Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier: heIsa9eqoAsTrQOw3CUdGnQTFNr02X22spmn6Ghdb1c=
Subject key identifier: 27:D3:B1:5F:8E:19:CE:83:B8:3B:33:5A:A0:C4:44:78:4B:E7:43:91
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial: 0198D6609D6D24F3A5E8E8EEA5778718DF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number: 0528
Signing time: Sat 23 Aug 2025 10:01:52 +0000
Manifest this update: Sat 23 Aug 2025 10:01:52 +0000
Manifest next update: Sun 24 Aug 2025 10:01:52 +0000
Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: aByk+CzxeZ8cGjlbSmKby9TbPrGCG7p+NwduJv70phg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:9d:6d:24:f3:a5:e8:e8:ee:a5:77:87:18:df:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Validity
Not Before: Aug 23 10:01:52 2025 GMT
Not After : Aug 24 10:01:52 2025 GMT
Subject: CN=27d3b15f8e19ce83b83b335aa0c444784be74391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:b3:9f:0e:38:61:11:5d:03:f2:c2:1e:f6:
f9:0a:46:c0:3c:c6:61:bb:bf:13:05:67:ad:ea:36:
51:52:c1:4e:7c:d7:29:ea:84:38:2b:ba:7a:ed:f4:
79:20:20:fb:1e:ba:a4:18:d0:00:61:61:88:33:96:
50:61:18:54:bc:8e:a0:dd:72:23:ae:70:03:23:b9:
74:5c:3c:dd:90:f6:c6:51:da:f7:48:ec:0e:7f:d4:
c2:97:57:c7:7d:c7:1f:59:ce:69:fc:ba:1e:5a:70:
32:95:22:4b:ad:fb:b9:5e:29:25:24:9e:0e:6a:56:
2c:e2:ad:eb:9f:d1:c8:56:52:01:e0:e3:88:66:ca:
5b:e8:d0:07:8a:64:8d:d7:f5:2a:9f:bf:f3:56:29:
45:d4:ab:66:0f:50:39:1e:e2:91:22:73:2b:06:87:
dd:1a:00:3f:8a:a7:ba:4c:1c:7d:7a:10:51:09:57:
2b:ee:0c:f5:f8:46:23:10:c8:9a:cd:cc:ab:9f:5c:
67:58:d1:9b:08:f5:b0:23:ce:08:b7:55:6c:ce:3f:
bc:fc:f0:cd:a5:10:14:45:d7:81:5e:57:a7:4c:e3:
41:1f:98:c0:1f:67:90:44:f4:6d:07:2f:91:04:a2:
4a:54:91:f3:2c:aa:b5:e9:02:ec:d0:19:57:e6:6a:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D3:B1:5F:8E:19:CE:83:B8:3B:33:5A:A0:C4:44:78:4B:E7:43:91
X509v3 Authority Key Identifier:
keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:92:f5:a5:47:3f:45:c1:38:f5:0c:c7:75:14:fb:3d:fe:94:
53:a1:0b:39:78:fd:31:d1:89:ff:51:08:5d:cb:7c:c8:8e:4b:
b6:cc:c4:4e:8f:1a:24:fb:bd:2c:cd:5d:6b:b8:d4:3b:0f:bd:
ba:4f:9d:78:d1:56:4a:b2:57:f8:7c:77:bc:c8:91:fc:33:84:
4b:5d:0f:77:61:1b:4d:18:8f:06:da:85:ed:f9:e3:56:d0:d7:
94:b9:b4:dd:79:ec:84:68:dc:7b:53:7d:ea:a5:f0:18:28:33:
aa:1d:8c:09:bc:28:68:19:d4:85:4f:b4:49:52:6e:fc:7b:4e:
b1:f0:ec:e8:f9:50:d2:55:04:7c:8e:c1:f2:4a:a1:85:34:99:
08:56:3e:fe:4b:a8:b5:90:ef:d2:f7:40:65:6b:72:0d:50:76:
d7:25:94:10:0a:6f:a0:2c:5d:bd:0a:25:c3:d6:d0:0a:ae:6c:
d2:2c:96:81:dd:e0:6e:9d:79:17:83:3b:e8:27:2f:b1:02:d9:
3f:69:ea:a2:dc:f5:01:23:99:8e:9a:03:bb:ec:8b:d4:df:f7:
c9:aa:d8:ca:b9:b8:35:53:ce:de:eb:21:fb:08:fc:31:7e:93:
43:c6:a4:ad:c8:11:71:56:91:2a:e7:9f:5b:a4:92:8a:e5:b7:
df:0f:e1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:37 2025 by rpki-client