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Certificate serial: 0198D69824823341146C01A67C27FAA4AAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
Manifest number: 01AC
Signing time: Sat 23 Aug 2025 11:02:31 +0000
Manifest this update: Sat 23 Aug 2025 11:02:31 +0000
Manifest next update: Sun 24 Aug 2025 11:02:31 +0000
Files and hashes: 1: dJFafoze18DuIhnnMMGYy7eLxfI.crl (hash: KSrNF+xCpyhrkCx8+o9Fiiy3XlE9/Xn8Ev5EbfINcPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:24:82:33:41:14:6c:01:a6:7c:27:fa:a4:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Validity
Not Before: Aug 23 11:02:31 2025 GMT
Not After : Aug 24 11:02:31 2025 GMT
Subject: CN=bebd61488dff0776c9b6f26bb06d8b7d866feb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:51:8c:81:c6:b7:f9:83:81:42:81:d1:eb:d4:
d1:19:3f:e8:a6:78:36:73:17:d3:1f:f0:a1:3d:70:
9b:a4:40:d1:e9:7f:9a:0b:5a:4e:d0:30:35:d0:65:
53:8a:f3:0d:48:32:79:af:7c:5f:b9:e3:15:90:19:
9a:fd:0f:a5:a6:b7:f1:77:63:b6:8e:ee:f6:34:7f:
36:71:17:8b:66:86:56:c5:68:34:e4:eb:33:9f:35:
1d:0d:42:8f:29:4f:4a:f3:41:0e:2b:19:ca:ba:e9:
6d:cb:39:3d:f2:fc:91:e4:03:35:b4:a7:61:7e:6a:
18:77:2f:10:7c:01:9c:e8:f1:d4:92:84:29:8e:58:
a5:97:e8:03:e1:12:ed:4f:f9:cb:97:98:d6:c1:ee:
f8:fe:0d:6b:25:db:eb:13:0a:92:5b:5f:6f:33:36:
f5:6e:38:09:94:55:ae:bc:70:f2:a5:68:8d:46:6d:
1e:62:8c:59:64:39:bb:2b:a0:78:0d:0c:e0:cd:05:
93:d1:1d:51:81:1b:12:c5:dd:1d:d3:bd:5b:98:14:
98:bc:4c:73:a8:18:09:5a:7a:8c:9c:08:fe:04:4b:
ee:4a:9e:2c:12:e2:9b:10:a5:4f:22:a6:93:f1:8f:
bd:3e:41:01:35:75:96:d2:ff:fe:44:12:4e:26:c5:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BD:61:48:8D:FF:07:76:C9:B6:F2:6B:B0:6D:8B:7D:86:6F:EB:10
X509v3 Authority Key Identifier:
keyid:74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:63:f9:f5:8b:ea:d2:1e:a9:1f:1e:40:e8:4c:53:ee:85:7d:
41:79:fd:41:70:64:9e:d8:a7:80:e7:a0:d9:bb:30:c9:19:38:
18:a4:4a:3d:fa:2e:f6:bb:2c:8d:63:79:ff:99:b1:3e:c3:eb:
a6:91:3f:4b:52:aa:80:8e:7f:0e:17:7e:85:0a:59:46:10:18:
a8:84:14:39:a1:0f:e1:bc:0c:c4:cc:be:ff:c6:29:bf:13:37:
c6:b0:8b:9e:40:41:07:69:cd:84:b4:28:3c:dc:26:28:90:5c:
b4:d4:c7:4b:a5:ee:a8:f4:1e:95:9d:6d:11:1a:f1:8e:b0:90:
25:bc:d4:4b:c9:1c:7d:b6:f8:fe:a6:97:b8:f7:ca:64:b4:03:
16:6c:d6:cc:5f:82:5b:c2:7f:06:30:ec:69:af:c6:72:4f:11:
e0:1f:9e:64:48:b5:65:13:ba:20:3a:fb:1d:35:9d:3b:aa:9c:
c2:28:7e:1b:86:c7:af:1d:d2:65:4e:3b:94:40:89:6c:f0:7c:
67:3b:cc:d5:f3:92:d6:cf:b6:35:c6:51:e7:1a:1e:f4:34:32:
88:cb:d0:58:3d:ca:ab:ad:29:bc:f8:ad:c4:ed:32:7d:4b:fc:
11:7f:01:15:3e:9c:e3:b4:a7:cc:e7:4d:ba:7d:f2:61:4b:af:
7a:db:e1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:02 2025 by rpki-client