Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
File: _D39VAG24EhxYrQuBDdnosKTGnc.mft (raw, json)
Hash identifier: u5yeJTYjVTbPiaxjchpyLmPWO2p80TSPpx1pcatCz3s=
Subject key identifier: EA:40:40:C5:4E:41:C3:F8:8D:BF:5F:FC:17:34:93:B4:BF:F6:91:D2
Authority key identifier: FC:3D:FD:54:01:B6:E0:48:71:62:B4:2E:04:37:67:A2:C2:93:1A:77
Certificate issuer: /CN=fc3dfd5401b6e0487162b42e043767a2c2931a77
Certificate serial: 0198D4737A92778F4C3620804EC29B274467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
Manifest number: 09CB
Signing time: Sat 23 Aug 2025 01:03:14 +0000
Manifest this update: Sat 23 Aug 2025 01:03:14 +0000
Manifest next update: Sun 24 Aug 2025 01:03:14 +0000
Files and hashes: 1: _D39VAG24EhxYrQuBDdnosKTGnc.crl (hash: +lXjOfQREL7ieLJpLOklW1AyJbQyyne4m6Ls/YUdj5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:7a:92:77:8f:4c:36:20:80:4e:c2:9b:27:44:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3dfd5401b6e0487162b42e043767a2c2931a77
Validity
Not Before: Aug 23 01:03:14 2025 GMT
Not After : Aug 24 01:03:14 2025 GMT
Subject: CN=ea4040c54e41c3f88dbf5ffc173493b4bff691d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:18:d0:99:76:ed:e0:84:b2:26:16:df:6d:ec:
fe:48:ac:67:1c:d7:ea:3a:be:4d:74:d0:ef:bb:97:
47:5b:ca:79:50:22:2d:96:fa:76:ff:1c:c0:16:8b:
fa:f7:ac:38:4c:a8:24:5f:dd:a7:fc:d7:f4:ca:0e:
c3:db:42:25:61:1c:34:cc:e3:ae:21:1f:7f:1b:c6:
ea:8b:4b:03:a5:90:e1:b8:a6:8a:c3:eb:65:ec:a5:
78:d3:de:ce:af:63:0a:d2:d2:02:b1:8f:1a:05:19:
11:44:69:4a:5f:f2:85:93:4d:94:86:cc:cf:f8:b8:
b8:e2:e1:05:96:cc:15:9e:19:86:43:1e:99:5f:ca:
e2:41:35:e5:04:84:fd:32:23:29:3e:b2:51:34:9e:
ef:49:70:64:c9:bd:12:0d:0d:96:a8:41:6c:2a:ff:
c1:d7:0d:53:a2:64:e9:62:3d:18:1a:a1:74:6e:bd:
b8:5d:3c:27:57:eb:df:f4:11:39:4e:82:6e:cf:2e:
6b:bc:f3:c4:1e:90:14:1e:67:b3:10:13:c7:e2:1d:
6d:66:6f:5a:8a:5c:15:bb:cd:b2:f0:f4:12:81:5f:
32:bc:65:39:f0:c9:77:a8:7c:74:83:19:84:3a:d3:
b8:ff:87:1b:01:64:25:fe:33:f1:2b:df:e7:b5:df:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:40:40:C5:4E:41:C3:F8:8D:BF:5F:FC:17:34:93:B4:BF:F6:91:D2
X509v3 Authority Key Identifier:
keyid:FC:3D:FD:54:01:B6:E0:48:71:62:B4:2E:04:37:67:A2:C2:93:1A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:97:55:75:5d:ca:f2:43:5c:34:8c:8f:df:09:b9:06:dc:fc:
83:5d:3e:58:11:b5:75:06:f1:09:96:bc:94:97:82:30:e3:db:
85:87:a4:ae:73:b8:1f:2e:ae:29:b7:1e:ef:1d:fe:ff:42:87:
b9:48:8a:4e:79:f7:d1:46:55:95:af:68:1f:97:40:99:55:86:
be:89:37:49:7f:24:53:81:eb:2b:68:59:62:c7:aa:71:24:ab:
37:19:8e:d6:e0:9b:a0:7b:82:15:be:5b:d8:06:ba:c5:04:c9:
16:0a:9a:5a:88:61:f7:5b:93:c2:c2:7a:82:e7:66:f5:5d:ce:
08:02:01:45:28:95:5d:55:c3:6a:04:c1:f1:35:e4:0f:92:d8:
c7:3a:c1:ef:70:58:24:38:d6:c2:ea:50:06:f0:1e:21:71:50:
62:3f:71:43:94:8d:22:87:cd:2a:29:bb:8d:cc:9d:d8:f9:02:
bd:27:2b:dd:09:dd:9e:4c:e6:2c:da:86:2e:54:a3:7b:63:7e:
e5:08:1f:a0:3b:e1:42:af:de:35:3d:5d:0e:5e:88:ca:04:42:
90:b6:c5:30:d7:e0:6a:ce:90:5a:f2:fa:1b:49:88:a9:90:5d:
78:b3:92:3f:76:df:b2:53:ad:1e:1e:3e:46:e4:6b:b2:6a:c5:
93:10:f9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:45 2025 by rpki-client