Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json)
Hash identifier: wNMhr5wf5OrHx6/Fn7+pg7ipDrTl21F8N6v9o8xkDwk=
Subject key identifier: AF:F7:31:95:C6:F5:29:D0:B1:8A:68:2A:2F:E2:A5:F5:CA:ED:A6:EA
Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Certificate serial: 0198D515886C66852AC8A875FDA73CAE4DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
Manifest number: 055C
Signing time: Sat 23 Aug 2025 04:00:14 +0000
Manifest this update: Sat 23 Aug 2025 04:00:14 +0000
Manifest next update: Sun 24 Aug 2025 04:00:14 +0000
Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: lATfO8jsCSIAvn/ur+gesCirn3ag3/+Ktvqm+JdBQd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:88:6c:66:85:2a:c8:a8:75:fd:a7:3c:ae:4d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Validity
Not Before: Aug 23 04:00:14 2025 GMT
Not After : Aug 24 04:00:14 2025 GMT
Subject: CN=aff73195c6f529d0b18a682a2fe2a5f5caeda6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:10:e9:c1:7a:34:57:6c:3a:df:d4:cd:17:
b0:e1:40:c0:c5:bd:22:ed:19:6a:cb:22:44:6a:00:
16:96:e7:6c:32:79:15:b4:69:ea:a0:ce:ac:83:bc:
55:a0:8c:f0:0c:47:0c:99:21:41:b1:f7:42:73:17:
bc:47:df:eb:3e:26:70:a9:65:95:95:d2:5f:c7:d5:
7e:0c:43:15:ed:23:ab:c9:be:9e:d3:49:20:f8:54:
dd:b5:eb:0e:88:92:77:54:6a:4c:4c:74:f5:54:da:
9a:5a:5a:78:74:f0:b0:e1:47:f0:77:30:e8:71:7e:
e6:4c:52:bc:d3:d5:41:8c:f4:0d:e3:a8:55:74:00:
dc:df:ae:a5:85:a1:d3:0b:cb:d7:22:12:31:26:4e:
8b:7b:8f:03:c7:59:b5:4d:10:0e:51:30:11:f8:cc:
25:8c:05:f5:6e:ce:8d:12:dd:98:17:ab:86:25:8d:
61:01:bf:d8:9c:8c:e9:3f:b1:4d:53:b4:7f:8e:e1:
e3:ea:0d:51:64:33:66:dc:42:4d:56:b3:cc:18:b4:
d8:a4:18:b5:5f:1e:c3:54:09:c2:0c:4b:f9:72:58:
a2:b3:da:23:02:29:23:89:b4:c2:81:bd:a2:89:10:
f7:7d:0a:45:05:02:76:ca:15:15:0d:d8:77:3d:1d:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F7:31:95:C6:F5:29:D0:B1:8A:68:2A:2F:E2:A5:F5:CA:ED:A6:EA
X509v3 Authority Key Identifier:
keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e1:d2:d3:6c:9c:42:9a:09:ee:4e:ec:98:5c:1d:18:db:77:
00:30:d6:6e:b5:9e:1a:49:8c:ab:03:37:fd:02:27:d2:df:b0:
9f:15:65:b8:63:62:0e:8f:c1:17:98:92:49:82:19:28:e8:ab:
63:bb:b8:08:da:1d:51:b7:d2:9f:ee:ed:d6:f9:f5:e1:a6:cd:
c0:4d:96:e3:48:df:46:11:81:e7:fb:7a:16:22:7c:17:a2:6e:
41:a0:43:db:9f:40:8a:01:1b:e4:3a:14:4f:06:b7:2b:54:e0:
67:4c:cf:29:b6:d6:5c:ff:b6:50:0c:ff:78:8e:22:7d:33:d4:
3f:62:2e:d3:b2:b9:96:95:bf:d1:df:ea:4a:ff:70:5b:f6:4b:
9d:4a:07:aa:f5:17:ac:b9:56:20:2a:cf:f7:29:7b:b2:09:8c:
e8:cc:79:23:4e:33:ee:e3:01:f7:75:33:07:70:e3:47:d7:0e:
36:62:0f:4b:fe:6b:2d:51:56:9b:3e:b1:3b:19:fe:d8:a2:49:
56:72:9b:cb:e4:2e:86:b1:b8:15:97:5b:3c:da:4b:d8:3b:5e:
b5:85:23:be:cd:ae:92:fa:bf:b1:62:49:cf:8f:06:55:c4:3b:
a9:03:90:53:a2:37:43:29:7a:f0:2d:ce:93:d6:94:a7:e0:57:
1c:7e:a6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:47 2025 by rpki-client