Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
File: DAHrsNsEzE1pGCs47A30sIkiJ40.mft (raw, json)
Hash identifier: 660Gx46DuGIi5XKK3/ANTCu3VlcvWpgcmlOANGdu3+M=
Subject key identifier: A5:16:AD:34:E5:78:A2:01:24:CE:15:E0:13:09:71:69:18:8D:3B:12
Authority key identifier: 0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
Certificate issuer: /CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Certificate serial: 0198477867470E88E48F955EAC298DE0213A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
Manifest number: 15FB
Signing time: Sat 26 Jul 2025 16:02:09 +0000
Manifest this update: Sat 26 Jul 2025 16:02:09 +0000
Manifest next update: Sun 27 Jul 2025 16:02:09 +0000
Files and hashes: 1: DAHrsNsEzE1pGCs47A30sIkiJ40.crl (hash: o/CnZ1Z4dR2HwzJ1rUhTJxHUDwYDYlbJYL5heGHF2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:67:47:0e:88:e4:8f:95:5e:ac:29:8d:e0:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Validity
Not Before: Jul 26 16:02:09 2025 GMT
Not After : Jul 27 16:02:09 2025 GMT
Subject: CN=a516ad34e578a20124ce15e013097169188d3b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:65:b5:ed:1f:9a:e4:fc:59:cb:30:73:38:
f7:77:36:05:5e:a6:ad:97:58:a0:e3:44:6f:25:4f:
68:7a:0c:8e:97:04:c7:be:07:52:4e:a5:27:64:e4:
09:74:c4:51:0e:13:ad:9b:9e:3d:93:44:95:e7:99:
b5:64:e9:75:e4:23:2d:49:ce:44:f7:33:be:ff:da:
b3:1d:1d:56:38:8f:b8:76:18:8d:2f:48:32:ef:4e:
a0:bb:e0:e9:21:68:df:f5:15:13:68:5c:a4:03:27:
f6:80:fe:27:05:08:e1:bf:d4:f9:aa:4c:09:ad:3c:
51:8b:1b:91:74:0a:79:cc:3a:1f:19:0e:a2:be:65:
0b:64:81:46:45:ee:9a:23:da:a7:75:22:92:a0:b3:
3f:01:9a:6d:7e:ff:fe:36:a4:e5:32:44:26:0c:87:
b5:15:34:51:f3:4c:db:58:49:91:2a:4f:ca:e4:04:
50:6e:81:2d:43:cc:8d:09:fe:bf:3c:37:ea:34:72:
7a:31:b8:62:c8:b2:5a:1d:70:43:23:b1:92:ab:c8:
e1:72:a2:8f:87:40:1f:7e:d3:93:5d:f8:89:2c:f4:
7f:84:14:aa:13:d6:6b:be:9f:9e:4f:be:ff:f3:f8:
6f:92:bc:94:0f:6a:d0:f6:e4:2a:0d:91:37:4b:8e:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:16:AD:34:E5:78:A2:01:24:CE:15:E0:13:09:71:69:18:8D:3B:12
X509v3 Authority Key Identifier:
keyid:0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:31:da:59:82:07:bc:07:81:be:43:59:c9:5d:4f:80:14:24:
53:48:9a:c3:b5:a3:9e:7a:38:56:87:dd:db:94:a0:8f:01:4a:
08:53:25:10:36:fd:f4:2f:f1:57:7e:ee:a9:24:3c:d1:e4:1e:
c3:57:ec:c3:95:4f:7c:41:0b:26:32:c9:8a:c2:c5:4f:16:7a:
b2:58:bd:f0:51:3a:51:f3:06:6f:89:ee:4e:1a:34:75:41:46:
83:1a:6a:2e:b3:e0:a3:21:c2:c4:3f:98:28:1f:f0:a6:8a:45:
ad:c5:7a:46:8a:b0:d9:02:a1:35:7a:f6:2a:fc:34:5d:0f:40:
94:83:62:0b:c1:21:43:9b:96:f5:ca:8a:44:28:0b:bc:e7:98:
cf:fd:f7:0e:69:5f:df:20:ad:ec:43:49:21:41:a1:de:de:e3:
37:db:d7:30:cf:d6:bc:14:b0:11:00:dd:05:74:73:86:ee:e6:
66:8e:96:16:26:bb:1a:49:f0:4a:81:5e:a9:8a:fe:83:21:c3:
02:01:71:4c:8a:b1:7b:48:52:4f:74:c1:f9:42:d6:20:8f:28:
d4:e0:19:b2:0f:1d:c3:7f:25:d9:e3:2d:63:e6:26:2f:7c:7d:
71:5f:8b:68:77:ba:66:b1:03:38:97:67:d2:27:b9:80:3f:11:
bf:22:07:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:22:37 2025 by rpki-client