Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File: A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier: DqhDPa5oPmlsfY9FSWyH0s8B31ViMa9sfXhclPGv5S8=
Subject key identifier: BA:C2:67:51:EB:1E:3E:DC:F6:74:2A:F9:A4:11:28:43:E0:C6:E7:68
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer: /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial: 0198D65F6CA9CAD4F6A01E698DE351B00CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:34 +0000
Manifest this update: Sat 23 Aug 2025 10:00:34 +0000
Manifest next update: Sun 24 Aug 2025 10:00:34 +0000
Files and hashes: 1: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: 4A0umWv5XlgZfMCxjHD1Ri4UYpQ3CZam7quRxuP4PbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6c:a9:ca:d4:f6:a0:1e:69:8d:e3:51:b0:0c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Validity
Not Before: Aug 23 10:00:34 2025 GMT
Not After : Aug 24 10:00:34 2025 GMT
Subject: CN=bac26751eb1e3edcf6742af9a4112843e0c6e768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:11:f3:33:15:5e:9a:ec:61:48:9d:2a:2b:3b:
65:cc:69:e9:a4:98:78:58:3a:a8:23:5d:89:86:c8:
ac:2d:a8:04:e0:9b:e7:6b:02:34:7a:96:4d:0d:1a:
72:0e:30:46:04:38:ed:60:20:e2:15:d0:ef:ea:cd:
2f:a0:dc:2b:f3:13:c3:a1:59:d8:a5:3d:a1:81:da:
07:59:92:fc:13:de:81:ff:5c:20:4f:77:20:6f:52:
52:c8:95:6b:fd:f1:02:c4:59:44:c7:81:bf:9b:b6:
51:cf:71:f5:ba:a5:5c:c9:ad:82:aa:da:b5:5f:11:
98:de:bc:96:c5:9e:6d:57:8f:fc:fd:f0:7b:4c:7e:
d1:05:c7:83:0d:45:be:1c:2e:45:d8:dc:22:d2:ab:
8c:60:bc:5e:2f:58:2e:75:b8:6d:2a:1b:5d:ad:f4:
bd:2e:df:cf:6e:02:79:b0:b9:71:36:f2:59:8e:87:
3c:dc:e3:6c:85:9f:b5:36:cb:70:92:f9:be:96:ab:
4b:a9:af:fd:5a:d1:fc:59:87:15:f6:77:76:b4:fe:
9f:61:28:49:42:dc:d6:4f:97:50:46:2f:88:aa:56:
bb:f7:88:d2:97:d9:38:bb:23:13:5c:7f:60:33:87:
81:62:94:a9:7d:b7:99:c4:8a:c3:35:d2:7b:fa:7e:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C2:67:51:EB:1E:3E:DC:F6:74:2A:F9:A4:11:28:43:E0:C6:E7:68
X509v3 Authority Key Identifier:
keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f0:41:15:3f:ee:6f:d1:97:85:00:40:c5:83:8f:ce:df:70:
5b:55:c0:ed:88:2b:b6:e8:13:7a:33:b1:03:73:34:a5:d9:fc:
31:10:3a:e4:b8:80:f0:78:72:8f:9d:2d:fa:c1:87:10:21:fe:
52:ac:10:bb:4b:3d:ff:e1:db:37:ac:14:ca:f4:fc:2a:df:3f:
b3:bc:67:97:29:50:87:9c:32:28:60:c8:db:15:1a:b6:27:9c:
0d:b6:df:36:62:44:2c:a5:0d:de:66:ea:3e:ec:c6:20:5c:78:
f5:46:ae:05:d6:2d:4a:8d:07:88:09:4c:d4:28:94:d1:b5:ed:
ce:65:ba:ac:2e:eb:24:85:f8:4e:f4:c5:67:a4:97:82:41:87:
14:f2:ba:9a:8a:c9:18:3a:28:2c:9e:1b:45:9c:fd:aa:41:c5:
9e:4d:28:f4:c6:bc:b9:d4:fb:c1:83:56:4f:30:a4:5c:e4:a6:
aa:5d:be:29:09:bc:0e:d1:9a:08:ec:03:e7:81:f9:e9:16:ec:
89:f8:b8:1d:f3:00:1e:42:90:bd:86:a6:89:b4:8c:68:88:a1:
61:c6:68:91:13:2c:5b:b7:35:e0:f3:4e:f6:23:9e:cb:0c:96:
d3:7e:cf:8a:c3:4d:ee:57:93:0f:d4:74:1c:01:d2:54:16:60:
da:ed:4f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:25 2025 by rpki-client