Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
File: s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json)
Hash identifier: nFmzEMA+C8ASr9b8VsU8MDwW4dWOq9inj3zKsBVe86Y=
Subject key identifier: D5:09:4F:86:C1:B4:E7:2A:C9:4D:1D:14:1D:8B:7B:C3:FD:4B:73:5A
Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
Certificate issuer: /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Certificate serial: 0198D515AD071471A0E4517D33D61BA3400F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
Manifest number: 0A96
Signing time: Sat 23 Aug 2025 04:00:24 +0000
Manifest this update: Sat 23 Aug 2025 04:00:24 +0000
Manifest next update: Sun 24 Aug 2025 04:00:24 +0000
Files and hashes: 1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: vKQ403Mr3tSvtv9gQdLt68QYJny3S3yNNPHS5aqlKEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ad:07:14:71:a0:e4:51:7d:33:d6:1b:a3:40:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Validity
Not Before: Aug 23 04:00:24 2025 GMT
Not After : Aug 24 04:00:24 2025 GMT
Subject: CN=d5094f86c1b4e72ac94d1d141d8b7bc3fd4b735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:3b:4c:38:72:3c:3f:45:49:97:4c:c0:9b:
86:97:22:ec:0b:95:58:d2:0a:03:e3:5b:11:da:56:
6b:f0:c2:80:6c:17:71:48:e1:6e:ab:59:c4:a5:f0:
0c:9e:dd:ac:0a:4c:28:66:86:8a:74:94:31:dd:77:
28:76:d3:45:3e:8f:94:c7:ad:23:ac:82:ff:e3:dd:
03:a3:c4:06:7a:17:72:9b:6b:9c:0e:1f:2d:ec:3d:
2f:92:4f:0d:55:ed:69:69:f1:05:a6:9f:6d:22:e8:
1a:d1:2d:26:c4:33:33:23:08:f0:44:6d:34:be:e7:
7b:d6:38:7a:b1:22:82:69:5b:9c:0d:fb:49:c4:76:
39:63:b2:8b:e6:73:39:42:7f:6c:11:ed:b6:17:6a:
5f:fd:41:4d:07:b6:28:30:3b:80:b4:b2:2d:b4:5a:
ad:06:1b:10:d2:42:96:43:7e:1c:fc:10:97:a8:69:
ad:8e:f4:6e:84:cd:e7:d3:4f:48:70:f1:d6:6c:2a:
b9:a5:67:8a:9f:c3:5f:3d:62:79:aa:e7:1e:90:1d:
fe:41:7e:e0:ad:ea:85:d0:03:61:d3:9d:51:db:66:
af:3c:d0:22:d6:83:cf:6f:a4:d1:bc:27:fe:4d:47:
b1:4e:92:01:87:6f:b9:cb:25:3f:4a:1d:4c:ff:e3:
db:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:4F:86:C1:B4:E7:2A:C9:4D:1D:14:1D:8B:7B:C3:FD:4B:73:5A
X509v3 Authority Key Identifier:
keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:19:31:44:22:f8:56:bc:51:f9:9c:20:3a:11:bf:46:f2:e3:
60:3c:61:7c:c3:5f:a3:e2:df:d8:0a:de:bc:56:91:dd:0f:c5:
23:25:39:07:01:85:c8:1b:cf:11:ca:18:d6:9f:39:60:7b:16:
84:88:25:08:86:57:1a:fc:5c:9f:aa:25:0c:32:c0:4d:4a:44:
aa:f7:96:9a:fa:dd:30:30:9c:9c:7a:0a:90:cb:27:1b:86:8e:
77:6d:fb:ce:b5:c7:b0:41:27:97:02:08:c6:b3:40:75:48:3d:
fd:ef:01:94:60:d3:3e:bc:28:c4:8a:b0:87:54:eb:46:0c:21:
bd:f9:de:08:46:b4:e5:b8:23:fe:d1:b3:92:bf:8e:7d:e6:b3:
b1:22:29:8e:95:ec:fb:c4:72:5c:f1:81:a3:b8:8f:65:e2:10:
c7:47:15:16:20:53:58:32:5f:0b:54:5c:3d:34:c9:c6:b3:1c:
de:bf:bd:7b:56:98:41:da:11:e2:4b:a0:2e:a9:a0:d6:8d:a1:
31:dd:34:e4:68:ba:3c:71:c1:d4:5f:cb:5c:35:f5:f8:12:88:
3d:53:96:5d:22:ad:78:97:5e:91:9c:21:d5:ff:ab:d6:63:12:
d5:fa:88:8f:6f:1f:0b:6e:37:ce:b9:c2:3a:75:06:78:7e:7b:
e0:a1:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:24 2025 by rpki-client