Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
File: r03WWsHW2oS6m4HCCeCnYXNF6iM.mft (raw, json)
Hash identifier: b89gjVh7Ae36ac4YwEycgrw1DKUgpwqoGeSoA7q9ryg=
Subject key identifier: B9:83:E0:08:A9:C9:57:D1:11:F2:01:6E:C5:44:57:D4:07:48:56:A7
Authority key identifier: AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
Certificate issuer: /CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Certificate serial: 0198D6611324A27D8FDDF291BBC1A80FFD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
Manifest number: 097C
Signing time: Sat 23 Aug 2025 10:02:22 +0000
Manifest this update: Sat 23 Aug 2025 10:02:22 +0000
Manifest next update: Sun 24 Aug 2025 10:02:22 +0000
Files and hashes: 1: r03WWsHW2oS6m4HCCeCnYXNF6iM.crl (hash: oCo83S9by+w4VWFPM14kekal8ltUdTIBGMOuTrJIwss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:13:24:a2:7d:8f:dd:f2:91:bb:c1:a8:0f:fd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Validity
Not Before: Aug 23 10:02:22 2025 GMT
Not After : Aug 24 10:02:22 2025 GMT
Subject: CN=b983e008a9c957d111f2016ec54457d4074856a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:9d:57:47:6f:ae:9f:36:86:cb:4f:79:b5:
da:96:01:d7:27:a0:8a:e5:3b:07:e8:34:0b:08:a9:
d6:7f:04:a1:5e:99:7e:af:63:b7:03:e6:57:16:0d:
d5:7a:cb:7a:50:96:53:82:51:12:32:82:ec:91:df:
2e:b5:c8:a4:90:7c:a6:83:b0:03:a5:15:1c:6b:6c:
01:4a:9a:cc:65:27:ba:b9:b3:e8:a1:aa:1b:71:73:
59:27:07:68:8b:c7:54:4d:6b:03:cc:23:1a:9a:bb:
2c:68:34:7a:ea:41:10:14:54:20:0e:22:85:ff:4e:
ef:74:29:fb:db:fa:65:6a:03:e6:88:2e:35:4f:2f:
46:08:04:96:4c:63:ca:54:ce:01:4c:79:50:0f:61:
89:bb:72:d7:41:dd:ee:a6:70:ac:b7:1a:20:38:31:
04:d0:b2:03:d0:6e:6c:69:68:94:49:82:9e:48:29:
80:d0:d9:96:0d:3b:4a:fa:5d:ec:37:6d:4a:9b:4b:
b0:85:1d:f8:0b:67:94:bb:4b:a5:4b:00:3a:7f:41:
8b:18:6c:b5:c1:4c:be:2a:0f:aa:94:0d:2c:e6:10:
7d:4f:3b:a4:54:b9:dd:93:3e:f8:93:be:47:51:c6:
4f:1d:ab:d6:4f:da:4e:be:87:0e:47:87:8d:5c:c8:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:83:E0:08:A9:C9:57:D1:11:F2:01:6E:C5:44:57:D4:07:48:56:A7
X509v3 Authority Key Identifier:
keyid:AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4f:1a:92:61:80:76:c4:ff:ca:5c:65:89:42:6b:dd:4d:6a:
07:6e:ba:d0:6a:5e:6e:ca:f1:35:b5:44:4b:85:b7:ae:fd:30:
68:bf:1c:fd:62:37:a1:5e:f5:5b:1f:89:de:fb:e5:da:28:05:
b0:10:48:90:e3:49:ee:f7:0a:fc:24:33:77:fb:e2:02:16:04:
9b:9a:66:6b:58:d9:ff:8b:fd:2d:d0:10:9e:cb:dc:40:35:85:
b7:b0:de:8a:3a:25:77:43:60:c1:2a:3e:9d:66:93:a6:58:1e:
a2:97:e9:af:65:33:3e:50:18:67:f2:1e:1b:b3:c5:1a:68:0e:
81:47:2b:4d:ff:0f:21:0c:f7:24:2a:b2:47:59:e0:36:28:ba:
c4:b2:f1:5f:19:cb:7b:85:10:d5:96:cf:e1:12:3c:b2:b5:0d:
63:a1:67:aa:73:d9:be:60:aa:0e:30:e8:7a:1a:b8:21:d0:00:
6c:cb:57:7b:f6:9d:24:b4:f8:53:40:d7:98:ee:80:ca:4c:4e:
d9:7a:33:46:e0:76:e3:85:5d:fe:80:b0:22:80:da:bc:9c:41:
31:05:70:82:06:aa:f0:5b:86:15:2d:43:c3:e5:b3:67:ce:ee:
0b:22:e7:cd:46:c7:c8:18:c1:c5:d6:aa:9e:66:7f:a5:18:a1:
57:dc:15:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:26:55 2025 by rpki-client