Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
File: s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json)
Hash identifier: NBJKSf6jGpABD45qyJgvxncuHBcQdW1PILTZmaV8cIo=
Subject key identifier: F7:95:51:05:B1:D9:7D:EC:3F:65:3F:57:01:D2:2E:00:D1:A2:B3:56
Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
Certificate issuer: /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Certificate serial: 01984A0A5B0EA278041CF718B8FA2D8FDE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
Manifest number: 0A4E
Signing time: Sun 27 Jul 2025 04:00:49 +0000
Manifest this update: Sun 27 Jul 2025 04:00:49 +0000
Manifest next update: Mon 28 Jul 2025 04:00:49 +0000
Files and hashes: 1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: xQ0fb4QiPDZjcUFVsS+ITV2aw1njfC+uM7kz+OhI8Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:5b:0e:a2:78:04:1c:f7:18:b8:fa:2d:8f:de:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Validity
Not Before: Jul 27 04:00:49 2025 GMT
Not After : Jul 28 04:00:49 2025 GMT
Subject: CN=f7955105b1d97dec3f653f5701d22e00d1a2b356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:4a:31:00:5e:0c:30:1e:94:2d:03:25:95:
42:16:2a:56:6f:f0:89:5d:ff:e2:f6:e7:96:fc:6f:
b2:36:6f:97:69:ea:ef:44:45:d2:9c:0f:33:19:5d:
39:8d:43:62:3f:be:00:a4:8a:b1:cc:a1:46:aa:f4:
da:43:f3:1b:28:f0:bb:36:94:89:f6:d0:61:38:b3:
19:98:83:be:cb:1f:d5:b7:cb:c7:f3:93:4a:d9:62:
ed:7a:da:00:b3:1e:48:03:0b:68:59:02:95:14:71:
2e:60:e1:a8:a9:c1:37:8a:e4:62:fe:a4:33:1f:e2:
27:c0:cc:bc:25:d1:1c:c4:e5:f8:a9:42:99:f8:22:
1d:ae:67:9a:26:54:6e:a5:bf:22:59:c0:a8:d2:78:
3f:fe:8d:68:c7:93:fd:f8:d9:92:d0:f4:63:ea:6e:
3c:60:b2:dd:3b:f7:dd:97:41:1b:97:94:13:2d:df:
09:e5:e5:1f:ba:17:00:04:7f:44:a4:87:6f:7f:0b:
86:13:8f:f4:1c:63:b5:ab:d7:84:0f:ef:96:e0:bb:
02:03:f4:57:3f:9f:84:d9:8a:f1:d4:e3:cc:29:21:
ad:93:c8:c8:3f:52:87:a0:00:bf:fe:d8:47:e7:ed:
e6:b9:c5:13:7e:90:2d:9a:57:2d:5e:3a:b1:c7:f2:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:95:51:05:B1:D9:7D:EC:3F:65:3F:57:01:D2:2E:00:D1:A2:B3:56
X509v3 Authority Key Identifier:
keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5e:8a:16:f1:6c:31:12:17:4d:62:57:f3:d1:44:cf:5d:4b:
c7:07:22:54:9c:1b:ec:1b:ee:3e:8f:e4:74:90:3b:2e:3c:81:
6c:2f:1c:4d:77:13:af:8e:ac:de:e3:e6:54:99:77:3e:42:6e:
84:9c:0a:b0:93:08:f1:f3:16:f6:23:29:8f:09:e1:32:9d:96:
d5:43:a4:13:72:27:11:03:30:ed:cb:9b:6b:0a:54:cf:42:82:
da:32:b8:2b:5d:23:28:ea:24:8c:07:83:e1:08:47:c7:e1:aa:
e9:b5:72:e1:74:64:da:6d:34:6c:aa:77:02:eb:4e:c1:e4:c1:
d5:83:d2:d2:72:25:e1:1e:25:12:cb:f7:2b:0e:8a:73:b9:0c:
b1:b3:87:7b:74:c8:bf:38:a2:0e:00:6b:9e:73:da:07:76:44:
d4:f2:7e:2d:8e:a3:e8:d6:74:14:c3:32:85:44:0f:95:d9:d9:
0a:9a:a4:be:af:b2:1f:3b:f8:c5:bf:f2:aa:40:bf:a1:1d:1a:
c2:f9:82:a1:36:7d:54:f8:23:fd:2e:bd:0a:46:98:4a:3f:01:
91:14:94:68:c2:9e:ea:61:bd:a5:23:36:fd:c0:6b:bd:6b:0a:
be:16:e2:cf:23:81:c0:a5:c0:0c:29:47:0b:31:1c:24:da:72:
8a:ce:18:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:56:49 2025 by rpki-client