Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
File: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft (raw, json)
Hash identifier: IjSvMFDteBi0ztQ33i1FGJpCXFdQRCleIELZspOOIro=
Subject key identifier: A5:11:CD:94:BF:2A:B8:F8:88:D3:3D:ED:7B:EB:AC:17:F8:44:13:C5
Authority key identifier: 9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
Certificate issuer: /CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Certificate serial: 019849D37B38A535DC51227ED33DFAAA00FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
Manifest number: 136E
Signing time: Sun 27 Jul 2025 03:00:53 +0000
Manifest this update: Sun 27 Jul 2025 03:00:53 +0000
Manifest next update: Mon 28 Jul 2025 03:00:53 +0000
Files and hashes: 1: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl (hash: bnhqFugKc9y+/YGYMmp8G68cw+4kyJTNHrggETF2J84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:7b:38:a5:35:dc:51:22:7e:d3:3d:fa:aa:00:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Validity
Not Before: Jul 27 03:00:53 2025 GMT
Not After : Jul 28 03:00:53 2025 GMT
Subject: CN=a511cd94bf2ab8f888d33ded7bebac17f84413c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:5f:34:5c:55:75:d9:ef:49:1f:65:d5:34:
e9:49:f3:1b:50:d9:41:b1:2d:03:15:23:be:3d:c6:
e2:c6:17:29:86:ab:86:93:44:83:38:a4:c4:78:ae:
61:e8:ab:54:78:06:9c:83:a2:f5:d9:da:7f:b0:19:
74:b9:b9:38:29:4d:d0:20:21:f8:eb:3d:a0:df:37:
3f:0b:c7:bf:91:16:4a:18:7a:96:14:fa:36:0f:a3:
08:b8:d5:fd:5e:01:9d:3a:ab:04:9c:90:42:fa:2d:
d0:31:d9:09:f3:25:73:fa:ae:78:94:d0:24:0e:38:
7c:fd:db:fc:85:74:b5:ab:6d:a3:bf:4e:02:b2:74:
0c:96:f5:56:0c:d8:95:de:77:90:59:3d:be:04:d9:
c7:43:96:c2:ff:33:63:b8:b1:45:4a:91:01:a6:89:
9c:05:63:b4:9a:4b:44:0b:0f:e0:b6:69:9c:9c:2d:
f9:3c:7b:78:fb:d1:7b:a1:d2:cf:d6:d7:fe:e9:ee:
c5:b8:8d:f8:4b:8d:11:6f:80:af:2c:94:c8:38:51:
9b:7a:f9:1a:6d:f2:f1:f0:f7:1e:1a:59:05:e0:50:
a4:07:52:67:4a:bb:96:80:21:98:c0:5d:3f:49:23:
40:b0:d5:21:25:43:6f:f3:f0:b6:f6:b7:f5:05:94:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:11:CD:94:BF:2A:B8:F8:88:D3:3D:ED:7B:EB:AC:17:F8:44:13:C5
X509v3 Authority Key Identifier:
keyid:9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4b:56:35:0e:b4:6f:ac:72:fe:a0:10:05:f6:54:5a:d2:65:
84:e3:f1:14:7a:eb:42:75:b8:1e:0a:06:5a:02:c9:df:0f:6a:
99:d4:47:82:2e:53:ee:cc:b2:7f:b6:ba:17:e8:7f:31:98:66:
6e:60:86:44:9f:51:9d:56:8f:d6:8b:fa:8f:c3:f6:90:b3:92:
98:cd:d2:81:e1:ce:95:0e:83:2e:24:c1:0e:19:1a:bc:04:d6:
e4:02:4a:76:67:c2:e9:16:60:e7:58:de:29:91:19:a3:bb:95:
28:c0:df:bb:27:46:11:e6:1f:1d:38:6a:97:ed:17:00:cd:a8:
a1:3c:60:58:48:98:07:4e:ce:55:5f:a5:59:a9:1f:29:10:12:
be:8e:6d:68:bf:32:86:1c:36:7a:13:52:50:80:52:9b:c0:5c:
ec:6d:cc:cc:43:3f:e6:bb:c1:a3:31:55:fb:74:e2:22:15:6b:
3f:f0:3d:67:f0:a0:21:e7:c9:23:f3:18:a6:29:46:0b:3c:8a:
d9:89:6e:fe:28:ba:bf:68:76:0a:ad:77:87:09:68:08:64:51:
76:aa:9c:cb:74:2a:8a:bd:7a:a2:d1:f2:e2:ea:57:83:be:3f:
86:81:c9:a1:fd:06:b6:9d:59:6d:d9:8a:43:2f:22:e6:8a:52:
ec:6a:fe:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:16 2025 by rpki-client