Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: Fp5ExnwVqNYnJAGfLg+tC1CNixyKmXZvqQfRDtnI7g8=
Subject key identifier: C4:B1:3E:93:E6:A9:1D:01:40:E8:62:9A:A6:58:C2:00:03:E6:51:6B
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 0198D6610F77B76C37B0082FEF82798468D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 157A
Signing time: Sat 23 Aug 2025 10:02:21 +0000
Manifest this update: Sat 23 Aug 2025 10:02:21 +0000
Manifest next update: Sun 24 Aug 2025 10:02:21 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: jBCopAnJGUeT2DpggwYU5ZKncKasEuBmbhaWHDdAnHw=)
2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:0f:77:b7:6c:37:b0:08:2f:ef:82:79:84:68:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Aug 23 10:02:21 2025 GMT
Not After : Aug 24 10:02:21 2025 GMT
Subject: CN=c4b13e93e6a91d0140e8629aa658c20003e6516b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c0:c7:b1:38:69:ee:4b:04:82:6f:c9:a0:c4:
16:e5:04:b7:0c:16:2b:6b:35:f7:3c:38:38:50:c7:
5e:c8:31:cc:8f:bf:d3:9e:f6:62:79:d0:9b:c7:14:
eb:c2:f4:7d:f8:89:69:85:71:57:52:04:55:ba:63:
02:06:c4:b8:43:cb:e0:92:b4:38:07:98:a2:81:db:
08:e5:68:d0:b0:b4:df:f7:42:eb:ec:42:b3:ef:29:
b1:d3:8a:c9:5c:8e:bb:a9:49:26:39:39:32:83:ef:
8f:f7:09:15:82:a0:bf:1b:43:30:7d:19:e0:62:db:
31:9d:bf:75:09:cc:34:ba:c6:2d:6e:f2:15:04:99:
77:91:4d:d9:94:41:e7:b9:6e:57:77:ee:9a:41:e4:
a9:6f:8f:fd:52:58:1f:ab:94:8d:b5:77:a9:ef:47:
10:6e:67:ee:f4:f7:85:bb:cb:b3:37:20:9b:54:1e:
46:2d:46:54:1c:7e:cd:13:ff:27:bc:5b:b5:4d:ad:
5b:59:02:f0:f7:8e:16:24:1c:45:28:0a:de:41:aa:
e9:bb:a7:dc:60:33:5e:c5:ee:e4:d5:b6:25:06:56:
95:fd:3d:d3:62:49:00:98:f4:97:e0:48:9f:c5:39:
28:e4:83:49:58:61:4d:37:72:39:54:6f:33:31:e0:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B1:3E:93:E6:A9:1D:01:40:E8:62:9A:A6:58:C2:00:03:E6:51:6B
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:df:b0:ed:64:c6:18:39:e5:d0:12:0a:5a:30:79:2e:08:05:
04:27:a5:20:d2:e1:05:25:b0:f4:40:6e:f2:97:03:35:eb:c5:
0f:ee:25:bc:50:b4:52:50:3f:f8:bd:e4:e7:ab:c0:5a:c9:ec:
cd:13:19:9a:63:be:61:2f:27:2e:50:8b:50:a6:68:d3:0d:ac:
e9:80:99:2f:51:a4:65:80:00:94:38:8f:7e:e4:8d:3a:5d:05:
aa:a3:cf:e8:4e:f6:5f:2a:58:1e:d2:39:c8:d7:1a:3a:db:d1:
91:e1:6c:db:de:80:76:5b:af:79:d2:82:24:6a:92:85:82:17:
27:7d:6f:f7:44:8e:49:b9:fd:6b:3b:0a:06:a4:c3:65:31:ad:
33:68:ba:5e:6f:08:fe:57:99:6b:45:e4:a7:77:1c:8c:4d:90:
f9:f4:3b:de:85:02:3d:03:28:fe:a8:39:f1:cb:c7:cc:bd:a8:
83:0b:08:d1:72:35:78:db:c2:c2:15:bb:47:78:1a:07:a8:1a:
8b:5c:43:13:4f:5e:c6:5d:68:fb:cb:bc:55:b0:6b:9f:a6:d9:
86:9d:58:7a:a2:21:7d:37:79:88:e6:6e:e0:84:a7:1f:a6:0a:
c0:b0:a9:8a:95:80:d4:27:81:33:13:21:07:bf:42:28:da:8b:
69:a9:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:27 2025 by rpki-client