Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
File: d7AlLypnrNQplw-mSmQXd29y2NY.mft (raw, json)
Hash identifier: 6ZDIe+l3BH6Y2k/6p1mvOOxpbqLTKKy6g6F+Np8irIg=
Subject key identifier: 8B:53:00:69:60:3D:B5:E1:8B:29:0A:4F:61:27:AF:87:1C:20:3E:78
Authority key identifier: 77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
Certificate issuer: /CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Certificate serial: 0198D51583AEECA87472D20F58A2F0D3EB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
Manifest number: 0525
Signing time: Sat 23 Aug 2025 04:00:13 +0000
Manifest this update: Sat 23 Aug 2025 04:00:13 +0000
Manifest next update: Sun 24 Aug 2025 04:00:13 +0000
Files and hashes: 1: d7AlLypnrNQplw-mSmQXd29y2NY.crl (hash: ll4Vy2Y2lRX1Ufz6+59E3p4m4Ndjod/nnZ365RLPreM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:83:ae:ec:a8:74:72:d2:0f:58:a2:f0:d3:eb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Validity
Not Before: Aug 23 04:00:13 2025 GMT
Not After : Aug 24 04:00:13 2025 GMT
Subject: CN=8b530069603db5e18b290a4f6127af871c203e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:8b:7e:e5:41:cd:ce:64:6e:b7:f3:b0:a8:
7b:a4:ad:60:db:98:c4:4f:a7:a0:23:82:d7:70:f0:
47:a6:26:29:3c:c6:4a:f4:70:44:6e:27:85:87:1c:
c1:42:be:6f:91:dc:a8:24:9d:a3:67:9b:8a:01:35:
d3:01:7a:f7:81:35:35:c8:87:f2:4f:a0:7e:47:a3:
a1:8c:51:82:35:32:ad:13:2f:b7:2a:92:6a:5b:f9:
d2:8a:21:6e:c6:61:5e:a7:fe:69:b3:16:8e:49:de:
07:a8:1e:6e:27:81:50:84:5f:f5:f1:b2:ad:b7:16:
ef:22:66:b1:20:ce:4a:c3:8f:64:f8:cb:3f:b9:4a:
12:89:8a:42:ef:de:4b:0b:28:7b:08:8e:92:b6:94:
95:1f:6c:e0:e4:9f:9e:30:49:08:74:40:22:a9:97:
95:8d:fe:2f:23:9c:2d:a2:77:43:95:d1:4b:42:0d:
1b:4d:32:80:c6:94:06:23:67:fd:d1:c7:d1:5c:87:
43:a6:59:86:70:54:56:e5:f0:66:4e:1b:a2:44:a2:
37:58:78:c3:c8:ac:24:c3:60:6e:8f:dc:02:45:c2:
38:ec:29:c4:4b:cf:54:f8:0c:e6:4d:11:72:cf:a2:
43:7e:8a:96:f7:43:6d:76:e6:50:3b:bf:c0:90:5c:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:53:00:69:60:3D:B5:E1:8B:29:0A:4F:61:27:AF:87:1C:20:3E:78
X509v3 Authority Key Identifier:
keyid:77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:24:74:01:a7:89:73:f9:28:97:5c:22:aa:28:bc:aa:ba:64:
9b:2d:aa:41:8c:eb:a3:6c:4f:62:e8:7c:eb:58:51:70:5a:1d:
ec:e2:fd:5c:24:d4:fa:b4:36:1c:4f:7b:d3:42:f7:09:21:e7:
4e:19:2b:e4:5f:33:2b:b6:86:fd:a7:88:60:e6:17:fc:7f:5d:
70:47:a9:97:23:fc:93:d0:55:69:27:70:09:6e:52:30:b2:cb:
81:84:9a:e5:b0:c9:30:ac:bf:d4:77:73:6f:92:9a:65:53:88:
b9:26:45:f7:02:1b:8c:10:43:ec:7c:f9:ae:7a:69:10:a3:6e:
e3:ab:0d:08:a5:49:f4:22:3d:b0:0c:cc:b7:0f:5a:7f:86:3d:
3c:ec:0a:c5:5f:f5:aa:23:07:4d:3a:4b:e4:8e:a7:d7:67:f7:
aa:40:4e:f1:dc:0c:12:6d:66:40:f5:f6:8d:51:4c:89:97:c6:
62:01:10:2a:0a:da:e7:17:c1:07:4e:a3:24:6a:36:d2:58:d3:
b8:b2:8b:44:1b:24:e3:3e:4f:fb:ad:20:8a:1c:9b:a1:e9:e7:
d9:1f:b4:f5:ac:18:6d:59:20:e6:27:13:27:6b:81:97:87:8a:
5b:9b:2b:c9:96:ad:ed:16:48:f6:31:18:cf:43:2d:7d:88:da:
0a:0d:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:34 2025 by rpki-client