Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
File: Clusj7JJCQH6YQSAoFtmNYuRJGw.mft (raw, json)
Hash identifier: E75fEoLB0/X7k+IlvSOTvitnqKMAXBZyXYna50ugJtQ=
Subject key identifier: 05:24:16:28:88:FB:1B:A8:1D:F6:1A:C7:9B:61:8D:FC:E7:CB:E4:DB
Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
Certificate issuer: /CN=0a5bac8fb2490901fa610480a05b66358b91246c
Certificate serial: 01984AAEDA3524597162B904FA9370DAA55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 07:00:29 +0000
Manifest this update: Sun 27 Jul 2025 07:00:29 +0000
Manifest next update: Mon 28 Jul 2025 07:00:29 +0000
Files and hashes: 1: Clusj7JJCQH6YQSAoFtmNYuRJGw.crl (hash: i7KuLJweubizGL+bkYYaaXDnOG1tFbPrz9IYyvgpCNo=)
2: EX1eqOI5AsdzNwXJw_T2K67SKuY.roa (hash: zTp74P0kNRRvfGdIA3tW3Yag+dPiX+7QsxAnkmFBj8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:da:35:24:59:71:62:b9:04:fa:93:70:da:a5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c
Validity
Not Before: Jul 27 07:00:29 2025 GMT
Not After : Jul 28 07:00:29 2025 GMT
Subject: CN=0524162888fb1ba81df61ac79b618dfce7cbe4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:0d:32:52:54:74:58:27:0b:68:a5:e2:f3:
14:c1:af:7c:85:a1:8f:06:07:0c:3f:61:43:5b:e9:
aa:b7:4e:d7:43:56:5a:e5:27:9a:7e:9f:67:00:9d:
3b:1f:15:da:0e:c3:4b:5b:62:d5:05:0c:b3:66:9c:
21:9c:d6:9b:64:f5:15:a9:24:f0:7b:35:8e:29:23:
c9:f9:bd:77:77:d8:57:50:dd:d9:1f:bc:b6:5b:8b:
9a:fa:29:38:e6:02:97:9c:58:d3:93:72:d3:73:58:
4f:29:24:3b:9d:f4:d2:4c:60:e8:0a:5b:17:c7:67:
ea:f1:2d:ea:98:3f:d0:fe:f9:b1:1f:d5:44:ce:79:
ab:32:e2:76:99:e6:df:c2:1e:91:94:6c:b8:62:28:
a7:47:bf:ba:b1:39:77:b9:a6:82:68:b2:09:de:f0:
47:d3:52:0a:3f:10:15:42:91:f9:f6:de:6d:6a:fa:
68:81:34:61:61:9d:28:52:1d:89:e1:32:01:2b:fb:
1c:5c:7e:ea:ba:97:4f:58:ee:f9:7e:d9:7b:50:1d:
42:8b:5b:d0:7b:65:99:d6:53:ab:ca:d4:2a:45:b4:
bf:a7:1e:d1:a7:8a:de:26:65:e8:16:26:fd:77:bf:
05:0e:99:9c:9c:3b:b0:7c:fa:77:f0:18:74:5b:d4:
e0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:24:16:28:88:FB:1B:A8:1D:F6:1A:C7:9B:61:8D:FC:E7:CB:E4:DB
X509v3 Authority Key Identifier:
keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9a:df:aa:83:e2:00:a6:06:9e:b9:cc:7c:5f:06:48:49:14:
45:f2:d5:45:c7:11:5a:bc:89:ac:72:57:f7:5d:c4:68:37:6a:
f3:4b:91:a9:54:ed:0e:3f:4b:72:53:5f:b0:f5:04:09:8d:2a:
9a:b0:f9:3f:d7:3d:59:5f:68:57:42:e6:a4:aa:b0:dc:23:64:
58:26:68:9d:7c:87:9d:b2:5e:b1:e4:66:5c:8f:1a:f4:34:08:
29:30:2e:a0:97:1f:14:e0:15:5e:84:9e:bc:1d:c1:e3:2a:59:
0c:42:6a:3e:6c:1a:d8:cb:e0:96:b3:c7:a6:01:29:3d:62:9a:
ce:c2:aa:0c:db:bc:6b:62:83:0b:65:44:fc:41:3f:77:f5:f4:
4a:c4:21:a8:e6:64:95:3d:48:d3:c5:02:d0:06:be:f1:8e:86:
c6:9d:72:89:dc:c0:0b:f9:a1:27:bd:44:43:0b:0a:33:ad:7c:
7e:52:2b:d9:3d:37:90:85:60:0b:60:d9:fa:61:78:62:29:33:
74:9e:9a:1f:92:db:43:7b:71:93:62:33:e9:25:b8:ce:13:5b:
3d:a4:6a:71:c1:fc:3c:57:f7:11:b4:b7:7a:aa:70:10:ea:02:
6c:d1:34:60:dd:e3:78:69:80:59:f5:66:fa:a7:bb:5e:6d:8d:
5d:86:58:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:51 2025 by rpki-client