Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
File: gU3w5sDcpazuCDqMcwTUXz0z1W0.mft (raw, json)
Hash identifier: +aQDraix2Kil/2d4EiGIs25LnNpTdYzIHN5YCUh54is=
Subject key identifier: 55:A6:07:E0:29:61:14:EA:9E:6A:38:FA:46:3D:F8:50:D4:D6:01:6F
Authority key identifier: 81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D
Certificate issuer: /CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d
Certificate serial: 0198D65F08A77A804AA2558E391A2E15B78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 10:00:08 +0000
Manifest this update: Sat 23 Aug 2025 10:00:08 +0000
Manifest next update: Sun 24 Aug 2025 10:00:08 +0000
Files and hashes: 1: gU3w5sDcpazuCDqMcwTUXz0z1W0.crl (hash: Rs2KuqIw5aKq7JCLizZwu0jVTqFkVUJS4qOwx3zDTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:08:a7:7a:80:4a:a2:55:8e:39:1a:2e:15:b7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d
Validity
Not Before: Aug 23 10:00:08 2025 GMT
Not After : Aug 24 10:00:08 2025 GMT
Subject: CN=55a607e0296114ea9e6a38fa463df850d4d6016f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:cb:7e:4d:87:e4:59:92:69:7f:c4:3b:64:
86:db:59:e7:be:8e:c5:a0:d0:92:bf:db:93:f5:ea:
93:9b:0a:93:33:70:d9:dd:4e:78:a3:12:cd:79:48:
89:e2:aa:4a:03:e6:a5:4c:a8:5d:82:c2:a1:24:57:
db:b6:35:a7:1a:a8:fe:e2:73:0e:fd:82:65:71:15:
91:9e:44:43:c9:b4:b3:9e:78:5e:e1:78:8b:8d:ec:
bc:8c:52:95:c2:5b:76:73:8d:f2:da:1c:23:6e:8c:
08:ba:80:3e:3e:2b:39:70:95:95:53:a9:0c:0e:8a:
11:8e:76:17:13:7c:b8:d9:44:cb:62:3b:7c:a7:d2:
cc:0f:eb:0c:50:c3:de:0d:20:99:ed:80:4e:bb:fc:
49:8b:13:e9:cd:b1:45:8c:a6:fb:b6:da:b9:5b:40:
ee:68:4f:4c:b8:bf:98:e7:7d:0a:e2:bf:7f:33:92:
93:e5:01:b8:d6:ae:be:cb:1e:16:f3:65:cb:bf:0b:
93:b6:22:af:72:82:b7:28:dc:10:93:0c:7f:63:ce:
1d:5e:ea:8b:f8:98:16:0c:3e:11:6d:3e:62:85:b7:
17:cd:bd:cc:4e:a8:22:6a:d4:8a:fd:ff:c6:af:9a:
6c:e6:5d:89:a2:99:a9:c6:21:05:63:f3:9c:49:fa:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A6:07:E0:29:61:14:EA:9E:6A:38:FA:46:3D:F8:50:D4:D6:01:6F
X509v3 Authority Key Identifier:
keyid:81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:78:8d:18:50:28:f0:d3:51:27:3f:cf:9e:ed:8b:bc:a4:82:
fa:c0:98:98:ab:91:9d:00:a8:57:54:21:c8:c7:64:04:44:41:
82:4e:ce:d3:5e:97:ea:12:e2:86:10:81:26:16:05:6b:a8:ca:
25:13:b6:49:41:0b:72:ce:9f:37:cc:d9:8d:e3:e8:03:78:a1:
73:f6:88:f0:61:3b:a3:81:74:4c:4c:78:29:60:39:11:85:35:
96:57:b1:61:a3:ab:94:da:7b:7b:15:f0:10:dc:71:8f:d4:14:
74:8d:c6:09:44:ce:64:42:5f:c2:c5:2a:94:ef:fe:66:ce:8f:
13:77:a2:d3:5c:50:f8:4d:4b:ee:dd:0e:78:44:9d:45:07:83:
0a:50:70:03:f7:51:ca:c9:2c:b8:5f:bb:4f:6b:4d:c9:66:27:
bb:22:5f:f0:1c:8d:dd:7e:00:a4:e4:c0:cc:5a:68:b0:9e:86:
f9:cc:e4:b6:37:c8:3c:36:f4:14:db:d5:55:e3:52:57:c6:ee:
29:14:ae:4f:0d:4f:cd:ac:f8:c2:51:0a:5c:ad:50:1e:f7:a3:
48:e1:a5:17:47:7e:c9:c6:27:24:d6:8e:97:da:0d:87:ac:37:
c1:a7:38:c5:cb:3c:37:73:96:6d:e3:d1:bb:00:62:52:37:fb:
53:6c:ed:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:35:41 2025 by rpki-client