Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
File: 79XDTJ_TJEnLwIirENkbWkq1Nho.mft (raw, json)
Hash identifier: Z8uO/W1rZ/nyZqAC87mLLcQvTeciewtigGs8xNKLIS4=
Subject key identifier: F4:0A:DA:91:A3:33:47:12:43:FD:71:6C:63:E0:05:E3:A5:6D:CA:0E
Authority key identifier: EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A
Certificate issuer: /CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
Certificate serial: 0198D583AE869BB72FCF5DAAEE5B5679DCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
Manifest number: 0621
Signing time: Sat 23 Aug 2025 06:00:33 +0000
Manifest this update: Sat 23 Aug 2025 06:00:33 +0000
Manifest next update: Sun 24 Aug 2025 06:00:33 +0000
Files and hashes: 1: 79XDTJ_TJEnLwIirENkbWkq1Nho.crl (hash: KSGQMzkVFLFFXdU0iRJpNVYFJAK210YKx55385B+tGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ae:86:9b:b7:2f:cf:5d:aa:ee:5b:56:79:dc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
Validity
Not Before: Aug 23 06:00:33 2025 GMT
Not After : Aug 24 06:00:33 2025 GMT
Subject: CN=f40ada91a333471243fd716c63e005e3a56dca0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:1a:ff:9c:f1:7a:a7:aa:3b:1e:b1:0b:a9:
12:a5:fc:6d:f4:84:75:1f:fa:34:be:2e:d0:c0:85:
cc:b7:ad:f1:14:e9:41:d4:0b:45:01:a3:64:08:ac:
39:fa:d9:1f:65:d0:18:9f:fd:9b:01:f4:66:96:0e:
7b:38:35:88:e6:2b:8a:ac:d1:d5:83:f9:a8:33:90:
4d:a8:af:fb:a7:51:3a:82:be:4b:f6:c8:4f:65:4f:
11:53:45:08:91:44:39:70:70:ad:53:50:61:84:d2:
a3:1f:15:89:f3:38:e0:c8:4d:88:58:2a:19:0f:e4:
07:cd:9e:af:4a:33:47:0b:12:70:c4:aa:39:5c:91:
b7:d7:57:bb:38:03:f0:37:45:85:b9:67:2d:72:1b:
33:dc:ba:9a:8b:16:68:0d:72:3d:c1:fa:f2:4f:0c:
7d:12:4b:38:70:3a:79:58:75:0e:d7:bc:ef:32:b5:
ee:99:f6:c0:1f:7e:b9:b4:ca:82:a5:8c:49:d8:54:
a0:19:d7:9b:7c:6e:f1:7c:61:66:a6:f5:c0:13:e7:
1f:68:52:09:18:27:a5:21:6f:ca:a9:73:f1:03:38:
4e:40:45:3a:86:2b:6d:78:49:79:00:f4:3b:f0:06:
b0:45:6a:17:da:b0:63:90:0d:92:2f:89:fe:65:f7:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0A:DA:91:A3:33:47:12:43:FD:71:6C:63:E0:05:E3:A5:6D:CA:0E
X509v3 Authority Key Identifier:
keyid:EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a4:f9:29:fe:0c:43:54:1b:65:2a:c4:ce:dc:6a:4a:f3:43:
7e:9d:f4:a5:a9:fe:8f:ae:7b:26:9b:f1:c1:48:08:90:d4:80:
6e:4a:24:f9:a0:a5:f8:d8:4f:a5:9c:bb:20:5a:91:d4:d2:02:
67:42:cb:3f:39:fb:e9:f3:4c:75:83:1f:75:75:d7:20:3d:1b:
ff:12:75:ff:f5:e2:b5:52:fd:cd:fe:45:02:a9:19:b3:fe:15:
3b:05:42:d3:78:55:18:3d:4d:4a:6e:e5:7c:29:fa:26:d7:00:
e3:b1:f1:1a:73:c0:e7:c4:f9:49:ca:c6:f3:23:09:74:3a:8e:
c5:56:b9:2e:13:6b:54:00:b0:76:cd:bf:00:47:18:8d:23:d0:
88:ef:d6:f3:ef:b2:d8:dc:f0:ac:5c:58:1e:fa:55:2a:97:6a:
95:c4:f3:ca:2f:ae:60:84:ea:78:26:b5:b8:54:bb:d3:b6:cc:
f3:32:5b:6a:0b:58:7f:fc:64:49:9d:da:16:2a:48:8c:54:37:
b1:de:06:65:e9:65:f1:dd:e9:b7:5e:f9:99:85:fa:d2:22:5c:
d2:f4:55:16:53:24:36:00:d7:52:c2:92:c5:f1:46:32:0a:a0:
1d:c0:f5:47:66:98:99:93:1a:89:d8:4e:c7:13:d7:5a:a5:5d:
ba:70:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:30 2025 by rpki-client