Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
File: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft (raw, json)
Hash identifier: 5u2conkHqzCke/1iUESSzPRvUHNaM/aUnswSrp3/jKA=
Subject key identifier: 96:60:34:AD:4C:51:BC:49:C8:D6:D0:BA:B9:A2:AE:7F:D3:45:71:EB
Authority key identifier: 47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
Certificate issuer: /CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Certificate serial: 0198D515B25C3807DA057DF0530EE07F781B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
Manifest number: 0399
Signing time: Sat 23 Aug 2025 04:00:25 +0000
Manifest this update: Sat 23 Aug 2025 04:00:25 +0000
Manifest next update: Sun 24 Aug 2025 04:00:25 +0000
Files and hashes: 1: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl (hash: ypfUXCeRAsXO6FYqbs8fgKTrrf2XpteGyu7+fUV5Pv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b2:5c:38:07:da:05:7d:f0:53:0e:e0:7f:78:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Validity
Not Before: Aug 23 04:00:25 2025 GMT
Not After : Aug 24 04:00:25 2025 GMT
Subject: CN=966034ad4c51bc49c8d6d0bab9a2ae7fd34571eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:e7:96:49:dc:ec:6a:49:1c:9c:a7:4f:ca:
bb:5f:91:50:14:18:17:59:36:96:10:0d:e9:eb:2b:
07:03:77:95:54:df:cc:df:55:00:d9:a5:30:ea:59:
79:5c:74:d6:3a:9f:85:b8:ba:d5:5b:7a:6d:10:91:
e6:1f:97:18:2c:58:d1:d7:3e:90:2c:22:63:04:2d:
f3:1e:5f:87:ef:3a:89:e3:21:72:2d:e0:62:6d:14:
52:ce:ab:56:f2:a7:75:85:b3:fa:72:91:3d:21:a4:
f1:8b:bd:97:fb:dd:c2:61:d2:5c:e9:0e:8c:8e:8f:
6d:a6:e8:1d:65:36:f6:d6:a5:08:3a:13:20:f2:24:
05:38:38:e7:6f:19:38:9c:46:3b:d3:46:7d:79:1c:
ca:cc:07:48:64:e0:6c:da:2a:03:a4:cd:c4:2b:92:
0f:29:e1:73:ac:32:7d:0f:99:8c:09:1f:e0:1e:6e:
10:8b:a5:28:58:7a:4a:6f:02:1d:b3:2c:25:f8:4a:
ce:6b:0a:51:5e:53:46:56:01:9d:47:58:64:43:01:
fd:63:cd:3e:d6:7d:9c:cb:19:30:d0:d5:89:19:fb:
02:0a:e0:b7:20:dd:44:80:1a:cb:3e:79:a2:ef:1a:
18:1f:65:a0:07:52:ef:7a:ad:d7:ac:0f:8d:d0:4e:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:60:34:AD:4C:51:BC:49:C8:D6:D0:BA:B9:A2:AE:7F:D3:45:71:EB
X509v3 Authority Key Identifier:
keyid:47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:59:d8:70:d2:cb:01:4b:30:a6:ab:0a:31:a5:9e:b5:bd:bc:
88:dc:d2:bd:fe:4b:d9:d3:27:4d:88:17:42:a4:98:00:14:fd:
8c:b7:2b:92:b0:3c:23:06:e1:81:d7:46:b8:4c:1c:41:b2:b5:
45:f3:01:2a:0a:80:08:6e:06:1d:21:f6:b0:7e:cb:cd:c2:1b:
6b:6e:5b:0a:58:ff:69:8a:15:07:27:0d:7e:7b:d6:93:ab:21:
ce:7d:78:dd:18:4f:84:a7:25:73:41:2f:47:e6:00:a1:b9:7a:
ec:80:fa:d9:ca:b8:92:07:62:5c:a5:f8:01:57:b7:05:5a:a4:
e9:44:e3:70:c1:ab:ba:90:cf:57:f9:2e:a5:e6:c2:28:6a:cc:
47:a8:69:36:00:91:17:01:fb:2f:dc:65:5f:51:95:31:59:4a:
57:a8:d3:75:6d:f0:ce:c7:1a:02:13:5c:ac:12:09:b2:02:37:
2d:96:1e:19:83:8b:77:f5:77:af:a4:95:5c:69:73:09:2c:54:
c1:0b:57:4e:10:43:ae:18:81:df:88:91:09:f9:8f:05:37:4b:
dc:e4:03:ff:ff:ae:dd:3c:69:ab:f9:bf:a5:52:ec:43:82:ed:
48:ab:a9:82:09:d5:b6:3b:c1:32:5d:f0:e3:6a:4c:73:a8:54:
ee:04:25:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:41:19 2025 by rpki-client