Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
File: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft (raw, json)
Hash identifier: X9RQdNUEBcNAN0G7dEbEwIGPbz6QsgpDEaec/udoMBU=
Subject key identifier: BB:C8:2E:F0:04:FD:B2:29:64:67:5B:97:65:72:67:E4:4C:40:E4:B9
Authority key identifier: 0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
Certificate issuer: /CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Certificate serial: 01984A4190C0ED72B11830A996E22F3C0190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
Manifest number: 12DC
Signing time: Sun 27 Jul 2025 05:01:07 +0000
Manifest this update: Sun 27 Jul 2025 05:01:07 +0000
Manifest next update: Mon 28 Jul 2025 05:01:07 +0000
Files and hashes: 1: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl (hash: 0dNDZUUO9sIgCWey57vJUItdqo6yFo+v5aQNvv0EE4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:90:c0:ed:72:b1:18:30:a9:96:e2:2f:3c:01:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Validity
Not Before: Jul 27 05:01:07 2025 GMT
Not After : Jul 28 05:01:07 2025 GMT
Subject: CN=bbc82ef004fdb22964675b97657267e44c40e4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:03:59:cd:3d:2b:d1:c5:da:31:44:e1:44:
61:d6:31:e0:a3:7c:a2:3f:aa:87:6e:79:b2:33:67:
85:01:05:8e:19:da:e5:24:be:de:55:19:f7:95:1c:
08:65:20:0a:a9:4f:5e:41:4a:42:fa:11:87:d4:d4:
ac:75:04:ff:b4:3d:dc:78:c1:ce:81:5e:73:6f:10:
ff:bc:24:b7:ad:09:7d:c2:31:84:fd:ab:e5:1f:d1:
d5:5b:0e:e1:81:1b:69:14:d4:43:3d:7c:f2:8b:13:
6f:92:2b:e3:90:f6:4f:6a:2d:07:bd:0a:66:b8:d9:
cd:e9:98:07:16:a0:72:45:d8:b4:2e:3a:da:16:7a:
e5:f4:a3:31:83:9f:5c:fc:79:72:e5:a7:0d:9e:0c:
b7:96:ef:bb:a0:af:54:92:d3:1f:2d:de:14:38:a3:
44:e0:ec:c2:98:c9:22:28:93:8a:16:20:ed:21:12:
9d:5a:f0:99:1b:4b:62:22:e9:f3:d2:f9:04:71:af:
97:fb:61:fe:02:4b:10:97:ad:02:08:d2:7a:48:6a:
2f:dc:95:ac:3c:3e:74:e7:4e:65:14:58:e4:8b:ed:
4a:e7:3d:a7:2b:5d:4e:fc:4c:44:76:83:c0:23:d9:
e9:7d:52:02:54:82:9f:20:f1:90:61:98:94:47:42:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C8:2E:F0:04:FD:B2:29:64:67:5B:97:65:72:67:E4:4C:40:E4:B9
X509v3 Authority Key Identifier:
keyid:0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:68:ba:1f:87:e8:f2:e5:8b:07:b2:2c:75:05:8e:3a:cf:
f9:ed:1a:c7:73:78:56:1a:22:d2:1c:51:7e:6d:80:49:4a:e5:
32:3b:ce:75:b9:04:44:d7:3e:5a:bb:c3:a5:dc:a4:23:04:b2:
04:d6:53:5f:4a:05:6e:14:83:15:a2:93:0b:02:b6:4e:bd:cf:
bc:7c:ca:e2:e2:cd:b0:f5:94:70:5c:19:b0:55:c5:8d:5c:4f:
16:b6:1a:1d:16:52:8e:d9:f2:fd:f9:7c:3e:c3:97:6e:ba:90:
2e:f5:b6:60:3a:a0:ac:a5:60:d5:83:e7:c5:3c:b4:3f:7b:af:
71:ed:f9:1a:c3:6b:5d:7d:c9:0d:97:91:fa:ac:a0:fd:89:c6:
44:4b:6d:a9:da:02:a5:a4:50:f8:53:ea:0b:56:6c:03:4b:2e:
d6:64:ae:f7:f3:b5:ef:2a:43:38:94:2f:d2:ac:59:00:73:0c:
58:3a:7e:99:22:9b:4a:cd:01:85:3c:d1:95:57:7e:53:49:83:
a8:11:2b:3d:8d:e1:3c:39:de:31:b9:f6:63:51:10:6a:ef:14:
4a:a9:c1:10:a9:55:0c:34:7f:fd:19:12:02:b2:a2:37:0b:1c:
2c:f1:75:03:eb:99:07:ad:23:7d:e8:32:33:17:11:bf:12:55:
00:6f:94:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:30:58 2025 by rpki-client