Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
File: dNUnZVf32kEAET2Fc5VmSBVA5hw.mft (raw, json)
Hash identifier: VGgpIJHifKmyGQC4pzarJXAQfTiGfk50ctPMb5LLOH8=
Subject key identifier: FB:1B:11:F4:0F:D0:15:41:AF:70:50:9B:16:2B:11:2A:64:C2:4F:62
Authority key identifier: 74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C
Certificate issuer: /CN=74d5276557f7da4100113d85739566481540e61c
Certificate serial: 019849D3A1967AD795A2EA32B46C3D5588E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
Manifest number: 08B3
Signing time: Sun 27 Jul 2025 03:01:02 +0000
Manifest this update: Sun 27 Jul 2025 03:01:02 +0000
Manifest next update: Mon 28 Jul 2025 03:01:02 +0000
Files and hashes: 1: dNUnZVf32kEAET2Fc5VmSBVA5hw.crl (hash: 3gErpjNOKx7wvr+4WGclbMxhB08WHHql8vLT7NLodyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:a1:96:7a:d7:95:a2:ea:32:b4:6c:3d:55:88:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d5276557f7da4100113d85739566481540e61c
Validity
Not Before: Jul 27 03:01:02 2025 GMT
Not After : Jul 28 03:01:02 2025 GMT
Subject: CN=fb1b11f40fd01541af70509b162b112a64c24f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:ff:72:2b:2a:ae:98:3e:13:5d:65:38:8b:
5f:6b:5c:86:b5:f1:ee:b8:c4:7b:5d:75:e2:df:79:
16:50:a9:e1:44:af:15:07:9a:99:c0:16:f8:78:1f:
4e:95:27:5d:99:2e:47:81:83:71:5a:0b:da:d1:61:
3d:32:42:86:8a:50:f1:1c:f7:6d:a2:b9:63:f1:07:
50:49:33:fb:04:61:cb:7e:dc:37:8d:a1:1e:da:43:
19:07:6b:58:98:d6:42:45:14:a6:99:da:34:f8:dc:
1f:fd:cb:70:db:6f:bb:6a:52:dc:48:76:3b:a7:6e:
d6:3c:9a:c2:c1:69:4e:fa:80:ac:26:48:7a:2d:22:
c2:0f:30:82:1c:4b:22:93:e6:fa:b2:ad:f7:fc:dd:
15:c4:f3:a6:d0:3a:2d:df:c1:5b:be:ef:19:49:e8:
71:e3:c4:be:e0:a2:36:73:39:b1:a6:fe:e4:e5:89:
f5:6c:90:bb:5a:cc:78:26:35:ad:dd:06:4e:50:fe:
ca:0c:31:51:ea:fc:ff:07:58:5a:09:17:9d:67:54:
d6:af:13:cd:5d:81:ce:a9:a6:9f:7d:98:0c:d6:39:
51:e0:2f:cf:62:07:66:b4:4e:25:84:27:ff:ea:d5:
1b:fc:2e:75:18:81:b2:4e:bc:52:4f:7e:aa:2e:3d:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1B:11:F4:0F:D0:15:41:AF:70:50:9B:16:2B:11:2A:64:C2:4F:62
X509v3 Authority Key Identifier:
keyid:74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:18:ee:4e:86:31:30:7d:ab:6c:e1:d2:ad:f7:d0:a7:28:74:
80:0d:99:2c:df:55:04:6c:11:d9:f7:15:ac:ab:33:6c:34:f0:
d5:cf:9f:15:c4:13:3d:bf:f8:c3:04:2b:ec:fe:0e:89:61:43:
b7:ca:4a:4f:54:7f:1a:1b:68:b6:b2:a6:29:36:8f:bc:fc:07:
bf:69:3e:c1:4d:41:60:08:80:97:05:f6:24:16:a5:15:48:47:
32:cb:e1:9f:32:55:88:33:e6:1a:c9:18:20:f1:bd:8f:52:6d:
cc:0d:1b:fd:82:df:b0:8c:0a:dd:08:82:af:b1:2b:9f:e0:2d:
8b:24:b2:32:9e:5a:6d:91:20:3c:f8:db:03:64:bf:6d:75:07:
0a:05:1f:cc:1c:f6:95:63:2b:64:8d:8f:36:0b:a2:d8:46:ad:
be:57:3d:8a:d1:8f:02:7d:4a:96:eb:12:7f:68:45:b0:7e:de:
53:24:92:a6:9b:37:b6:31:52:e4:8f:a7:22:0c:b1:26:de:5b:
48:96:a1:47:df:7e:23:3c:21:bd:bf:6c:79:bf:f3:db:f1:0e:
cb:50:ae:26:fd:20:85:34:e7:71:93:d0:8c:b5:71:eb:b2:6d:
fc:61:14:ad:dd:bf:c0:3e:e9:6d:12:22:f8:3f:fb:4a:97:c3:
2d:72:e3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:48 2025 by rpki-client