Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
File: SVfItkDqWWxdEac7PSZu54w_Cds.mft (raw, json)
Hash identifier: zizhtZZgB0neP21CnrUh0imsLLO2laLxcKdwkfwFqzE=
Subject key identifier: 3A:EC:BA:76:1C:C4:B8:5E:BA:F0:C4:D2:E6:F0:97:8D:26:0C:05:F3
Authority key identifier: 49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB
Certificate issuer: /CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db
Certificate serial: 0198D515DC02527863D9197EF4F8F6C9B088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
Manifest number: 08D7
Signing time: Sat 23 Aug 2025 04:00:36 +0000
Manifest this update: Sat 23 Aug 2025 04:00:36 +0000
Manifest next update: Sun 24 Aug 2025 04:00:36 +0000
Files and hashes: 1: SVfItkDqWWxdEac7PSZu54w_Cds.crl (hash: +xjZJxMysKIqSPUw1d1zSGobetXlKlB17TNOZsr4INM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:dc:02:52:78:63:d9:19:7e:f4:f8:f6:c9:b0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db
Validity
Not Before: Aug 23 04:00:36 2025 GMT
Not After : Aug 24 04:00:36 2025 GMT
Subject: CN=3aecba761cc4b85ebaf0c4d2e6f0978d260c05f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:14:51:00:1d:e1:da:03:56:d7:46:23:6c:
66:dc:88:15:28:91:e3:b7:08:22:12:af:e2:ab:1a:
67:13:de:2f:ca:08:91:6f:63:40:9a:ff:d2:0f:3f:
a0:ab:51:a9:c5:79:26:6e:1a:f9:72:94:b3:f3:35:
5e:de:26:3f:4c:01:cf:b5:c3:4a:f9:1c:0f:1d:0a:
99:e0:4d:a2:ca:cb:44:aa:c4:08:ce:e3:0d:cc:9f:
e4:37:85:64:ff:ae:b7:33:22:e0:ed:f7:63:7d:69:
56:28:4d:b1:a1:9d:d7:22:ce:ae:ef:8e:64:82:d9:
4a:bc:73:d1:07:d4:e6:fe:e0:f8:84:78:38:3a:f9:
3f:da:ce:64:5e:71:29:cb:68:71:6c:c8:ce:5b:f9:
44:4d:60:1f:cb:e0:3d:c5:c8:54:81:d2:f2:8d:92:
0e:4c:73:47:40:28:87:d5:fc:25:70:66:38:3e:6a:
34:e0:22:12:f2:d5:18:67:11:c9:55:d8:be:26:8c:
70:5c:a3:14:39:ce:80:fd:6f:0a:78:14:82:db:6e:
c1:3c:9b:84:98:3d:75:a1:fa:81:e9:44:2a:b3:9a:
d7:3f:20:57:fb:c8:ca:bc:7c:bf:8f:c3:80:3b:ba:
fb:b3:c9:30:fd:37:e2:b8:f2:92:c6:93:41:4a:4e:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:BA:76:1C:C4:B8:5E:BA:F0:C4:D2:E6:F0:97:8D:26:0C:05:F3
X509v3 Authority Key Identifier:
keyid:49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e6:e9:39:ad:30:e7:e5:35:92:a1:fc:d5:94:a0:fc:37:6e:
50:fa:15:07:e5:6b:e6:0e:9d:a9:73:60:84:5f:6f:05:88:08:
55:ce:9b:a9:e7:e8:83:5b:c7:74:92:af:9b:6a:eb:c1:a7:26:
d2:f3:5c:ad:1d:d8:32:8f:5e:5d:3a:96:d7:58:87:be:8f:1f:
8d:61:f5:7d:1c:73:4e:68:33:03:20:b4:fa:8d:a2:44:7c:5b:
c8:ed:7c:58:73:33:65:48:be:d8:45:f5:b0:38:66:41:88:91:
1c:2f:71:e6:a9:7a:34:ee:26:b5:2b:c2:45:ce:19:75:5e:b7:
7b:05:f7:ca:a1:cd:b1:7b:e8:ef:08:c8:c1:99:00:35:ca:16:
88:2f:89:95:a6:bc:b0:fd:3a:b7:77:35:20:fc:3d:97:6d:d5:
bf:0b:58:c3:a4:54:a7:7e:5a:5d:06:ca:da:55:23:8e:79:9c:
be:21:0e:e4:91:75:e1:a7:18:98:09:d1:d4:2b:ca:f9:54:c2:
9c:c4:fd:17:9e:d3:32:08:71:ba:7f:48:0a:f5:e9:79:f9:91:
13:5d:ff:03:d3:b8:45:64:ad:65:d1:53:57:dc:c2:80:f9:ea:
d8:10:6c:36:56:61:71:46:7d:68:de:ba:56:a4:70:8a:56:8e:
0c:10:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:35 2025 by rpki-client