Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: +6u/g/+l3793ixKjssP4ju5yIgMZCetcu57tx5SuDCU=
Subject key identifier: E5:11:D3:49:E6:94:9D:FE:A2:21:10:5A:AD:0C:D3:55:60:9E:B5:C1
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 0198D6CD4F7082B792D465E9645867AFE12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 12:00:36 +0000
Manifest this update: Sat 23 Aug 2025 12:00:36 +0000
Manifest next update: Sun 24 Aug 2025 12:00:36 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: YCNyKJ5nF9B4X3U8vswGDs2Sgvrg87fvKp9U0p8uz4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:4f:70:82:b7:92:d4:65:e9:64:58:67:af:e1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: Aug 23 12:00:36 2025 GMT
Not After : Aug 24 12:00:36 2025 GMT
Subject: CN=e511d349e6949dfea221105aad0cd355609eb5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a2:9f:a7:03:7d:38:63:07:2d:b2:65:2f:b8:
b9:4f:fd:c8:0f:81:b6:9a:12:08:b2:7c:44:3b:21:
ef:bc:4b:1d:5a:fe:cf:82:43:1f:b4:85:53:a1:57:
16:30:86:87:e2:a0:40:89:62:95:57:7f:2d:e3:54:
01:23:9f:3a:45:16:56:59:e0:55:0c:18:da:6d:84:
0b:8c:5e:0e:f1:5f:40:b3:0e:42:19:4d:b7:41:27:
a8:84:71:b3:12:79:28:db:d7:3e:d0:d9:14:19:31:
2a:af:4e:81:85:86:7f:cc:3c:af:3e:c4:69:60:e9:
70:4d:27:57:b0:7c:5c:7f:22:5d:e0:2d:ad:5b:41:
d2:b6:f8:d0:87:5a:74:9d:b8:52:ae:c4:cb:cb:dd:
6a:7c:b2:40:c2:88:19:24:fc:67:85:b5:20:8a:86:
35:a9:42:0f:fc:17:a5:99:2b:0e:59:88:c8:13:38:
66:6b:5d:ff:20:64:18:0e:ed:d2:b5:c8:c2:80:f9:
42:60:4f:0f:11:a2:d3:2f:2d:3f:31:d1:f4:00:f0:
ba:9a:de:44:46:b8:f0:9a:ed:24:3a:8b:95:b4:a7:
fa:03:b5:56:3a:6f:b2:12:31:dc:35:c0:db:84:d4:
3a:4d:a1:5c:09:57:2d:54:dd:57:0b:6b:0f:7c:83:
a8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:11:D3:49:E6:94:9D:FE:A2:21:10:5A:AD:0C:D3:55:60:9E:B5:C1
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:14:c4:52:79:01:87:62:61:84:fd:aa:6f:d0:df:89:f9:37:
fa:5f:b0:c0:55:b8:f8:74:ee:a6:49:9d:85:e8:9f:b6:7f:d8:
bd:cb:b6:97:7a:fd:eb:27:cf:e5:c2:01:9a:25:73:c5:a9:5b:
8c:aa:22:8f:15:d2:25:d5:4c:10:9c:27:3a:1d:0f:31:0c:a3:
f0:3f:a7:83:95:86:d7:ed:1d:d6:f5:9d:4a:8a:ea:86:b2:19:
4f:68:a3:23:af:9c:9f:ec:9e:c8:5b:db:d9:13:c5:12:e5:5f:
97:ea:af:0d:ff:80:82:a3:74:f3:ce:4a:66:dd:ac:70:7d:76:
52:fd:b9:6e:6f:70:77:63:ef:f5:48:95:92:10:67:6c:2e:71:
8e:64:66:2d:e9:e7:59:3b:e7:d6:7c:b1:4e:83:26:c8:74:53:
57:a5:5e:71:ec:e8:26:65:fc:04:ac:48:10:0c:d7:26:db:94:
be:9c:fa:da:d2:00:83:b0:f6:20:4c:f9:0a:55:bf:5e:0b:70:
1c:a5:6f:08:a9:a5:01:d8:8c:50:1c:cb:ee:e9:fa:64:58:7c:
80:56:3d:92:2d:5b:1d:47:2c:76:18:18:3d:36:47:0c:75:0a:
a5:f1:5a:53:78:44:bc:1b:73:7d:2a:61:b6:db:b9:7c:b5:8d:
4d:57:70:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:04:02 2025 by rpki-client