Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
File: cA5JDhDqN72DSWKGM7WIVmHmegI.mft (raw, json)
Hash identifier: fHqb49t0ZCpsH4QLLhUFwXR17WoNzIgNZNA1YAZ3k0E=
Subject key identifier: 1F:EE:C8:BE:CF:D8:3E:4B:F0:06:C3:08:AE:D9:11:36:E1:FA:3E:0C
Authority key identifier: 70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
Certificate issuer: /CN=700e490e10ea37bd8349628633b5885661e67a02
Certificate serial: 019849662F6503942B811AB6C767867BFA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
Manifest number: 010B
Signing time: Sun 27 Jul 2025 01:01:30 +0000
Manifest this update: Sun 27 Jul 2025 01:01:30 +0000
Manifest next update: Mon 28 Jul 2025 01:01:30 +0000
Files and hashes: 1: cA5JDhDqN72DSWKGM7WIVmHmegI.crl (hash: v1xnZsRfaewu4wni9z8GesjGQY86j676mb+g2C6V8vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:2f:65:03:94:2b:81:1a:b6:c7:67:86:7b:fa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700e490e10ea37bd8349628633b5885661e67a02
Validity
Not Before: Jul 27 01:01:30 2025 GMT
Not After : Jul 28 01:01:30 2025 GMT
Subject: CN=1feec8becfd83e4bf006c308aed91136e1fa3e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:02:43:12:3d:dc:9c:50:3d:68:47:19:df:
29:ac:f7:11:88:0c:0f:82:86:9d:37:21:66:ee:d4:
ae:6d:ca:02:6a:3b:ae:16:43:ce:3b:f0:2b:c0:60:
20:50:73:bb:b9:8d:d9:8e:1d:f2:18:5a:6c:f0:65:
a1:2a:f7:cd:24:30:82:7d:be:df:67:2c:c6:cc:49:
3e:eb:80:18:b1:57:af:1b:69:65:7d:8b:e5:78:2d:
77:56:39:fd:41:8c:f1:77:12:02:0f:d1:1d:94:89:
08:19:9d:39:4a:ee:1f:ad:17:8e:f1:d3:15:c8:79:
78:53:f7:2b:98:7c:9e:c3:e5:ce:6b:36:e0:f5:01:
35:74:43:2e:4b:2f:5a:5f:bc:f2:5d:56:ed:9e:3c:
22:48:ff:43:49:2e:bf:91:ab:33:1f:d0:fc:a3:34:
2a:59:bb:a9:dd:40:24:bc:1e:d4:5b:5d:44:c1:cf:
4f:c5:06:4a:69:2f:2f:2c:b6:d1:8f:7b:86:1c:0d:
fa:5d:e4:48:bb:cb:19:4c:48:8b:1a:11:f3:5a:41:
32:52:05:e3:b5:f0:07:ba:84:30:b3:a6:e1:ab:f6:
ae:7d:b2:65:09:f3:6c:91:57:b0:43:4f:ba:10:c3:
de:e3:ef:e7:2d:23:ba:6c:db:2b:85:79:37:08:c1:
7f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EE:C8:BE:CF:D8:3E:4B:F0:06:C3:08:AE:D9:11:36:E1:FA:3E:0C
X509v3 Authority Key Identifier:
keyid:70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:70:a4:50:4b:a6:48:96:35:93:f8:5d:e6:4a:c7:64:a9:83:
b4:cd:28:b6:53:5c:69:75:4a:4c:76:55:df:8b:89:c7:69:ef:
2f:a9:ac:9c:67:c8:0c:bd:9f:cb:57:49:99:8c:1e:8f:d2:fc:
58:f7:4d:bc:d4:b9:fc:9e:cd:fd:2c:d3:23:6a:6d:af:6f:b6:
6b:1a:2f:e4:81:e9:ad:e3:d5:fd:f3:85:5b:a8:56:f5:f3:ca:
12:94:53:a1:79:b1:42:04:51:2b:78:3e:69:05:81:54:c3:5b:
2c:a9:fa:28:ea:78:a5:eb:e8:56:fd:b9:53:75:36:3e:9f:e1:
5b:9b:2b:fd:1a:07:bd:cd:a1:74:f3:63:03:81:12:08:d7:a7:
4f:b4:4d:49:05:42:02:94:5e:26:cd:71:e5:e0:c6:95:7d:c9:
24:0e:3b:2e:6a:10:54:52:25:90:a1:7b:32:86:32:9f:ab:03:
40:34:55:22:f3:d9:15:69:b9:6c:cd:e1:cb:6e:4d:97:c8:9e:
fb:d0:55:07:c7:b9:23:93:76:ce:dc:d1:91:8b:ed:5f:31:93:
d5:f8:eb:49:4f:b8:7e:34:98:af:e3:03:47:d3:e4:22:25:52:
23:f2:e7:2c:56:1e:d1:47:04:d2:f2:d0:0f:96:cc:26:77:25:
0d:59:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:00 2025 by rpki-client