Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
File: d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft (raw, json)
Hash identifier: afLwWsEScmqapRT6cxWVi5nU0hDMXCzDsQgjXlhgAJ0=
Subject key identifier: 5C:3C:C1:51:88:09:A3:38:B0:7C:32:98:22:A2:21:92:AB:5F:DB:A5
Authority key identifier: 77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
Certificate issuer: /CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Certificate serial: 019845F69A9092665749C50E3A34632865C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
Manifest number: 029A
Signing time: Sat 26 Jul 2025 09:00:45 +0000
Manifest this update: Sat 26 Jul 2025 09:00:45 +0000
Manifest next update: Sun 27 Jul 2025 09:00:45 +0000
Files and hashes: 1: d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl (hash: o7MdyPoowChns2QULvoGe2d9r5GHTaD9FTb3l+xcim0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:9a:90:92:66:57:49:c5:0e:3a:34:63:28:65:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Validity
Not Before: Jul 26 09:00:45 2025 GMT
Not After : Jul 27 09:00:45 2025 GMT
Subject: CN=5c3cc1518809a338b07c329822a22192ab5fdba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:53:f1:07:12:ef:3c:0f:fa:65:f0:91:c7:9a:
b3:ae:d2:c1:ed:de:be:72:c9:bd:3e:cd:94:42:0d:
3c:d5:f2:58:a0:8d:16:08:67:e0:01:56:34:e9:f9:
56:77:80:ca:b6:91:d9:99:bc:d7:96:f6:e7:32:65:
a8:59:1b:de:60:ea:cf:c1:a6:db:09:b8:bc:81:1c:
16:96:36:ed:7e:60:58:61:f0:94:11:13:99:e4:ec:
08:e5:04:1b:d5:f0:98:fd:1e:4f:2f:22:89:4b:13:
91:6e:e0:15:fd:62:ab:7b:68:c8:0b:88:df:89:26:
01:7b:64:99:ef:39:7f:dd:e6:75:b5:e0:02:37:6c:
1a:43:54:8d:bf:7a:8c:16:9e:b7:76:c9:d5:5d:bf:
50:9f:3b:65:84:a1:11:5e:7d:3b:90:8c:af:af:f3:
db:9b:a6:f6:09:cc:64:99:13:5d:a4:ff:e9:91:0e:
ed:3b:d4:c7:72:10:ce:88:1a:9d:44:7e:12:cc:87:
53:0b:87:7e:33:83:f4:5c:5a:e7:22:73:95:ba:10:
60:47:f3:8e:43:56:04:46:1f:c3:bb:39:c5:a1:f0:
c9:f1:5d:f3:3f:a1:c7:ef:94:e0:aa:a5:38:4d:cb:
1f:7d:e4:b3:fd:9e:e0:42:68:a4:15:06:cc:19:ff:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3C:C1:51:88:09:A3:38:B0:7C:32:98:22:A2:21:92:AB:5F:DB:A5
X509v3 Authority Key Identifier:
keyid:77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:23:e3:5e:63:44:af:e7:4f:72:97:cc:52:12:7c:3b:8a:9e:
a8:e7:0e:5e:fa:c7:84:bc:cd:f1:50:37:a2:ec:f0:18:22:c9:
85:2f:b3:b0:ff:49:8e:54:7d:6a:83:81:de:70:91:61:d2:f3:
ad:c1:ea:91:6b:86:1f:36:54:e7:f6:42:83:8f:78:63:2f:9b:
3f:f4:d9:c2:ce:a4:34:88:f7:30:0f:b9:11:06:6a:d4:ad:8b:
52:2d:7f:d8:2b:4e:a9:23:ac:69:06:6f:2c:03:ae:89:e3:c4:
02:7f:7e:57:df:ce:a9:0b:58:33:da:cf:ec:d8:dc:a1:17:17:
fc:1f:1a:9c:5e:a9:fb:e8:eb:e5:12:b6:fa:58:ba:84:71:7e:
d9:fe:9c:f4:f0:8a:7e:ea:6c:45:01:45:f6:de:e1:cc:ad:d1:
82:08:b9:da:b4:1a:11:63:96:72:dc:4e:ed:ff:36:1b:95:1e:
d2:d3:04:0c:20:ad:b1:48:7f:c3:8a:f6:e4:11:a5:09:39:f5:
88:43:b4:35:71:af:25:73:11:bb:3e:8a:5e:fa:a6:cb:6f:63:
29:57:a7:5c:dc:23:31:fe:46:bd:4d:63:17:da:a9:dc:4b:48:
e4:5a:16:49:67:1d:c2:6b:b8:6e:72:74:5c:61:13:cd:7b:7c:
07:21:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:28:30 2025 by rpki-client