Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
File: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft (raw, json)
Hash identifier: CEO9AEqed8JguXGmYMyendy92VTgrK+pmN4kcOAKoEs=
Subject key identifier: EB:7A:04:A1:D9:E1:8C:CD:D6:07:3D:2B:1B:72:4B:3D:14:6A:26:9D
Authority key identifier: D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
Certificate issuer: /CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Certificate serial: 019849D2D9C56D242E4604B0CC980359AD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
Manifest number: 1338
Signing time: Sun 27 Jul 2025 03:00:11 +0000
Manifest this update: Sun 27 Jul 2025 03:00:11 +0000
Manifest next update: Mon 28 Jul 2025 03:00:11 +0000
Files and hashes: 1: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl (hash: oI/LAkD2LEx2CLjdd6fvdm85wNwLaHKuooGGQAFAYFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:d9:c5:6d:24:2e:46:04:b0:cc:98:03:59:ad:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Validity
Not Before: Jul 27 03:00:11 2025 GMT
Not After : Jul 28 03:00:11 2025 GMT
Subject: CN=eb7a04a1d9e18ccdd6073d2b1b724b3d146a269d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:a8:ea:8d:07:8b:1f:91:bb:16:b9:8e:0a:
38:16:0b:59:1d:47:c1:8c:bd:3b:f7:00:24:e5:f6:
b7:18:18:70:3e:1e:01:92:09:f7:1f:e3:e6:5a:54:
02:e9:5b:a3:9b:b6:c5:1d:e7:7c:78:63:76:3b:dc:
63:c9:0e:d0:76:ef:1d:e6:dc:f0:86:9b:0b:79:07:
38:8c:51:98:00:2a:bc:36:43:64:2e:d4:6c:03:c0:
30:fc:71:97:87:ef:1d:6a:de:ac:dd:5c:be:b2:6f:
1e:2a:b7:98:55:44:b8:45:9a:85:8e:d6:10:4a:f8:
d7:2e:63:1d:d2:d2:af:45:1c:ec:dc:04:b4:07:2d:
1d:c8:eb:5d:bb:5c:f1:33:ec:da:eb:bb:4a:df:38:
5d:d0:5e:c5:13:3c:cc:df:0c:c9:ce:4d:d8:cf:0b:
0d:38:0c:5d:e8:da:2b:21:7a:8a:ac:3c:fb:0c:5f:
c8:2e:a5:0e:49:80:d0:f2:90:0c:77:dc:37:c3:74:
23:d9:2c:f3:01:eb:ba:42:e4:41:e7:1a:9c:8a:b6:
89:13:9b:16:0f:03:6e:06:45:1c:2b:ef:4e:b7:2b:
78:61:dc:0b:71:6b:ec:9e:35:c3:9a:a8:cf:7c:ae:
d8:2d:db:c9:55:33:1e:6b:3c:b1:35:c0:25:db:95:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7A:04:A1:D9:E1:8C:CD:D6:07:3D:2B:1B:72:4B:3D:14:6A:26:9D
X509v3 Authority Key Identifier:
keyid:D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:44:d6:0d:11:92:22:bc:09:ef:c0:99:c7:d4:a9:dd:ec:1f:
8d:82:50:90:1f:cd:5e:cd:70:89:8f:a5:d0:cc:de:bd:98:d3:
7b:1d:06:1d:6b:a0:c8:06:d5:0a:60:18:67:ef:42:2e:17:5c:
0c:bb:20:23:e9:5f:da:2f:b5:72:70:84:35:b7:e0:ea:51:bf:
fa:66:1e:c7:5c:21:29:44:3a:01:36:4a:5e:06:5b:bc:73:75:
e4:c6:cd:2c:7b:15:de:e4:65:6c:df:e4:16:3d:ee:ef:18:6c:
0f:07:44:e3:9d:75:1a:b6:d1:ce:04:b9:a4:b5:eb:fd:63:3a:
4e:d8:7b:d9:b7:e4:5e:e6:09:15:1f:04:f0:9c:3e:05:ac:06:
69:ec:70:28:f4:0f:30:25:22:7e:0c:26:7a:58:68:e7:c7:a8:
5a:0f:72:51:d2:4d:b2:6d:b7:7d:9b:b1:82:51:4a:8a:a8:2a:
f1:1c:63:38:7c:59:df:e5:ee:19:10:b0:16:da:f6:aa:46:c6:
04:78:dd:b0:cc:12:4d:c6:3e:e7:e6:26:eb:d5:51:58:40:3c:
62:1c:5c:66:cb:26:3f:3b:9e:e7:4c:ee:20:30:59:6c:11:33:
9c:46:ba:aa:2b:ba:96:18:ea:61:08:14:09:6d:60:9e:a4:dd:
db:2b:59:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:33 2025 by rpki-client