Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
File: 36U2RiiDKd9mVeJT5WsihIG-lZY.mft (raw, json)
Hash identifier: 9V7rs8ixSQITeHTlJBn/aM1YoqCVxUEoj6vlySD786g=
Subject key identifier: 0B:D0:F3:13:50:F0:8F:D0:DC:2D:DC:84:86:9C:22:D1:9D:06:15:F4
Authority key identifier: DF:A5:36:46:28:83:29:DF:66:55:E2:53:E5:6B:22:84:81:BE:95:96
Certificate issuer: /CN=dfa53646288329df6655e253e56b228481be9596
Certificate serial: 0198D65F830A6567856B363545C66FAC6F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36U2RiiDKd9mVeJT5WsihIG-lZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
Manifest number: 02EC
Signing time: Sat 23 Aug 2025 10:00:40 +0000
Manifest this update: Sat 23 Aug 2025 10:00:40 +0000
Manifest next update: Sun 24 Aug 2025 10:00:40 +0000
Files and hashes: 1: 36U2RiiDKd9mVeJT5WsihIG-lZY.crl (hash: 8Og8ln2CNcUdZyRnCqW4JL0wtHApt39L1jSlo12Gg4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/36U2RiiDKd9mVeJT5WsihIG-lZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:83:0a:65:67:85:6b:36:35:45:c6:6f:ac:6f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa53646288329df6655e253e56b228481be9596
Validity
Not Before: Aug 23 10:00:40 2025 GMT
Not After : Aug 24 10:00:40 2025 GMT
Subject: CN=0bd0f31350f08fd0dc2ddc84869c22d19d0615f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:cb:3d:7c:a5:8e:4a:cc:a2:5c:03:59:39:
c1:35:3a:f2:ed:ed:7d:76:fe:f3:c9:79:8a:34:50:
c9:9a:a6:ef:f8:d4:7b:05:c7:ea:a6:da:ec:44:07:
83:ad:81:5d:9b:d6:67:4e:84:1b:83:df:5f:84:98:
15:69:40:26:10:97:3e:fb:77:2d:d8:73:3e:f3:af:
9c:ba:50:d7:87:06:af:8a:d6:00:ae:fc:e6:c2:3e:
f0:32:b8:41:e0:93:fc:f9:a9:4f:6e:fd:2c:09:00:
bd:9c:02:12:c2:c6:55:30:6e:70:5e:a6:92:e9:b6:
3c:48:d4:d8:1e:e0:c5:6c:0b:e4:d0:1e:a2:d9:04:
5d:55:3f:1a:b9:b4:c9:c2:bb:91:4e:f7:1f:de:16:
5f:3d:4d:2a:27:a4:7d:49:98:45:e1:31:7f:80:e6:
59:39:0b:89:80:ee:57:75:c4:da:3c:07:b7:ca:dd:
85:f3:14:9d:30:d7:2d:98:28:cf:4d:6a:08:55:b3:
56:33:f8:e2:a5:f6:cb:5e:07:1c:94:48:9d:ca:a2:
fe:ee:04:b7:77:99:b6:c4:e0:d1:86:3b:29:0d:b9:
5a:61:02:b3:48:ba:f5:c4:12:b5:6f:ef:f0:f0:9f:
eb:74:92:e0:c3:e1:5f:79:18:0a:46:e9:7a:3f:84:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D0:F3:13:50:F0:8F:D0:DC:2D:DC:84:86:9C:22:D1:9D:06:15:F4
X509v3 Authority Key Identifier:
keyid:DF:A5:36:46:28:83:29:DF:66:55:E2:53:E5:6B:22:84:81:BE:95:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36U2RiiDKd9mVeJT5WsihIG-lZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:db:a0:f9:1b:02:4d:b5:11:99:6c:48:8b:fe:13:22:7f:2c:
1c:e5:b2:1d:6b:3b:1a:77:b9:9b:41:68:e7:c5:d3:7b:01:32:
ee:59:bf:d7:40:1c:c0:10:c8:99:9d:94:fc:fe:90:2d:5f:34:
28:be:43:5d:9b:e8:27:b6:51:b1:74:50:ee:ce:3b:8e:79:56:
60:2d:7b:6a:cd:a6:2a:ef:c7:7f:a2:bf:3f:4e:c9:e4:c6:a4:
4c:e5:72:1a:64:0c:26:ba:9b:db:9f:e8:d8:9d:f2:4f:f4:87:
0f:3f:12:be:a4:f9:8d:01:ab:62:ac:a7:4e:cd:6a:4a:c4:ca:
56:3b:05:ee:97:a9:fe:90:00:4a:7c:08:b5:1e:12:5c:b3:76:
9d:53:c1:19:5b:76:fc:25:e8:32:12:57:d6:56:66:a8:46:aa:
67:98:f0:00:3b:f3:fd:b3:2b:11:fc:b1:7f:1a:e5:46:26:b9:
c7:39:c4:1c:6c:0f:bb:ee:2b:66:7b:63:1f:b3:ad:93:26:12:
3f:88:66:c9:97:27:5c:04:04:89:1c:1d:a2:c6:3f:df:44:46:
7f:3d:f4:92:e8:a3:53:b2:03:7d:ca:07:a5:74:d3:af:2c:f4:
01:7e:9a:5a:5b:11:17:26:e6:0a:6a:d1:98:d9:95:6b:5c:58:
84:51:3a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:58 2025 by rpki-client