Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
File: mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft (raw, json)
Hash identifier: KOSK9CP1STzWXQ42AJCLzNdUTBvoV2Cbjmf7rvX97KE=
Subject key identifier: 9B:99:75:A0:F4:6C:C5:01:41:39:E0:41:3C:D5:8E:FC:BA:EA:CE:F4
Authority key identifier: 98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF
Certificate issuer: /CN=98d2d8720a7835bdab53b45313381abb176d5dff
Certificate serial: 019848C05CD0969FDA9C6505D5D46ADAA810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
Manifest number: 0525
Signing time: Sat 26 Jul 2025 22:00:22 +0000
Manifest this update: Sat 26 Jul 2025 22:00:22 +0000
Manifest next update: Sun 27 Jul 2025 22:00:22 +0000
Files and hashes: 1: mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl (hash: rgnux8fYJ40eEXCWV4Y9eMqwzBY2DBkVPAqEKksKmFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:5c:d0:96:9f:da:9c:65:05:d5:d4:6a:da:a8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98d2d8720a7835bdab53b45313381abb176d5dff
Validity
Not Before: Jul 26 22:00:22 2025 GMT
Not After : Jul 27 22:00:22 2025 GMT
Subject: CN=9b9975a0f46cc5014139e0413cd58efcbaeacef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:5f:91:7b:ad:9f:8a:61:02:2d:0d:52:e9:
92:68:3e:90:a1:1c:4d:9f:03:a6:6d:63:79:d2:f2:
2e:f3:51:6b:0f:93:c1:fd:81:f5:6a:0d:f8:03:80:
ea:f0:18:06:63:ac:b2:a5:f7:77:ae:2f:55:f5:9c:
7f:7f:63:b5:43:65:48:04:cc:9f:aa:a7:d4:cf:0d:
cb:e8:48:4f:d3:06:24:fe:c1:94:12:1c:c5:80:cd:
fe:53:65:fb:15:e5:52:e7:91:97:17:ab:32:70:3f:
e1:30:37:9a:22:8f:76:5f:6e:86:46:2f:c3:7b:d7:
b6:78:b0:24:1e:87:63:22:ba:31:73:01:6f:b8:94:
d4:63:14:6a:21:90:ef:03:b3:88:62:ee:cb:07:b7:
24:d1:1d:3c:43:6a:f4:fa:1e:2e:c3:92:09:88:49:
1a:b0:c9:32:c0:64:8c:f7:e3:36:00:11:c4:ee:8c:
23:4a:38:cf:25:cb:31:56:e8:75:38:15:e2:80:99:
46:ae:3c:1b:da:69:3a:15:1e:b5:39:9b:ea:30:b0:
ea:e7:ae:2e:cf:69:5d:ee:cd:83:cf:92:9f:c9:ab:
79:1a:07:db:fa:68:74:4c:25:da:81:93:10:f9:87:
1f:a0:41:e7:d4:02:1a:ea:2c:56:76:b9:ff:1c:ba:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:99:75:A0:F4:6C:C5:01:41:39:E0:41:3C:D5:8E:FC:BA:EA:CE:F4
X509v3 Authority Key Identifier:
keyid:98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:74:0c:71:1f:89:44:a1:75:47:5f:99:7d:0f:39:98:e7:a6:
20:d3:9f:d2:d2:c0:9d:b0:71:19:fa:9f:01:4f:99:ba:b7:43:
bf:4e:9e:ae:92:5b:37:60:35:16:4a:fa:90:c6:bd:bc:9e:24:
ab:ba:69:d1:9e:7a:69:31:e9:43:82:a4:47:98:5b:03:40:b3:
88:17:95:05:ec:6e:dd:81:94:ba:bb:2e:a8:b0:2f:43:60:bd:
b6:f1:54:44:48:9e:d5:b1:3f:04:f0:ee:a9:be:a1:7f:d2:f2:
ba:ce:db:71:11:f4:ce:0a:c0:21:6c:99:0a:31:f9:76:4b:93:
47:3c:02:e9:20:f9:00:4d:7f:49:51:4c:08:49:67:70:07:25:
c6:06:b3:d5:f3:ff:4a:0e:9e:9d:d9:fa:b6:85:9b:ff:5d:6e:
ca:86:ae:1d:ff:e9:7b:cc:83:50:04:b0:8c:d4:80:4b:95:89:
36:75:4f:b1:d8:6e:d2:f5:28:1b:d9:a0:1f:5a:c9:8e:03:bc:
74:16:d5:e1:c9:cf:cc:ec:05:7e:ae:40:ba:d7:38:82:43:83:
16:19:82:30:57:27:61:3f:f3:09:bc:67:16:07:9e:fb:81:21:
e1:95:34:59:86:5c:f6:57:e1:a9:30:01:6e:91:a4:53:b6:5e:
77:ee:d3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:45:24 2025 by rpki-client