Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json)
Hash identifier: tD9N04Lo/q26U2+ol2zp+YParSJrI6EDVbyR2qHb2f8=
Subject key identifier: 38:60:70:13:C6:9A:C7:9F:D2:12:43:CB:38:A4:3A:2F:7F:B4:28:F3
Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Certificate serial: 0198D472DD2E40D645BD95B010BDFD3B680C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
Manifest number: 071D
Signing time: Sat 23 Aug 2025 01:02:34 +0000
Manifest this update: Sat 23 Aug 2025 01:02:34 +0000
Manifest next update: Sun 24 Aug 2025 01:02:34 +0000
Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: i66GTRD8aaK9EpXvzZMpDGUI1UYJFdjrran0DzD1T30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:dd:2e:40:d6:45:bd:95:b0:10:bd:fd:3b:68:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Validity
Not Before: Aug 23 01:02:34 2025 GMT
Not After : Aug 24 01:02:34 2025 GMT
Subject: CN=38607013c69ac79fd21243cb38a43a2f7fb428f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:76:3f:d6:0d:8f:3f:83:de:cd:f2:16:0e:
93:34:8a:17:d9:99:a8:c0:f7:eb:98:0f:98:8d:80:
54:53:91:86:68:f1:b1:c5:f1:9a:ee:9b:1d:0f:51:
fa:db:01:d7:1e:cd:ef:6b:2f:4a:f3:0b:36:99:02:
e6:fa:ee:6e:38:d2:ee:0c:97:2b:4e:71:2d:9d:67:
11:72:6a:44:91:0c:7d:da:b3:2f:a8:a2:2d:60:9f:
3c:9b:70:a2:d3:12:05:fd:56:9d:c9:89:2d:cf:67:
16:34:6e:41:7c:9f:0a:9c:1d:56:2d:fd:8d:53:f7:
ab:19:99:a3:14:2b:a6:0a:e8:60:33:af:40:6a:32:
07:12:36:25:15:a9:d8:8a:16:6f:3f:48:fc:d2:04:
03:2c:b9:56:bf:b3:14:af:06:40:b3:43:5e:b0:21:
4c:06:fc:a0:ad:56:b8:b0:f0:62:d3:45:68:82:6a:
5a:1f:b1:05:7f:b5:55:9e:9c:60:f4:25:69:96:a6:
8c:f5:6a:be:46:b0:0e:bb:28:03:6b:56:0a:73:8b:
ee:e3:c8:5c:0d:d9:56:14:a3:28:51:d1:61:62:38:
24:5c:bc:2d:75:2e:63:f5:2c:33:5d:85:c8:3a:9b:
a2:65:5a:72:34:43:f6:95:f0:ea:90:1b:d6:02:47:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:60:70:13:C6:9A:C7:9F:D2:12:43:CB:38:A4:3A:2F:7F:B4:28:F3
X509v3 Authority Key Identifier:
keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a1:6c:cd:43:29:d7:bf:83:0b:c8:60:33:96:40:13:21:5a:
d5:a7:7f:83:0c:a6:03:8c:0a:25:f6:9d:c2:c9:6b:63:b0:e3:
d7:e4:62:c2:83:5f:55:d5:21:58:d1:ce:db:44:39:91:e9:14:
bf:12:14:f1:da:4e:05:79:1e:95:85:b1:77:75:6e:df:97:e1:
15:ac:60:a2:b7:dc:5f:d9:41:59:f2:e7:d7:d7:7a:df:ed:62:
31:fc:e9:87:06:6d:e3:32:92:b7:85:06:75:9b:56:87:11:ad:
20:b3:80:6b:a7:8a:8f:c2:1c:0c:34:3b:31:92:f5:4a:e9:db:
e9:51:b9:6c:e0:7d:48:25:9b:b5:d2:b0:2f:ac:f2:b9:3e:14:
30:fe:e2:ab:be:6a:bb:66:85:48:ea:48:bf:ba:23:54:d5:27:
55:26:c1:40:ec:79:be:ca:d4:c4:33:08:3f:57:9d:b0:55:f5:
3b:7f:72:e7:7b:68:40:e2:7d:f2:52:49:ba:b2:12:36:c1:b1:
06:20:88:b7:ce:9f:40:88:5e:40:d9:ac:91:f9:1d:f4:8c:ef:
0e:4d:f7:3c:84:d5:5b:fb:49:05:d8:5f:68:e1:ad:9d:bd:90:
1e:fc:cc:e9:40:57:62:ff:b4:59:9e:e4:42:cc:9f:38:0f:48:
e6:83:09:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:41 2025 by rpki-client