Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
File: V25aWVM8ptDwtIgH0Md-FWhgTl4.mft (raw, json)
Hash identifier: SpBBkjWQ0npFXzda8D7So8JperC6sBaHhL02xji8TNs=
Subject key identifier: 49:3A:89:84:32:23:2F:9E:26:A3:D9:8C:C9:01:BF:14:A7:85:48:58
Authority key identifier: 57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
Certificate issuer: /CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Certificate serial: 0198D6CD78B425801A03AD5FE67F4EDD68E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
Manifest number: 068B
Signing time: Sat 23 Aug 2025 12:00:46 +0000
Manifest this update: Sat 23 Aug 2025 12:00:46 +0000
Manifest next update: Sun 24 Aug 2025 12:00:46 +0000
Files and hashes: 1: V25aWVM8ptDwtIgH0Md-FWhgTl4.crl (hash: h6fYxI/IzeqJ0aJ4Gl9QUSGEq2n9vGBrSIemHCP9Dys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:78:b4:25:80:1a:03:ad:5f:e6:7f:4e:dd:68:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Validity
Not Before: Aug 23 12:00:46 2025 GMT
Not After : Aug 24 12:00:46 2025 GMT
Subject: CN=493a898432232f9e26a3d98cc901bf14a7854858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e9:5b:0b:b7:ea:30:a2:e9:31:21:ee:81:e4:
c9:fe:05:d3:cb:25:1c:32:6a:02:51:58:83:3e:86:
d5:2d:10:b3:3b:66:e3:c4:db:04:44:9b:5d:99:fb:
94:d2:ba:ba:81:07:0e:5f:83:de:a7:d4:8d:8c:de:
12:91:43:83:c3:5c:dd:e5:6a:8f:cb:04:b0:f6:45:
b5:2f:e7:e8:ff:bb:d1:6e:64:0e:35:57:b6:5b:8b:
5f:07:37:dd:f6:e0:c2:1e:17:f0:a6:5c:0b:88:8a:
3a:f1:1b:76:59:86:aa:7e:7b:b3:8c:1f:7b:87:aa:
eb:1f:9e:c8:da:c8:2f:40:00:b7:7c:02:cb:81:67:
40:78:f0:09:38:c0:a8:d9:90:ed:40:23:dd:25:0f:
ac:23:4a:bd:36:18:f4:36:dc:6b:95:0f:8e:ed:36:
41:6c:f2:e5:b0:8f:00:99:b0:8d:6b:71:64:3a:8f:
8f:69:ca:bf:e2:f5:4c:8a:5a:23:24:70:68:39:d9:
2d:5d:27:c8:1d:b6:4c:13:29:7d:df:84:82:c3:8b:
29:69:fd:a3:fc:ae:6d:74:d7:33:0f:3e:75:15:af:
72:d6:01:7f:7a:ef:5e:3c:3c:a1:e4:8a:cf:f1:2c:
fd:e0:61:0e:b4:ee:8b:69:81:4c:8f:d6:bb:69:50:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3A:89:84:32:23:2F:9E:26:A3:D9:8C:C9:01:BF:14:A7:85:48:58
X509v3 Authority Key Identifier:
keyid:57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5f:6e:3d:6b:2a:d5:98:9a:b0:44:6a:24:72:e6:3f:91:22:
55:3e:16:2f:06:74:5e:2e:d1:8c:05:41:dd:bb:25:bf:ae:a6:
c4:24:b9:17:79:b5:95:1a:cd:80:8e:4e:8f:61:a8:7c:90:09:
56:f1:69:00:7a:d0:94:5d:31:86:14:67:b8:ca:85:9c:3a:c3:
0d:4c:19:70:36:f4:67:e4:6e:5a:8d:df:90:3a:fa:30:6c:68:
70:d2:01:d0:70:0c:2d:d2:cd:75:a5:91:01:9a:ae:dc:6b:5e:
a5:f6:9b:74:0d:e3:56:f0:25:6c:76:97:a1:da:93:6a:e9:81:
c8:9a:df:c0:d5:60:0a:fa:cf:35:95:ea:c7:b6:ae:6a:42:1e:
f3:aa:91:61:7b:bf:ca:f9:75:ba:fb:2b:0b:7b:0c:2f:a4:b9:
39:9d:f9:0b:4d:bf:42:f2:73:11:c7:95:d7:45:ef:f7:76:16:
9e:46:4b:0f:1a:11:dd:4d:95:d1:aa:dc:23:b4:f4:55:97:0b:
94:3d:bf:53:64:74:43:98:65:fe:48:d4:26:d9:9f:f6:af:fc:
f4:fd:56:a2:80:3c:27:c0:de:36:e1:47:c6:b2:77:d4:53:cf:
fc:86:75:aa:12:b3:c3:55:20:90:72:f9:51:ea:c6:1b:23:c3:
56:22:60:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:56 2025 by rpki-client