Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
File: R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json)
Hash identifier: fD2KMpb0N9s+Cq9RtaEF1IbimAjWh6uHwETtO0tpopk=
Subject key identifier: CE:4B:44:5C:24:69:8F:87:7A:25:25:B5:E6:E0:D9:EC:C5:C0:E1:CF
Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
Certificate issuer: /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Certificate serial: 0198D47434E97087747C9D430203EB544258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 01:04:02 +0000
Manifest this update: Sat 23 Aug 2025 01:04:02 +0000
Manifest next update: Sun 24 Aug 2025 01:04:02 +0000
Files and hashes: 1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: P4Lf5Ifuus/utqZxJ4eZmUDW1Yom580yedWKNDTollQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:34:e9:70:87:74:7c:9d:43:02:03:eb:54:42:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Validity
Not Before: Aug 23 01:04:02 2025 GMT
Not After : Aug 24 01:04:02 2025 GMT
Subject: CN=ce4b445c24698f877a2525b5e6e0d9ecc5c0e1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:9d:54:ae:41:85:9d:29:ab:22:99:8e:14:
1c:9d:ef:45:09:d1:3d:96:75:88:8d:45:b3:77:8d:
a8:ef:0f:5c:4a:22:24:d2:22:76:3a:99:24:d3:b3:
af:97:3a:e3:95:4e:95:ed:06:98:89:35:e7:63:92:
a8:e1:ef:bd:09:fe:06:5c:61:2b:8a:78:0b:68:05:
da:c9:e6:2c:65:5d:77:8e:6c:e2:a3:b1:e9:04:46:
0d:f9:9a:62:4d:0e:b2:c8:43:70:06:34:99:80:6d:
55:28:99:89:72:b5:8a:77:98:07:18:b7:6d:b8:fd:
f4:fa:06:52:e3:ac:3d:55:22:d1:a6:89:13:0f:f6:
3e:09:40:97:c2:a6:d6:68:fc:2c:98:ee:e0:04:b5:
87:0d:8c:07:ff:be:1c:b0:b9:41:67:45:69:bb:eb:
df:be:ed:de:4b:d2:ee:51:34:1a:72:cd:09:71:03:
24:5d:d9:20:52:45:43:23:fb:ce:eb:87:58:70:55:
4e:54:25:f0:cd:03:01:bb:03:d5:a9:03:b8:1e:9b:
1a:40:91:20:7e:c0:03:73:96:72:7e:b0:3e:93:ed:
4d:28:a2:cd:43:ae:b2:54:d1:7a:af:35:37:e9:3f:
fb:ec:d2:b0:2a:d3:5d:9e:f2:4a:fb:f0:03:78:33:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4B:44:5C:24:69:8F:87:7A:25:25:B5:E6:E0:D9:EC:C5:C0:E1:CF
X509v3 Authority Key Identifier:
keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:71:e4:d4:d3:5a:e1:21:93:94:9f:b4:67:e0:b8:2b:ef:a9:
5a:4a:7b:5d:ae:bb:99:3a:52:41:b2:bc:f5:f5:1f:3f:55:52:
d0:25:6d:62:b0:cc:35:01:57:71:d8:23:47:99:ff:14:3e:3f:
d4:ae:9b:aa:ad:29:89:6f:7b:07:e6:5a:04:82:97:f3:8c:64:
eb:a4:4e:4d:2d:51:ba:63:b0:e3:a8:f1:ad:b6:ab:ed:7a:79:
7d:32:48:0e:3b:ea:73:d1:52:d5:54:2e:3e:16:90:1a:85:56:
56:63:74:11:a4:02:98:e1:de:ec:7b:eb:66:94:d8:14:ff:b1:
ad:7e:b6:77:36:8d:06:7d:e5:2e:c0:3e:41:85:dd:13:7b:26:
d0:50:d0:18:62:64:95:4f:92:66:4b:1c:fe:26:58:26:1a:19:
29:78:2d:a0:e0:15:ba:6c:e5:09:b2:ac:99:26:63:14:2f:d7:
7a:e6:69:55:17:cb:e0:30:70:9f:8a:1d:5e:fa:f7:ca:07:b7:
57:37:77:23:4b:0e:97:29:fd:3b:46:11:c5:90:4c:1b:54:1b:
4c:77:ce:58:2b:1c:ef:8d:ac:84:52:ec:06:0e:d2:05:db:92:
f1:16:7d:2c:9d:ae:f8:a8:21:ec:1b:04:88:4e:c1:48:d9:07:
8c:2e:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:37 2025 by rpki-client