Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
File: McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft (raw, json)
Hash identifier: 0LdKMNonzH8SCBOmnt51RpBFIm/0/9sCDm9TiH4iPT8=
Subject key identifier: 12:F6:32:4B:6F:3D:7C:63:EA:51:73:F6:E2:0C:CE:B6:74:B8:C5:93
Authority key identifier: 31:C3:56:81:0D:45:AD:F5:2C:F1:9F:B0:B0:D2:0F:7F:34:68:A0:E9
Certificate issuer: /CN=31c356810d45adf52cf19fb0b0d20f7f3468a0e9
Certificate serial: 019827B5725CD2BC5E75A613FE1520C505F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
Manifest number: 0B
Signing time: Sun 20 Jul 2025 12:00:59 +0000
Manifest this update: Sun 20 Jul 2025 12:00:59 +0000
Manifest next update: Mon 21 Jul 2025 12:00:59 +0000
Files and hashes: 1: McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl (hash: EHbn7bdcrgOp5glWn9hjuWHsYVQ25xhDLHfjt1+PCtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:72:5c:d2:bc:5e:75:a6:13:fe:15:20:c5:05:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c356810d45adf52cf19fb0b0d20f7f3468a0e9
Validity
Not Before: Jul 20 12:00:59 2025 GMT
Not After : Jul 21 12:00:59 2025 GMT
Subject: CN=12f6324b6f3d7c63ea5173f6e20cceb674b8c593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:a5:17:76:eb:87:92:52:37:d3:8c:3b:ca:
b1:2d:d4:9a:23:3c:b8:72:f6:ef:4f:a1:ca:12:a8:
b7:ea:01:11:d9:b3:b6:44:a9:38:1a:1f:27:38:20:
a0:22:9e:74:6f:de:9e:8e:be:46:5f:b1:e6:34:7d:
72:b0:54:c8:55:66:c7:a4:09:d1:8b:e2:9c:91:ee:
7a:0c:d0:1d:9f:6a:ef:43:a9:a4:1d:29:65:f0:86:
5d:f6:47:06:7a:d7:7d:61:bf:02:2f:9e:46:fa:10:
94:87:7f:f4:d9:b5:13:59:2a:3c:f4:6c:59:c4:8b:
4f:45:da:3f:ee:54:cf:df:e5:fc:5e:d8:54:3a:b2:
f2:6d:ac:b7:f9:00:2e:20:d3:e5:ac:18:e5:9b:93:
2a:43:a9:79:a6:48:7f:9c:8a:ea:e6:86:1b:b7:e6:
28:2c:0b:dd:54:8e:71:1f:26:8e:37:e9:0d:6f:5b:
a8:6f:52:4c:4c:43:d0:72:5c:61:c8:f4:38:1f:77:
ce:33:0f:c5:50:93:40:c0:ba:01:e8:ef:3e:15:a3:
5f:ce:c4:1c:11:7a:7a:cc:f2:06:b4:1b:1a:21:4d:
f2:79:2a:e4:6f:74:2e:81:5e:2f:08:cc:38:e6:32:
11:55:8b:40:45:02:d3:5c:61:d4:7b:40:43:fd:d6:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F6:32:4B:6F:3D:7C:63:EA:51:73:F6:E2:0C:CE:B6:74:B8:C5:93
X509v3 Authority Key Identifier:
keyid:31:C3:56:81:0D:45:AD:F5:2C:F1:9F:B0:B0:D2:0F:7F:34:68:A0:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:43:85:a4:62:be:39:a8:94:57:77:08:58:37:ca:e6:2b:4a:
12:ce:dd:58:64:47:9b:85:c7:a4:62:5b:66:89:6e:9b:47:5f:
86:d7:e8:54:a6:b3:aa:60:8b:d1:38:9f:be:c8:93:ce:48:8f:
c6:5f:e6:4e:a9:43:85:9c:79:fe:59:2b:fa:17:1a:fc:37:7b:
5b:1a:4f:ac:15:4f:fd:19:6f:01:ef:59:c4:bf:e5:1d:d8:bb:
9b:ec:aa:4f:4b:fa:84:4b:c1:66:74:6f:7a:49:ad:89:8e:d7:
43:12:27:c5:08:13:9f:3a:f4:8e:16:f3:0b:67:ef:f5:11:e2:
10:62:c6:6d:39:65:9e:bd:2e:0b:ce:74:87:97:08:67:99:bc:
bd:ca:dd:f4:01:e8:57:5b:21:72:62:19:75:e3:19:c0:a9:05:
a4:6f:6e:81:27:8c:2a:5d:77:cb:57:10:1e:e0:1f:29:18:e3:
86:47:2c:48:c7:b4:a9:15:7c:ce:36:ed:6e:e3:68:e1:82:64:
bf:50:f3:74:d8:e7:37:e4:1d:24:70:5e:24:a6:05:5c:d7:90:
56:48:8a:1f:28:99:89:53:6c:24:9f:e3:ad:31:46:6b:2d:3e:
81:5a:39:5b:fd:8e:5b:74:b1:47:c5:41:b9:4f:ad:94:2a:49:
3e:bf:eb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:27 2025 by rpki-client