Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
File: cn4hijGD9RKCflrG2eVCXivw7gM.mft (raw, json)
Hash identifier: q0/bYyw9cUUtNZV8k0utMMgPj+RgEyouQwHZq3zs6sg=
Subject key identifier: 5D:FD:49:58:17:E2:86:0F:D4:DD:C5:27:6D:4E:10:10:4F:70:4B:B0
Authority key identifier: 72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
Certificate issuer: /CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Certificate serial: 0198D65F4E03059E0A4EE647F4491B50D625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
Manifest number: 0108
Signing time: Sat 23 Aug 2025 10:00:26 +0000
Manifest this update: Sat 23 Aug 2025 10:00:26 +0000
Manifest next update: Sun 24 Aug 2025 10:00:26 +0000
Files and hashes: 1: cn4hijGD9RKCflrG2eVCXivw7gM.crl (hash: V0XfhST6MWMSUYrnL84RETKuM9TYHgrlYJ4jijoa/2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4e:03:05:9e:0a:4e:e6:47:f4:49:1b:50:d6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Validity
Not Before: Aug 23 10:00:26 2025 GMT
Not After : Aug 24 10:00:26 2025 GMT
Subject: CN=5dfd495817e2860fd4ddc5276d4e10104f704bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:5d:5e:d8:b9:b5:63:de:0b:20:f0:f1:34:
fe:eb:24:16:46:f9:06:da:31:27:71:7c:a0:51:93:
5e:1b:56:c0:32:6f:65:44:f9:cf:b6:34:5c:70:70:
bb:2c:54:f6:39:4d:ce:c1:23:d4:3c:eb:df:4d:ff:
7b:8a:9b:41:75:65:63:b7:8a:23:4e:a4:af:d5:5a:
85:81:93:35:b8:69:a5:6d:1f:87:e1:48:11:1d:f3:
89:77:dd:a5:68:62:01:47:5f:ef:91:2f:49:cf:20:
54:75:50:51:94:0e:97:21:f8:99:d9:2c:7a:3e:fd:
04:52:0d:73:d0:a7:3d:0c:87:f9:7f:b1:45:31:71:
b2:61:3b:06:b8:61:e3:cb:e3:3d:73:59:d8:f8:91:
40:81:e3:ee:80:49:8a:6e:95:a2:8c:72:ec:57:e6:
0c:20:b4:44:61:dc:20:5d:9c:48:85:7f:c9:30:f3:
0b:83:52:03:da:ad:7b:58:36:44:42:42:56:1f:ab:
78:74:66:42:dd:f4:b8:4c:d7:3e:47:4b:b4:0c:96:
aa:74:35:bc:0b:f8:f8:32:50:3e:87:c7:5f:33:60:
9a:b1:eb:90:14:0b:25:b7:49:f1:27:b5:d0:32:54:
45:dc:07:9b:23:d0:70:b1:63:b4:db:ae:7c:a9:7e:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FD:49:58:17:E2:86:0F:D4:DD:C5:27:6D:4E:10:10:4F:70:4B:B0
X509v3 Authority Key Identifier:
keyid:72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5a:c5:76:24:45:74:0d:d4:f0:7b:71:e4:63:2b:b1:e6:98:
31:25:ad:b0:79:7c:b8:ab:1a:ee:62:eb:bf:11:9d:cf:94:33:
b4:13:c0:8c:ac:e4:01:df:06:61:25:e8:5d:be:d3:cd:26:90:
f4:a6:0f:32:00:37:1d:14:12:38:bb:ac:db:fa:46:58:a3:ab:
b7:73:95:50:5e:72:bf:1e:9e:b4:dd:14:64:2c:30:41:b4:f6:
45:2f:63:90:f5:50:ed:7a:f7:bf:3e:f3:25:b2:c6:2d:47:6a:
c1:b0:97:b8:76:18:bb:2e:c7:c6:b9:c7:e1:9b:79:52:8b:1e:
8a:5a:d5:f2:13:bc:4e:89:97:a3:8e:f0:e8:66:95:7e:43:66:
86:9f:46:f6:2f:d4:e8:e7:b5:81:eb:02:66:a0:ff:e8:77:d3:
76:a2:90:64:ab:e1:35:00:0d:20:39:68:8a:db:9f:cf:b5:2e:
f9:f8:32:88:5a:6f:5f:86:82:6a:fd:93:06:e4:5e:7b:4b:17:
92:51:62:c5:6e:93:52:55:90:29:b9:9b:81:7f:33:1d:56:99:
9b:93:22:88:31:1b:f5:7f:5c:7c:19:50:07:5a:c0:f8:f9:d0:
92:e2:00:cf:0e:f6:ec:80:59:11:90:24:43:09:b4:96:15:8c:
b8:16:34:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:54 2025 by rpki-client