Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier: cPkn2nZZTIpl5ClmMFmKd0ZOHBjM/EKIdt0AwDLujGM=
Subject key identifier: AD:DD:7B:61:05:52:8D:9B:4C:4B:EF:3E:DB:C7:75:C9:B9:18:66:1C
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial: 0198D515D39488B29ADAFF6E203936444668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number: 09BA
Signing time: Sat 23 Aug 2025 04:00:34 +0000
Manifest this update: Sat 23 Aug 2025 04:00:34 +0000
Manifest next update: Sun 24 Aug 2025 04:00:34 +0000
Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: P4f7XnSeMAggauMPd0SpGLnMulPDQpPOsicDv78tdvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d3:94:88:b2:9a:da:ff:6e:20:39:36:44:46:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Validity
Not Before: Aug 23 04:00:34 2025 GMT
Not After : Aug 24 04:00:34 2025 GMT
Subject: CN=addd7b6105528d9b4c4bef3edbc775c9b918661c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:15:9f:da:26:1e:15:51:ff:29:78:5a:77:
b4:9d:6d:4c:0c:76:86:14:44:79:ca:13:6f:d5:b1:
fc:22:50:2f:57:99:48:04:b3:ed:f1:0f:17:6a:1c:
08:e6:cc:2d:6f:a4:d6:31:0a:0f:e6:d3:f5:8f:f0:
70:41:8e:2a:81:fd:89:ce:48:73:91:65:31:71:de:
31:a2:55:aa:bf:91:eb:2b:8a:b8:2d:c0:05:0d:1c:
5e:78:f6:2e:76:7e:af:fd:95:84:87:f6:35:85:f0:
8e:72:cb:a2:32:cf:ea:61:9a:41:d9:e0:45:f8:62:
4c:76:5d:5c:46:b0:a1:48:29:61:c2:4f:01:d1:76:
24:e6:6b:4a:60:49:1e:df:6e:38:c2:df:69:01:3f:
d0:cc:a2:81:d4:d8:d4:dd:5d:47:81:22:5a:53:07:
80:a4:c5:f3:ca:19:eb:75:8d:1a:eb:92:f5:81:09:
f9:7f:51:ad:25:f7:17:03:df:0f:8f:c7:85:ff:74:
87:92:ad:4b:9a:1a:30:22:97:0d:d2:11:c0:82:3a:
8a:e2:5b:19:d5:b3:bc:dd:ae:16:51:82:4a:60:23:
05:72:c4:a5:7f:11:6f:af:39:11:51:07:cd:60:61:
8c:9f:f2:ae:15:16:68:ca:77:b9:11:45:30:fa:42:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DD:7B:61:05:52:8D:9B:4C:4B:EF:3E:DB:C7:75:C9:B9:18:66:1C
X509v3 Authority Key Identifier:
keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fc:ce:96:1a:e0:c1:a0:2d:df:58:93:e3:67:f9:f2:14:0d:
75:9a:f6:42:94:93:a5:43:bd:d4:28:cc:da:90:8b:a1:1e:fd:
99:17:ac:32:0b:a0:0e:76:66:22:24:f1:24:a4:16:a3:21:d5:
32:b5:b2:05:69:e7:fa:81:e0:81:00:be:83:f0:76:6f:d7:19:
d0:7c:ad:f2:6f:af:e6:26:92:f2:6a:b9:19:e7:48:f2:a7:73:
5e:60:b4:c4:50:5c:7b:a1:d2:98:c2:9f:6a:8f:f2:0a:a3:e4:
75:cd:01:dd:3d:c8:37:52:94:78:46:77:0e:b9:eb:70:48:4b:
cd:47:32:11:89:8c:77:94:08:1b:b9:23:e3:11:05:ce:24:04:
f9:52:2b:e3:89:13:5f:5a:8a:b2:87:ae:c9:12:4a:81:56:28:
1b:7b:b8:cb:69:64:6c:8f:b8:06:7a:6b:56:f7:63:4d:a5:cb:
70:a9:ca:15:b6:6d:b3:2e:9d:2b:96:03:36:2c:f9:0b:31:50:
ef:68:c5:e2:4d:68:52:86:5b:f8:db:85:33:31:d8:56:9d:5d:
c5:e8:e8:f9:77:ac:35:28:ab:37:38:95:f0:c5:64:ad:47:ec:
9c:08:8d:0d:61:75:50:17:b5:51:42:79:60:44:d9:73:2b:c0:
3d:5d:28:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:13 2025 by rpki-client