Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: BAXClnAfIdfz4i/nQPoDYhO678Mg3OH0Lw5CHCMOhL8=
Subject key identifier: A8:1B:61:6D:30:3D:F4:80:3E:C8:45:AB:54:BB:9E:96:A4:AF:92:41
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 0198D7058B9DB0F1B2E4A679209A2140DE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 100D
Signing time: Sat 23 Aug 2025 13:02:01 +0000
Manifest this update: Sat 23 Aug 2025 13:02:01 +0000
Manifest next update: Sun 24 Aug 2025 13:02:01 +0000
Files and hashes: 1: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: 29Jwlicwjb2AEdSpKXissoJE2WmJMUc3KVmTpmMAr+I=)
2: JoXcYev6DySlst62DTDcDz1JN0Q.roa (hash: PRhyl4bdJivpbrgVw6w06UO6PZN+9+qwU0T6MPbrnFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:8b:9d:b0:f1:b2:e4:a6:79:20:9a:21:40:de:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Aug 23 13:02:01 2025 GMT
Not After : Aug 24 13:02:01 2025 GMT
Subject: CN=a81b616d303df4803ec845ab54bb9e96a4af9241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:1a:42:66:40:dc:97:96:a6:e7:36:23:11:
0e:bd:6d:e3:c1:ec:2f:1d:ef:ee:f9:49:4f:07:f3:
5e:c9:cc:7e:02:55:9f:cb:a2:ab:cf:c8:ca:8e:9c:
68:93:5c:d6:32:c3:ef:6e:2b:38:da:72:00:48:4e:
c1:8f:be:51:90:e1:6a:81:0c:21:5e:0c:ea:19:b3:
37:bd:16:3d:b8:d7:e4:6b:9f:5d:dd:fa:7d:66:2a:
62:d5:9d:fe:a0:a7:6a:ff:02:a2:03:ca:24:3a:46:
b4:bd:da:52:d4:2e:90:ca:bb:a6:fe:6b:8f:c7:2b:
dc:a0:d9:26:de:d7:fb:d6:75:5d:86:76:80:a2:82:
9a:7c:99:98:e0:29:fc:27:17:11:74:d6:e5:1f:41:
c8:7c:13:a8:03:ca:87:0e:5a:ce:5f:75:d7:88:9e:
db:55:7e:18:06:46:13:a3:7c:0a:f8:73:69:a1:8e:
b0:78:1a:0b:03:03:05:7b:4c:48:59:b5:28:5c:c2:
c9:96:f6:4f:6d:69:1e:52:86:9d:47:d2:0c:05:ba:
98:f3:18:61:75:a0:b0:a7:f4:f8:bf:13:54:4f:42:
e8:be:f4:0e:ee:97:2e:37:c4:0b:2c:88:a2:e9:30:
ea:0b:97:de:f9:d6:62:e4:02:91:42:7a:e9:23:d9:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1B:61:6D:30:3D:F4:80:3E:C8:45:AB:54:BB:9E:96:A4:AF:92:41
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:21:e6:c3:cb:b9:fc:05:38:50:93:ac:36:35:e0:69:a4:7d:
9d:09:87:45:bc:a7:bf:7e:57:ff:a0:82:14:e6:7f:d7:2d:19:
60:f1:62:d2:41:32:78:55:ab:6f:59:14:b4:75:28:92:7c:e8:
21:2d:ce:0f:d5:f7:3e:58:9d:e1:f0:b6:6c:6b:14:55:21:a2:
08:99:df:37:b0:07:e3:94:8d:65:81:90:50:71:14:2a:4e:48:
d4:eb:0a:50:1a:7b:2a:fe:a1:bb:e0:7a:6e:55:d6:17:6f:b2:
3e:1e:81:e5:8c:55:9b:df:4b:95:71:db:45:9a:15:f9:1d:be:
13:df:2d:16:cc:e1:64:f7:fa:22:3f:07:b5:30:be:53:45:a2:
46:7e:b8:be:e6:3d:81:1d:16:5b:87:ad:4a:3d:55:d8:2c:96:
40:54:1e:51:67:e2:aa:98:ff:04:d8:9e:06:c0:5d:6b:69:42:
d0:e6:81:83:16:61:78:74:4d:20:3b:66:fa:3f:0e:78:c3:69:
92:46:96:37:20:0c:21:6c:97:bd:9f:c4:36:16:dd:76:26:34:
cb:06:b2:0c:1c:ed:4d:43:57:ec:a6:18:1e:f6:a0:c1:28:9b:
bc:ca:23:97:fc:9c:f9:ef:15:70:e8:2d:a0:7b:33:31:86:4e:
26:4e:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:37:44 2025 by rpki-client