Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json)
Hash identifier: 59a8AoGAO09qONIAZjajuwcgHS7ChLgetz6bGkpMlr8=
Subject key identifier: 8B:D8:86:D9:BE:BE:29:72:26:52:91:A1:38:7F:3C:05:B3:8A:8D:67
Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Certificate serial: 019849668A8F6DC47770B3E5D116C263F658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 01:01:53 +0000
Manifest this update: Sun 27 Jul 2025 01:01:53 +0000
Manifest next update: Mon 28 Jul 2025 01:01:53 +0000
Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: JP/3teXB89Nc9ukOam5JQe2QaiVOmuA4s0soLbLU3X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:8a:8f:6d:c4:77:70:b3:e5:d1:16:c2:63:f6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Validity
Not Before: Jul 27 01:01:53 2025 GMT
Not After : Jul 28 01:01:53 2025 GMT
Subject: CN=8bd886d9bebe2972265291a1387f3c05b38a8d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:d3:63:a7:33:52:8a:f8:2c:fc:43:83:ed:
32:b0:c6:3a:61:5d:9b:56:31:c4:b8:ed:8c:78:fa:
38:5f:1d:22:1a:18:eb:3e:4a:be:65:f5:2e:61:9a:
1d:11:60:0b:3f:5f:fd:24:ae:1d:30:ff:ea:a2:69:
fc:98:3e:38:60:c2:99:9c:67:ca:88:79:af:c8:58:
f6:4e:48:1c:07:a5:00:35:79:f5:3f:bb:e2:19:ac:
25:bc:c7:c1:01:71:26:84:52:ca:c6:e7:30:94:7d:
30:7a:c7:cb:66:0b:71:26:92:c3:8d:a2:af:9f:8a:
94:78:cd:66:17:7d:5d:25:b2:eb:a1:7e:95:d4:30:
d8:a5:ce:c0:2a:4a:97:d8:01:17:ac:f3:76:44:0f:
97:f7:29:9b:f9:0d:ff:11:b0:16:89:4b:d7:a2:09:
c1:cd:54:c1:08:81:45:3f:2e:ef:38:76:52:cb:60:
a6:9a:64:c6:86:3e:8c:19:9b:de:6c:bb:6e:9c:fe:
40:c5:4d:7e:24:dc:f9:96:9d:fd:98:fe:71:82:af:
c7:74:33:38:22:f9:67:16:54:7d:7b:11:53:c7:7c:
b0:d0:e0:b6:cb:af:f6:9c:fc:38:82:f0:82:bc:24:
36:49:8c:18:ab:a3:c8:1f:d3:fc:12:57:b1:c4:5d:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:86:D9:BE:BE:29:72:26:52:91:A1:38:7F:3C:05:B3:8A:8D:67
X509v3 Authority Key Identifier:
keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bc:b9:d3:7a:d6:4b:cf:c0:88:41:b2:7a:4d:02:44:2a:06:
1a:b0:6c:69:77:d7:97:a9:e6:67:eb:e0:5d:67:b0:1d:03:18:
1f:f1:72:1c:15:8c:cb:e9:d6:2b:95:b7:b7:d2:e3:c1:f8:b1:
35:bb:8e:21:f4:d4:e4:04:30:df:a2:de:76:98:0c:21:38:47:
63:b1:bb:2b:2e:13:c9:4a:38:ae:8e:15:ec:38:e9:00:47:83:
78:89:58:de:cb:03:e2:50:35:c1:36:7f:54:92:98:e0:d9:6f:
04:ae:c2:25:58:d7:21:39:28:3b:4f:f7:e1:fc:34:f1:d3:a7:
93:ad:08:8c:ab:68:ce:d6:c8:cc:fa:89:fd:43:f4:cc:6e:64:
d4:b1:dd:9d:59:bb:36:2f:d8:64:ff:cc:92:55:0f:b3:57:a5:
1c:0b:ca:23:cd:89:67:a7:43:5b:3d:22:a4:f8:72:33:51:21:
f7:93:3d:42:91:ee:31:a6:ff:36:4a:28:38:7e:ee:6f:73:d8:
d1:80:4d:ec:6c:9a:2c:e8:36:ba:11:58:38:b1:17:bf:36:cb:
25:26:fa:fa:2e:2c:fe:5a:44:fa:6c:60:9a:2c:09:00:55:03:
ce:d2:99:2a:0d:67:f8:33:90:9e:5d:de:7c:ac:ec:11:b5:27:
2e:7b:68:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:47:36 2025 by rpki-client