Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
File: dEMndQQU00na3gIjNJfPR2Vc0-Q.mft (raw, json)
Hash identifier: EmjXsH1ef7qTNh3+YFnjkhWO8BxsFyz8VsKenCy3BUo=
Subject key identifier: 93:BE:78:E0:43:51:76:DE:6D:A9:95:DB:EF:60:57:D5:A6:F1:D8:E0
Authority key identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
Certificate issuer: /CN=744327750414d349dade02233497cf47655cd3e4
Certificate serial: 0198D5BB84A3D05FCE8848DC84AB45AFAC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
Manifest number: 101B
Signing time: Sat 23 Aug 2025 07:01:32 +0000
Manifest this update: Sat 23 Aug 2025 07:01:32 +0000
Manifest next update: Sun 24 Aug 2025 07:01:32 +0000
Files and hashes: 1: dEMndQQU00na3gIjNJfPR2Vc0-Q.crl (hash: KB9S3zOVGSeo4fU4NUBmAer7C95a5PP5MPELPJINbJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:84:a3:d0:5f:ce:88:48:dc:84:ab:45:af:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744327750414d349dade02233497cf47655cd3e4
Validity
Not Before: Aug 23 07:01:32 2025 GMT
Not After : Aug 24 07:01:32 2025 GMT
Subject: CN=93be78e0435176de6da995dbef6057d5a6f1d8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:48:74:5b:57:f0:66:99:29:2d:ca:47:be:
5f:c5:81:4b:5d:c1:1e:5b:57:e6:17:9f:aa:41:b8:
80:c2:8a:de:08:28:85:5d:15:24:7d:01:c1:c8:9d:
16:f4:f8:c3:b4:e0:39:4d:b8:5e:04:06:9c:59:d2:
11:1b:da:73:0b:f4:e6:d6:d4:fb:92:0b:e3:4b:44:
d5:bb:b3:d8:be:76:21:cb:0f:2e:e1:88:9b:7b:45:
2c:49:8f:7f:28:e6:56:58:ef:16:a6:1c:33:df:d5:
92:f3:87:ec:c2:ee:b3:10:b2:9c:11:f3:48:ec:39:
ef:a5:e2:08:f9:24:0e:60:6c:bd:0a:59:a0:29:9c:
58:2a:5e:6a:af:c3:f5:39:eb:d7:d3:77:2a:6c:0f:
c6:82:e2:a5:3e:d1:1c:d9:76:c2:80:1d:62:94:7f:
db:cb:81:38:ab:7d:10:85:a5:a0:9b:7a:eb:34:03:
3e:42:eb:18:fe:9f:c8:19:d1:b9:78:ae:3f:06:1b:
44:48:36:21:1a:7f:25:f7:20:3d:a8:6b:e4:9d:1e:
0b:55:28:2f:f2:f3:2f:61:8f:00:54:39:94:3e:55:
8e:6d:5d:8d:01:5e:ea:a6:7b:af:ca:29:25:03:25:
fe:2a:72:f5:bd:6f:6c:58:f3:1e:70:43:f7:6c:0c:
56:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BE:78:E0:43:51:76:DE:6D:A9:95:DB:EF:60:57:D5:A6:F1:D8:E0
X509v3 Authority Key Identifier:
keyid:74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:bb:33:f7:51:3c:25:ec:b5:3e:fb:96:4c:ca:e3:22:79:3f:
ea:07:31:c4:34:24:78:7e:df:da:f6:ea:75:ce:69:92:98:5d:
5a:fc:df:2a:78:e9:02:e1:e3:bb:50:c7:08:13:98:fa:6c:66:
29:09:21:93:76:56:06:83:52:fe:2a:6c:e9:5a:e3:99:1c:92:
0f:fa:2a:f1:79:16:03:de:80:e5:34:7e:88:c1:8f:44:74:65:
d4:30:fe:52:7b:21:61:a4:18:20:34:ba:4a:b9:64:59:e1:8a:
5f:47:c0:db:4b:6d:e1:45:19:30:0a:d9:9d:5d:cb:ef:b8:96:
c7:bd:c3:57:cd:76:8c:44:74:9a:d7:b8:43:4f:02:1a:63:bb:
e9:c2:13:a5:59:a6:79:f1:3a:92:47:7f:f7:0b:00:3d:66:8d:
aa:0f:17:1d:b4:d8:4f:66:32:c3:9f:1c:a1:77:e5:b7:33:cc:
d3:d0:0a:5b:cc:83:97:d7:a6:e3:a1:4e:03:49:1b:97:19:d6:
83:e6:ae:d2:77:f6:0d:00:5a:72:12:87:00:d1:17:9d:cf:6a:
36:b2:13:ac:37:e1:1a:87:35:7f:80:26:fe:7f:16:f2:1e:c1:
84:e5:4f:03:52:af:00:ea:42:aa:88:34:0b:83:11:6b:c7:8f:
9e:e3:51:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:11 2025 by rpki-client