Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
File: DwQeIIaCRVpnlCzipkhYygcEfos.mft (raw, json)
Hash identifier: uIvLsIcQmUcfIH18l5I7nqtAGpW7KqzOt/bHreBY0HM=
Subject key identifier: 3F:B7:45:10:1B:8E:0B:0E:F5:67:40:B3:9D:22:8E:D4:18:5D:92:CB
Authority key identifier: 0F:04:1E:20:86:82:45:5A:67:94:2C:E2:A6:48:58:CA:07:04:7E:8B
Certificate issuer: /CN=0f041e208682455a67942ce2a64858ca07047e8b
Certificate serial: 01984107070F6886A8FAF9A2B5F265291E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwQeIIaCRVpnlCzipkhYygcEfos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
Manifest number: 15FB
Signing time: Fri 25 Jul 2025 10:00:36 +0000
Manifest this update: Fri 25 Jul 2025 10:00:36 +0000
Manifest next update: Sat 26 Jul 2025 10:00:36 +0000
Files and hashes: 1: DwQeIIaCRVpnlCzipkhYygcEfos.crl (hash: VbVradMRqU2Dg8pPxjVqjSS/rYVZnZ0oQsLqgJUOb4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwQeIIaCRVpnlCzipkhYygcEfos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:07:07:0f:68:86:a8:fa:f9:a2:b5:f2:65:29:1e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f041e208682455a67942ce2a64858ca07047e8b
Validity
Not Before: Jul 25 10:00:36 2025 GMT
Not After : Jul 26 10:00:36 2025 GMT
Subject: CN=3fb745101b8e0b0ef56740b39d228ed4185d92cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:87:7b:91:1c:a8:e8:19:b4:78:25:b7:75:
e6:2d:f4:85:55:1e:4c:73:2d:e0:8b:4e:a0:70:17:
c5:c9:7d:6f:ef:c7:13:45:10:6c:b2:f3:10:c2:ea:
29:cc:05:e6:07:73:c6:4d:5e:e7:63:b0:48:8b:87:
e4:79:ad:e7:6c:1f:63:d9:3c:90:7d:b1:70:b3:ed:
7a:02:cf:d9:08:c7:70:2a:34:7f:cc:0d:d0:0f:46:
b3:fb:db:9d:4b:64:12:9f:5a:12:d0:48:9f:ba:ee:
7d:0e:8e:1f:ec:f0:b1:33:1e:41:97:b5:1b:fe:e0:
af:ae:be:c7:44:f6:52:14:05:5b:8d:45:b5:38:85:
3e:be:10:81:a4:b0:e1:c1:c6:15:f8:c3:ea:27:cc:
bc:97:f2:4d:b8:67:b0:b4:3e:7f:88:6e:e3:b0:7a:
b1:0f:e0:ac:59:b4:6b:35:14:ab:89:81:0d:3e:f2:
59:2d:23:5c:be:a7:69:7a:eb:04:d0:48:19:a1:9b:
e1:07:85:66:a9:64:ea:da:c0:b5:9d:bf:85:66:9e:
8e:c0:ad:01:59:db:8e:f4:26:fd:b3:56:23:1f:da:
f1:67:8f:c0:71:32:71:4b:2a:1b:79:4f:39:42:50:
ad:82:5e:23:ca:0d:cd:ad:17:6d:5e:ca:1c:24:2a:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B7:45:10:1B:8E:0B:0E:F5:67:40:B3:9D:22:8E:D4:18:5D:92:CB
X509v3 Authority Key Identifier:
keyid:0F:04:1E:20:86:82:45:5A:67:94:2C:E2:A6:48:58:CA:07:04:7E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwQeIIaCRVpnlCzipkhYygcEfos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:84:8a:60:52:3f:fa:3c:ad:3e:5f:8b:40:9c:3a:0a:51:29:
a0:18:16:96:b0:aa:62:4b:77:3e:19:bc:bc:36:69:bc:4c:11:
27:3c:75:da:c6:8b:b1:cb:45:95:71:05:78:f0:1b:0a:32:60:
4d:5d:1f:19:82:29:c2:20:8b:fa:5f:de:00:71:03:9d:0d:12:
0b:20:48:d3:dc:54:c2:88:e4:9c:2e:2e:c6:a5:0e:31:77:be:
2f:8e:33:03:43:39:a8:e0:04:2a:32:04:56:78:e3:08:cf:e1:
ca:d0:51:14:dd:40:45:f5:58:2f:f7:c0:ec:a7:83:0c:20:fb:
0c:90:ff:dc:aa:fe:0c:95:09:5c:7c:d1:d6:25:88:6c:85:6f:
b5:c8:12:0d:62:79:d6:5c:0c:09:21:84:fc:29:bf:18:bb:5d:
ee:08:da:9e:af:04:df:2b:71:4b:7d:eb:3b:2f:5e:30:b9:59:
59:ec:52:74:be:24:12:c0:39:8f:9d:7c:de:6d:ab:65:90:f1:
37:b9:b1:7a:5b:76:8c:c3:71:7a:97:30:12:de:81:e5:5b:33:
17:b1:0b:f4:3a:63:97:01:f1:17:ed:a9:8f:f0:98:37:fe:5b:
ed:bb:1f:68:4e:f1:66:bc:14:fc:8d:88:9b:98:79:e7:4d:6e:
9a:05:ef:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:39 2025 by rpki-client