Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
File: cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json)
Hash identifier: 45Wd1ZAL5jVmlcdJTCVMOH0O7LVouczdnWkFzYdfDY4=
Subject key identifier: D7:1C:80:C9:54:80:68:42:BE:A2:47:A6:75:3E:AC:83:66:2B:A0:96
Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
Certificate issuer: /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Certificate serial: 0198D473AA807D528FF64B554F876DDFD197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
Manifest number: 0FC4
Signing time: Sat 23 Aug 2025 01:03:26 +0000
Manifest this update: Sat 23 Aug 2025 01:03:26 +0000
Manifest next update: Sun 24 Aug 2025 01:03:26 +0000
Files and hashes: 1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: +WekCUYIETgnO86MGVTfzgBGDdRSzANeSs3nCWv8d+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:aa:80:7d:52:8f:f6:4b:55:4f:87:6d:df:d1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Validity
Not Before: Aug 23 01:03:26 2025 GMT
Not After : Aug 24 01:03:26 2025 GMT
Subject: CN=d71c80c954806842bea247a6753eac83662ba096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:59:cf:23:c6:e8:a1:52:95:57:49:a9:46:
fc:1f:6f:16:02:93:2c:b1:45:36:9a:b3:07:da:33:
81:1f:a7:14:9e:d3:be:29:d9:4d:f8:d6:69:ae:bb:
56:3c:0d:04:25:b7:0e:0e:fe:2e:d5:1b:6a:ea:88:
7a:84:6b:26:db:9d:35:81:f9:34:79:27:5d:a5:75:
d6:8d:38:b0:7d:c5:37:b2:3d:39:3a:3e:dd:97:91:
41:f1:52:6f:02:cf:fc:21:94:3b:6f:f2:ed:8f:c0:
65:27:32:5c:4c:b4:ad:4d:d7:09:57:16:9c:fb:dd:
57:89:78:21:4e:db:da:67:96:07:fc:77:63:f7:98:
23:0a:be:46:3e:98:b6:1a:42:da:c4:ff:a6:af:ca:
97:53:66:3d:1d:e9:8f:ee:69:0d:3f:3a:3a:33:41:
19:ef:98:bf:53:9f:41:b1:f0:8b:fe:bf:14:09:90:
0c:75:15:39:fd:24:2c:10:d5:44:72:5a:a1:79:26:
15:d0:2c:60:fc:6b:31:d3:8c:bf:22:e1:ae:2f:9f:
a8:7b:ee:29:90:14:1b:50:43:c6:31:05:89:35:b9:
27:7e:6b:67:d9:91:0d:d2:5e:67:ba:bb:7f:e3:ac:
7a:01:8a:db:85:14:31:e6:c3:29:07:5e:d6:bd:fd:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1C:80:C9:54:80:68:42:BE:A2:47:A6:75:3E:AC:83:66:2B:A0:96
X509v3 Authority Key Identifier:
keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0c:d6:80:11:4a:d0:29:01:da:c9:e1:fe:fb:a2:31:7e:fb:
c0:85:49:76:8d:51:0a:b3:b8:c2:18:88:a3:a9:bf:26:96:30:
70:fa:77:b6:2d:08:2a:ae:6f:e7:19:15:b7:06:35:32:73:8c:
24:fa:db:98:b7:e0:b9:e5:b9:f6:a2:2b:8d:b5:4e:5b:be:be:
08:01:46:18:b5:1e:06:19:14:70:ef:00:95:aa:d1:a0:a4:8f:
09:cd:29:fa:14:0e:86:37:ee:ed:c5:d0:e8:12:42:c9:ef:ea:
40:f3:81:f7:80:22:2a:8d:d1:95:6a:7e:fe:e4:0e:f7:70:a1:
1a:e1:51:66:81:ba:2b:cf:41:85:b8:69:5e:c5:8b:12:76:ac:
3a:9a:37:63:36:cc:12:e3:a7:89:7b:e2:f6:62:ed:68:e7:81:
f7:0f:ab:e1:ab:27:3a:29:ab:0e:71:21:32:ee:cf:ad:2b:f1:
00:e5:c3:99:b8:5c:d8:36:e6:c4:95:ff:fa:12:42:3b:d7:50:
ed:97:d6:8d:20:3b:f3:ce:58:bb:71:8e:ed:97:19:86:62:43:
b5:bc:16:e8:8c:28:59:51:d0:a9:4a:73:63:f5:ef:87:8a:46:
10:46:f6:6f:30:86:91:67:97:37:18:4d:17:12:d2:c3:b0:c8:
da:13:70:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:54 2025 by rpki-client