Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier: TU+4bS2+Du/Z2yAwur0w99H3dIzAIe0x4Mzm21MVqWc=
Subject key identifier: E4:2B:2C:73:69:58:9E:31:70:28:1A:01:93:41:46:90:4B:39:EB:E1
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 0198D65F17F5C25C69E86555EA67830E92DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number: 1549
Signing time: Sat 23 Aug 2025 10:00:12 +0000
Manifest this update: Sat 23 Aug 2025 10:00:12 +0000
Manifest next update: Sun 24 Aug 2025 10:00:12 +0000
Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: R2yfea+J3cMD4g+r2YNZ5pNvV+oQzLuYEO1QQUNIWks=)
2: RoAvwASbb4l0ZFtVXgsI3PT0AVo.roa (hash: mZqoFIWYuSZ97LTT9lIF7CSJPGIZ96DKu7+NicnF+sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:17:f5:c2:5c:69:e8:65:55:ea:67:83:0e:92:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Aug 23 10:00:12 2025 GMT
Not After : Aug 24 10:00:12 2025 GMT
Subject: CN=e42b2c7369589e3170281a01934146904b39ebe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:24:50:24:c9:61:d4:c2:8d:c4:d1:ff:07:
22:21:21:44:79:54:28:d5:27:3d:b9:db:cf:80:0b:
9c:71:7d:06:c2:cb:b0:d3:6d:30:f8:b5:2a:37:e1:
c0:a7:b8:8d:64:be:d1:bf:4b:a2:70:9d:c1:d8:96:
f6:c4:1c:52:bc:c0:aa:45:03:ce:e4:3f:53:8e:d5:
da:cc:e4:cd:69:cb:20:d7:98:39:05:f8:bf:92:7c:
49:f6:a3:47:13:ee:d2:d0:06:f1:ad:e5:e0:4c:c9:
96:1b:a1:ea:b6:3d:ac:5a:d7:a0:b5:c0:8a:fc:48:
d1:29:7d:cf:e4:02:83:a4:23:19:01:1d:22:be:6d:
57:09:2a:4d:f1:bd:97:32:ef:26:c9:b3:c9:4c:aa:
f9:e0:8f:66:df:a9:03:c4:57:53:0c:96:b5:2f:14:
f1:1e:e4:b5:64:9c:4e:7a:83:94:34:80:f6:a6:17:
36:99:fb:da:95:39:17:a8:82:48:89:f0:97:c8:70:
cb:09:74:4a:ac:f1:b5:c6:99:99:d8:6c:1e:e4:a0:
18:15:86:7a:c9:41:13:fc:6a:e7:f6:ea:71:ec:28:
c1:4d:ea:04:a1:09:c3:56:d4:4a:00:79:43:2a:8b:
ba:f4:6e:e4:05:75:ef:80:f9:c2:7e:e4:ae:e0:70:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2B:2C:73:69:58:9E:31:70:28:1A:01:93:41:46:90:4B:39:EB:E1
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b9:04:54:39:4d:eb:f8:d0:c7:03:14:89:df:06:c7:16:51:
c2:e2:50:47:2a:be:37:ea:8c:18:00:b0:61:37:7a:fb:12:fb:
b9:5e:77:fb:91:eb:c4:99:f7:27:3e:5a:3f:6d:a4:23:d0:cf:
4b:6d:15:c2:42:d9:b1:e5:ce:b0:6f:cf:44:85:b3:38:34:e0:
ac:22:bc:29:ea:e4:9f:88:3a:1a:2e:c5:78:5a:13:c8:1c:49:
63:35:5a:0a:18:38:c4:f8:11:ea:51:54:f4:3f:15:3f:a1:96:
ab:bf:99:96:3b:f1:d6:e1:5d:d0:f6:e4:a6:57:87:e9:3a:d2:
ea:91:a9:29:00:07:dd:51:19:cb:92:e2:ef:0b:72:36:d2:95:
ab:66:79:c6:2f:f7:eb:a4:69:7b:0d:dc:7e:16:b7:d1:b3:90:
e9:4c:5a:75:a2:1f:be:5f:62:0a:f7:8c:26:72:17:a4:76:b8:
6b:2e:b1:33:9a:c6:b1:25:33:e6:a5:a3:31:a6:34:8d:c7:37:
00:b1:f1:52:e1:ce:56:ff:30:19:ac:c9:25:c7:5c:0a:56:d9:
25:06:bd:61:04:05:1b:c0:49:d0:ff:3f:5f:89:a2:bd:3e:0b:
51:75:f2:21:f5:52:34:d5:2f:62:de:8c:79:5a:f8:4f:44:e2:
af:0b:f6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:23 2025 by rpki-client