Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
File: _D39VAG24EhxYrQuBDdnosKTGnc.mft (raw, json)
Hash identifier: fYvGvV61d/Plu4vDJdm8oFjbRatMKia6pScLvAVqNoQ=
Subject key identifier: 44:31:23:8A:E7:50:01:57:1B:60:DB:A2:F9:76:A1:F3:58:DA:60:D7
Authority key identifier: FC:3D:FD:54:01:B6:E0:48:71:62:B4:2E:04:37:67:A2:C2:93:1A:77
Certificate issuer: /CN=fc3dfd5401b6e0487162b42e043767a2c2931a77
Certificate serial: 01984B5477D6AA0858D52268C30391BF6AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
Manifest number: 0984
Signing time: Sun 27 Jul 2025 10:01:23 +0000
Manifest this update: Sun 27 Jul 2025 10:01:23 +0000
Manifest next update: Mon 28 Jul 2025 10:01:23 +0000
Files and hashes: 1: _D39VAG24EhxYrQuBDdnosKTGnc.crl (hash: oR0kPnCYsKpEW3Vbwa5WV0hIjFRx5YntXTzfQNhDuCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:77:d6:aa:08:58:d5:22:68:c3:03:91:bf:6a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3dfd5401b6e0487162b42e043767a2c2931a77
Validity
Not Before: Jul 27 10:01:23 2025 GMT
Not After : Jul 28 10:01:23 2025 GMT
Subject: CN=4431238ae75001571b60dba2f976a1f358da60d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:12:9e:a9:91:8f:0f:3e:cb:38:4f:40:0a:
20:85:b7:4e:65:6c:c3:fe:d9:9e:02:95:08:49:5c:
06:60:10:1b:d2:f3:4d:f7:f0:64:84:d8:de:e2:c8:
31:ec:fe:91:57:cd:79:c9:38:5e:07:90:43:04:66:
3e:00:4f:63:c6:70:e0:bc:62:09:ce:11:5d:ee:cb:
f7:ea:41:d4:e6:98:cf:0d:7a:23:cc:f7:00:2c:1e:
22:62:8d:02:21:25:bd:32:9c:df:c1:37:11:cd:97:
4e:bd:26:07:57:50:02:45:59:8d:70:59:eb:b5:0a:
7f:ec:3f:3e:7f:0f:76:5d:f1:d9:0f:83:f0:0d:32:
c8:4f:31:59:d4:e7:cd:18:76:75:7a:fe:93:3e:df:
9f:6c:b1:b4:98:13:f8:2b:6e:37:5d:62:ee:16:74:
80:3c:5e:f9:83:77:59:24:93:88:95:98:8d:8c:d9:
ca:3e:da:9c:06:cc:fa:1c:61:c7:f9:f0:1c:4b:86:
a4:a9:5c:ab:31:c6:cc:87:85:80:ff:fc:ab:53:bd:
12:a0:4b:aa:aa:89:b3:fe:08:3c:7d:4a:87:fd:ac:
b4:dc:d3:9a:90:a7:20:60:c4:9b:f5:09:34:a2:c4:
08:03:c7:d8:07:6e:1d:e3:78:38:39:1a:54:af:07:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:31:23:8A:E7:50:01:57:1B:60:DB:A2:F9:76:A1:F3:58:DA:60:D7
X509v3 Authority Key Identifier:
keyid:FC:3D:FD:54:01:B6:E0:48:71:62:B4:2E:04:37:67:A2:C2:93:1A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9c:a8:11:e2:e4:8f:70:e9:92:ea:0b:fa:69:5a:6a:43:fd:
bd:6e:e6:f8:37:9c:94:7a:19:f4:ac:96:ae:6e:e6:d7:3f:55:
3b:c5:dc:8a:c2:fc:68:83:2f:2d:96:e6:d8:32:79:a8:2b:9b:
e7:ba:ae:e2:de:75:68:71:3b:39:6c:47:ed:51:16:7b:25:16:
b4:54:fd:54:ec:a5:8e:5c:8d:83:3c:b7:2a:1d:21:1f:f6:5c:
5a:e4:1d:67:a3:fa:76:81:82:55:31:5f:f2:31:fd:11:65:f5:
bb:e0:25:93:82:9b:95:7f:e5:e2:23:72:3f:03:6f:8b:12:8d:
3e:ec:ee:dd:47:ef:8f:87:59:6d:89:ca:19:ee:9a:a6:90:ec:
fd:28:35:8e:b2:c3:86:0c:81:90:93:cd:04:d9:86:1e:79:d7:
11:8c:e4:73:a3:41:38:c8:b5:be:05:9b:9c:a9:db:e0:5d:a8:
8c:cb:f7:a5:0f:dd:31:71:79:c0:d5:31:05:dd:9c:dc:47:2c:
45:30:d2:32:8c:8e:c6:6d:fd:f9:c1:c7:6e:39:7e:0d:81:ab:
b1:0a:8d:fb:78:20:2d:05:6c:85:83:06:58:b1:01:cb:97:c4:
c5:02:f3:c7:7e:2d:49:0a:ef:77:2b:d0:a4:e2:eb:fd:46:be:
04:c4:97:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:11:14 2025 by rpki-client