Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
File: rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft (raw, json)
Hash identifier: 75FkG06pou5jN65XlMkrQdIen1PY0GynlqXhnpUPmAk=
Subject key identifier: DC:BB:3B:3C:C5:B0:AD:B5:5A:64:C9:D7:59:56:05:A9:FC:CB:DB:96
Authority key identifier: AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
Certificate issuer: /CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Certificate serial: 0198D65FF774219E0E164C383F1D5F10A010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
Manifest number: 0639
Signing time: Sat 23 Aug 2025 10:01:10 +0000
Manifest this update: Sat 23 Aug 2025 10:01:10 +0000
Manifest next update: Sun 24 Aug 2025 10:01:10 +0000
Files and hashes: 1: rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl (hash: Khd7ui1ky2QTbEvSLd6o9HBmlu7m7/Nbf+SrifOQT/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f7:74:21:9e:0e:16:4c:38:3f:1d:5f:10:a0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Validity
Not Before: Aug 23 10:01:10 2025 GMT
Not After : Aug 24 10:01:10 2025 GMT
Subject: CN=dcbb3b3cc5b0adb55a64c9d7595605a9fccbdb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:ba:85:a5:21:f5:42:63:7a:d9:ab:7d:e8:
0b:df:bd:b9:6b:56:2d:94:fd:b1:ad:e0:b9:39:cc:
39:6d:29:84:2b:1f:4a:c8:44:eb:3b:58:ee:bb:69:
a5:2f:03:de:54:ca:61:fe:35:1f:d5:19:2e:3e:d1:
69:16:80:49:ed:64:32:e0:62:1f:0e:f7:00:8d:ae:
c5:fd:64:44:60:95:d3:3e:78:c5:48:f7:24:72:77:
f8:19:25:8d:79:f6:3b:dd:4e:f6:26:70:4a:7c:27:
90:f4:d8:0d:b0:c5:e3:61:2b:3e:81:86:31:84:57:
d2:38:be:6f:1f:47:a5:4d:94:4a:b2:ae:9e:0b:5c:
1f:99:aa:4a:bd:63:23:08:ab:2c:5f:42:5f:ed:7e:
79:e7:b1:3e:88:f4:1a:97:44:69:80:d8:e5:48:d7:
ea:c8:d9:48:e7:a9:e1:f7:27:77:58:cd:5d:40:98:
50:a6:f4:00:75:4e:ef:52:20:37:c6:4b:69:66:6e:
01:5f:13:af:ba:3e:d1:86:e8:8d:af:be:b8:3d:3a:
c7:34:d3:8e:cb:9a:d5:98:1e:1c:1d:73:7d:5e:23:
58:c5:c9:50:75:79:47:d8:4a:c1:9f:9c:28:96:3b:
fc:4e:23:f1:9d:ae:3d:8e:ce:8f:a3:a9:6e:0d:b6:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BB:3B:3C:C5:B0:AD:B5:5A:64:C9:D7:59:56:05:A9:FC:CB:DB:96
X509v3 Authority Key Identifier:
keyid:AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:56:43:30:cb:0b:a6:63:67:fc:9a:c1:86:fa:3f:ac:66:2f:
a8:3f:1d:a5:b3:0a:ee:54:e4:75:5c:7f:c3:db:b9:78:b8:df:
ea:c4:df:21:e3:23:ea:08:7c:bc:d3:86:29:85:95:36:31:24:
90:ea:b8:7c:27:f4:c8:94:d3:ca:10:fc:e5:c5:d0:e8:71:bc:
19:b0:78:52:f6:0e:f1:9b:08:dd:7d:1b:2a:75:d7:61:d9:db:
8d:76:17:e4:ac:a0:40:c6:d1:0d:4b:42:55:7c:98:65:d0:d1:
b9:d0:8f:92:6d:e0:05:20:e5:71:cf:3a:25:7d:87:b7:14:83:
c5:ea:c6:54:ac:7d:bd:1a:48:d1:a7:56:d1:6c:75:76:81:be:
0f:bf:fd:b4:2b:51:1f:4b:1b:38:25:6f:f0:13:60:c7:e3:b9:
87:e9:09:12:02:2f:36:da:1d:d8:5b:ae:37:89:4e:7e:ab:0f:
86:84:6a:93:12:c2:d2:c7:5d:a8:e2:f9:96:04:04:64:fc:9b:
9c:06:e0:63:03:e9:e6:22:d9:76:82:2e:44:fb:49:16:9c:ae:
a2:53:53:ef:26:72:c5:b8:63:cf:76:79:74:bf:93:a7:31:cf:
23:1a:e8:de:6f:92:f8:72:a5:ad:78:2f:a2:71:35:06:25:7a:
25:7e:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:19 2025 by rpki-client