Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File: RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier: yYu9gdig0QG9JSQyJNU+an0n3DBt51Ucc+TusjcvvnU=
Subject key identifier: 48:A0:9C:E6:39:04:3F:17:4A:DD:F2:E5:84:1D:0B:CB:00:D4:C2:1C
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer: /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial: 0198D8504E660A1D20A82B2C3197A39B7FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number: 0AD9
Signing time: Sat 23 Aug 2025 19:03:18 +0000
Manifest this update: Sat 23 Aug 2025 19:03:18 +0000
Manifest next update: Sun 24 Aug 2025 19:03:18 +0000
Files and hashes: 1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: /htHDStv8CVh8IscNlQct+y50NKy1WcX+90+4jbyfwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:4e:66:0a:1d:20:a8:2b:2c:31:97:a3:9b:7f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Validity
Not Before: Aug 23 19:03:18 2025 GMT
Not After : Aug 24 19:03:18 2025 GMT
Subject: CN=48a09ce639043f174addf2e5841d0bcb00d4c21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:5f:d6:26:05:0b:81:fd:7d:d8:dd:4c:56:
f1:bc:d0:5e:8a:d2:90:4a:b4:d5:59:a0:16:6d:74:
c3:1a:4a:2a:00:fc:42:45:ea:ea:0b:9d:9d:4d:cd:
0d:81:ea:9b:37:3f:c3:fe:5d:29:af:39:89:dc:53:
5a:5f:6b:a3:0b:3a:5f:d3:3a:fd:0a:1d:0b:0c:a1:
a0:4a:59:3e:19:8c:43:92:09:b3:61:ef:a5:63:0b:
2b:81:12:3d:52:93:56:e5:1e:36:5f:17:a3:56:03:
63:73:6d:ae:35:2a:1b:7e:8a:3f:4e:5e:1f:e2:c6:
c2:c8:2a:7d:b9:36:02:56:0b:1d:90:a4:0e:b8:0f:
f3:a9:6f:9b:c4:df:4f:d9:98:1e:3f:3b:61:8c:04:
a9:ce:14:ad:6b:3a:5d:5c:fa:4f:9b:87:de:6a:0a:
f0:ec:4c:97:af:95:cb:ad:6a:b0:bc:5a:d6:65:ed:
5a:5b:cc:32:61:16:07:0d:ef:ae:c0:c2:97:55:bd:
6b:cd:97:8d:80:f5:18:09:bc:06:aa:f2:16:eb:b1:
cb:47:00:8e:43:3f:9b:21:b0:e4:d4:b4:33:c5:70:
93:d5:b2:50:1d:94:34:07:63:f6:d8:b7:20:5c:15:
84:31:70:87:64:84:a6:2d:fa:70:45:3a:89:cb:4a:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A0:9C:E6:39:04:3F:17:4A:DD:F2:E5:84:1D:0B:CB:00:D4:C2:1C
X509v3 Authority Key Identifier:
keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:04:b9:c1:f4:51:18:fc:21:25:28:28:52:2b:ec:ae:c6:95:
cd:27:03:a7:17:7d:86:d3:b9:a1:1f:4f:0e:e4:0c:4f:62:5f:
16:2f:d7:35:89:7d:f2:ec:34:67:6e:d2:c2:cf:3f:41:03:07:
ff:44:28:6e:d6:5e:52:08:94:cd:48:37:51:62:94:e2:2b:c5:
cb:38:28:09:f1:0f:20:34:15:61:29:1c:de:a9:13:9e:8d:10:
e9:76:19:e1:52:96:0a:cb:88:24:fd:53:a4:69:43:93:14:96:
83:05:08:99:1a:e2:17:95:50:61:e1:38:96:db:19:aa:7e:3a:
d7:c3:db:8b:ba:e2:84:2f:40:aa:a2:5d:ff:ef:d8:b8:48:6f:
65:29:23:2b:6d:88:92:d4:d4:b9:77:54:1c:17:7d:60:ba:54:
01:ac:fd:c4:4b:e8:c6:8c:1b:62:ff:50:89:76:8a:a2:41:a2:
06:9e:22:74:56:a9:ce:83:ee:0b:14:d4:08:2d:4d:ea:4c:79:
f2:e7:aa:9e:8f:48:12:e1:77:55:17:56:87:f2:e6:d1:4a:2b:
d1:c0:95:71:ae:ec:60:95:da:69:b6:a3:02:27:62:3b:24:4f:
b9:30:15:39:d4:88:09:a4:0c:5e:ad:db:76:76:6b:7a:28:0c:
ef:1e:7a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:05 2025 by rpki-client