Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
File: SdWTfY5gK0jLL_UXFtmV0jofPho.mft (raw, json)
Hash identifier: /khxI/H0HUfkfGyh5DXDIadM5ko57unV0J+kh1mRiSI=
Subject key identifier: 91:90:19:86:A5:D9:8F:CD:CA:57:EA:CA:29:86:40:B4:5C:07:15:39
Authority key identifier: 49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
Certificate issuer: /CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Certificate serial: 0198D65FC9E99B5214DFDADA7E8F79616D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
Manifest number: 0F0D
Signing time: Sat 23 Aug 2025 10:00:58 +0000
Manifest this update: Sat 23 Aug 2025 10:00:58 +0000
Manifest next update: Sun 24 Aug 2025 10:00:58 +0000
Files and hashes: 1: SdWTfY5gK0jLL_UXFtmV0jofPho.crl (hash: Nu2S8xXKPqeUnFs8i6Sspj4wYeOI15R5us3TUwZ2+pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c9:e9:9b:52:14:df:da:da:7e:8f:79:61:6d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Validity
Not Before: Aug 23 10:00:58 2025 GMT
Not After : Aug 24 10:00:58 2025 GMT
Subject: CN=91901986a5d98fcdca57eaca298640b45c071539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:bf:0a:a2:68:2c:1f:9b:d4:33:2c:f1:b0:
a3:53:88:eb:59:6c:44:8a:a3:2d:4c:01:d2:48:2c:
33:9a:dc:85:fa:46:9e:b9:79:3a:dd:78:55:5b:f9:
38:af:53:14:ea:66:16:9d:f4:a7:2c:7c:e5:32:f6:
26:cb:da:f8:1e:a1:a9:cc:74:f8:e6:02:7c:b9:6a:
ab:68:25:7f:e9:fd:13:ce:6c:fc:3b:8a:f2:75:f2:
72:43:0e:4f:b2:f3:0d:f0:2b:35:95:f7:c5:ec:0a:
a9:70:69:ea:5b:44:4b:90:89:80:4c:5f:9b:76:ad:
f0:fc:2f:19:ea:8c:8a:33:cf:6d:78:43:fe:1a:b0:
ad:da:b7:11:99:ba:4d:2f:f5:15:84:e9:38:b8:4f:
32:47:93:3d:29:b6:08:20:1a:12:88:0b:b0:90:0c:
99:da:8b:99:c4:c7:45:8e:8e:19:b1:41:ae:c9:d5:
f7:48:3e:b3:42:4e:11:f4:01:ca:a9:23:7c:f9:c3:
26:ad:8f:b3:7f:5a:11:58:42:df:3d:66:9e:91:35:
4c:a8:85:a9:58:b8:b8:2b:7b:7a:d0:69:64:ad:2f:
99:6c:6e:fd:43:03:6b:4a:c2:65:77:29:ab:a5:c2:
f2:f2:4e:6b:f2:c5:99:4b:07:3e:53:cd:e8:f7:ee:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:90:19:86:A5:D9:8F:CD:CA:57:EA:CA:29:86:40:B4:5C:07:15:39
X509v3 Authority Key Identifier:
keyid:49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e9:a9:a8:5d:16:fc:13:df:cf:2d:3e:9c:25:f5:78:ba:8c:
f0:f3:9b:82:6c:4e:45:ea:86:1d:00:f3:9a:4f:f1:73:6c:be:
12:03:32:2f:8c:40:77:3e:35:f4:d6:b6:1f:6e:c6:c9:cd:ed:
e3:58:dd:c5:42:66:34:d0:54:ed:ae:7b:e9:b8:e1:04:d3:08:
d4:eb:f6:32:bf:0e:9f:20:9c:70:4d:d3:c4:eb:a7:8d:2d:32:
9b:24:62:0a:d5:d7:0b:9f:89:89:8c:0e:84:9a:78:c1:d9:17:
69:5f:0c:3b:c7:9b:a1:eb:3c:dc:41:30:5c:89:ba:a0:93:d0:
f7:00:97:49:55:a8:5e:e0:71:a4:a1:52:ae:8c:24:15:f3:8e:
ff:f2:be:cf:e0:96:58:c6:9f:f4:ee:06:26:f3:8b:d4:39:ac:
b1:45:93:c3:5b:d0:92:d7:a2:d1:46:77:f3:6d:e0:3e:52:38:
5b:65:df:f7:2b:a6:84:83:c3:38:a0:c5:d2:62:01:43:89:82:
76:bd:34:3b:95:77:58:f4:87:1b:1c:3b:0c:23:39:c8:8d:ac:
c9:2c:07:ad:f2:57:c8:1e:48:e7:92:15:13:e0:8a:8a:3a:09:
58:5f:5e:e5:ba:93:62:e1:b6:e7:80:57:bf:ac:59:13:bf:85:
5b:e4:01:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:14 2025 by rpki-client