Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
File: SVfItkDqWWxdEac7PSZu54w_Cds.mft (raw, json)
Hash identifier: +nciao2AsNGo1ou676VOO+C6nCVPHywWy4G0JATNEfc=
Subject key identifier: 38:8D:5F:3E:DA:2D:2D:2C:15:C9:BC:A3:33:74:16:3B:80:FB:BD:C8
Authority key identifier: 49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB
Certificate issuer: /CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db
Certificate serial: 01984A0A402535B5DC6C12CE9C8DB88352F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
Manifest number: 088F
Signing time: Sun 27 Jul 2025 04:00:42 +0000
Manifest this update: Sun 27 Jul 2025 04:00:42 +0000
Manifest next update: Mon 28 Jul 2025 04:00:42 +0000
Files and hashes: 1: SVfItkDqWWxdEac7PSZu54w_Cds.crl (hash: O65o1an2DTRyv7gzFREHJYqvrv3cCwgjyOXtTKTP+Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:40:25:35:b5:dc:6c:12:ce:9c:8d:b8:83:52:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db
Validity
Not Before: Jul 27 04:00:42 2025 GMT
Not After : Jul 28 04:00:42 2025 GMT
Subject: CN=388d5f3eda2d2d2c15c9bca33374163b80fbbdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:d8:e1:c8:15:50:9d:77:2b:91:03:ae:48:
d9:0f:7b:bd:64:2f:fe:b7:c2:34:92:0d:a8:a7:a3:
e1:f1:62:04:30:24:ef:98:ce:e4:6c:f9:61:1d:ce:
7c:b1:1b:71:46:52:99:b0:cd:db:82:cc:8f:8d:f4:
71:9f:3b:b7:e4:54:54:17:1a:a3:79:89:e5:31:56:
eb:65:5a:e7:7f:a7:86:d2:63:a5:97:09:dd:8e:67:
a2:62:0f:74:72:6b:c5:ff:5a:ff:c5:8c:31:25:df:
ca:98:95:79:86:8f:66:99:5c:33:9f:3e:e8:19:4a:
8d:af:e0:25:0f:04:5d:7f:d2:32:70:5c:97:5e:3d:
27:b4:d7:de:3b:74:3a:2c:40:d6:6e:e3:01:9a:08:
1b:68:8d:03:3d:18:1a:63:d7:61:2b:95:ec:50:6b:
11:d6:96:ef:01:67:64:c6:45:af:f4:e5:70:10:a5:
b2:bd:b3:db:dc:3e:4e:1d:3b:09:29:5e:3c:8e:92:
73:5b:b6:dd:c1:b1:a4:f0:dc:3a:4d:9d:c8:5a:40:
ab:a2:1c:e0:97:9a:7a:21:87:32:f4:62:47:19:f2:
a3:48:5b:32:0a:9f:76:be:07:8a:ba:44:31:e1:6b:
6d:1f:1e:8a:60:44:f4:b4:4a:39:d2:7c:88:c0:ca:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8D:5F:3E:DA:2D:2D:2C:15:C9:BC:A3:33:74:16:3B:80:FB:BD:C8
X509v3 Authority Key Identifier:
keyid:49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5d:74:ef:eb:d6:bf:b1:bb:bf:58:d7:b9:0a:77:ab:d5:f2:
a0:ac:52:79:68:7d:d8:c1:41:64:68:6e:5d:7b:d9:1b:14:ae:
3d:21:28:de:f1:e8:14:a8:bc:00:e7:27:7a:24:eb:48:c7:46:
88:93:1a:57:95:8b:a1:c9:54:ec:90:6d:32:32:fb:cc:cb:2a:
55:14:1d:74:e7:5e:76:e6:30:60:fc:d6:6b:07:91:de:4f:e0:
a4:a6:af:47:b8:97:64:3f:a0:0c:73:95:c8:96:30:37:0a:36:
75:c8:1d:e4:da:1d:e0:92:db:2c:ef:02:3a:85:a8:28:d8:3a:
4c:3b:54:3b:0d:1a:89:50:ae:74:85:4b:34:25:89:d4:21:03:
74:ee:b7:fd:e4:4c:29:a3:82:08:7b:4a:38:31:24:90:d2:d8:
f3:2e:ef:bf:88:25:05:0c:e6:06:af:0e:38:dc:3b:10:4e:26:
d5:27:ca:de:96:0a:b7:8b:12:8f:50:ee:d7:9b:55:48:b5:6e:
b4:a4:90:df:29:da:e4:6c:0d:8f:d8:e2:0f:e7:41:72:f8:ec:
2e:ba:8e:5b:f0:9d:06:9e:75:69:b1:e9:52:41:04:23:41:44:
35:91:b6:2a:54:56:78:eb:4d:83:c8:85:4a:72:51:5e:a2:a1:
29:7e:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:23:43 2025 by rpki-client