Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
File: D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json)
Hash identifier: XR2/OcAiQYWsJeW6MwIxGtTd1MGG/lniwV5De9nIXFc=
Subject key identifier: 7D:5F:BA:4A:D1:43:4B:3F:0F:F8:CE:BC:1B:29:8A:11:62:B4:91:04
Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
Certificate issuer: /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Certificate serial: 0198D6988A84A31DB4C7894450BCC33BD596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
Manifest number: 0250
Signing time: Sat 23 Aug 2025 11:02:57 +0000
Manifest this update: Sat 23 Aug 2025 11:02:57 +0000
Manifest next update: Sun 24 Aug 2025 11:02:57 +0000
Files and hashes: 1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: IHWLCbYbfchn6mA3uE5/l1BB7cCu2/0XnvfEsy/lJn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:8a:84:a3:1d:b4:c7:89:44:50:bc:c3:3b:d5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Validity
Not Before: Aug 23 11:02:57 2025 GMT
Not After : Aug 24 11:02:57 2025 GMT
Subject: CN=7d5fba4ad1434b3f0ff8cebc1b298a1162b49104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:f3:1c:4f:42:f7:9d:7b:02:db:dd:ca:bd:
1f:ba:c9:42:56:8e:c7:41:36:0a:0d:4a:9f:aa:a5:
8d:8f:bb:b5:6e:4e:22:54:c2:45:00:66:b2:22:a5:
f9:20:a4:8e:49:c3:4a:73:33:c8:da:fe:90:4f:45:
c4:9b:26:a8:d5:2c:43:7d:7a:d1:48:cb:2d:c7:fa:
f0:26:c3:a4:d5:74:4c:e8:bd:3b:b4:bf:a7:37:5a:
d9:c7:47:cb:55:fc:48:84:82:4c:52:27:60:8c:b5:
8b:0a:52:99:9b:2a:5d:cb:7d:f7:d1:f6:46:8e:64:
4d:ac:f9:0d:18:b8:18:c2:b0:98:cd:84:be:05:8f:
3a:2f:22:20:1b:c2:84:44:c1:c6:27:b4:b2:d8:64:
99:ac:84:b0:46:1a:8a:92:70:0c:9a:55:43:78:08:
91:d8:33:d8:64:e3:94:8e:51:9f:7b:e3:69:91:c2:
ba:e9:d7:00:f4:ed:8b:1c:48:96:45:c6:21:8a:4c:
43:cd:a7:44:ea:e4:95:5b:e9:d9:97:69:ca:9a:a3:
72:4b:c6:24:2d:a1:60:aa:d2:5f:2a:78:d2:84:67:
fb:66:77:f7:ae:bb:8e:a8:bc:68:74:75:12:1b:54:
9a:e9:b1:e9:04:ef:1a:82:56:0b:24:dc:2e:c2:58:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:BA:4A:D1:43:4B:3F:0F:F8:CE:BC:1B:29:8A:11:62:B4:91:04
X509v3 Authority Key Identifier:
keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3b:d7:b7:91:76:3e:17:6b:15:26:21:37:66:fe:71:47:3b:
67:fd:68:aa:f5:a6:16:4a:bd:03:c5:11:8f:a0:73:57:7b:cc:
79:96:a8:4a:4c:3a:9f:1a:8b:f8:51:3e:da:21:99:4a:9c:c7:
41:33:c4:db:ee:ff:6c:d9:b9:78:60:f1:fd:87:ae:52:a6:fa:
e0:47:85:71:72:68:b9:27:60:99:05:3f:15:c2:95:f1:76:7a:
af:89:bf:9b:b6:51:0f:e3:6e:12:78:f4:d2:80:da:f7:ef:7f:
9c:7f:b6:47:5d:00:b4:80:da:bd:70:b7:89:19:56:09:2e:1b:
b9:7f:02:a8:02:e1:86:ea:1c:eb:57:f9:95:3a:a7:de:09:ca:
08:99:36:8e:d9:94:e7:e2:30:eb:11:47:bf:d5:68:e5:de:b9:
20:48:33:0e:fc:8e:6f:5f:d2:df:64:72:81:67:06:e7:ff:15:
91:49:67:7d:d2:6d:c1:d4:32:b2:87:dc:a6:87:f6:58:58:b7:
46:e2:06:bd:70:2c:b1:9e:fa:60:37:c3:fe:9f:79:f9:ab:c7:
58:86:b1:c4:38:fb:d7:ea:6b:0e:f2:f9:b4:1b:0f:6f:fd:5b:
7d:39:13:78:08:49:47:6c:c5:69:be:a1:48:89:c2:f6:eb:75:
f0:74:6c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:13 2025 by rpki-client