Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: 1d9VM+s4i3ySHs0GCnK4JwAyVLAKnnBOOZE9GXcxnQI=
Subject key identifier: 4D:53:81:2F:BA:FB:42:4B:E4:A4:B6:9D:C3:0D:AC:1A:91:94:15:5D
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 0198481BAAAC366F2A8F56FB3DEF2C32CDD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 1607
Signing time: Sat 26 Jul 2025 19:00:29 +0000
Manifest this update: Sat 26 Jul 2025 19:00:29 +0000
Manifest next update: Sun 27 Jul 2025 19:00:29 +0000
Files and hashes: 1: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: A9QEh1y3nG8Sz2z++6wSyaKL/1UXiIVSeVs4ynuYtmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:aa:ac:36:6f:2a:8f:56:fb:3d:ef:2c:32:cd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Jul 26 19:00:29 2025 GMT
Not After : Jul 27 19:00:29 2025 GMT
Subject: CN=4d53812fbafb424be4a4b69dc30dac1a9194155d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:a8:93:e2:0b:02:de:c5:c7:e2:17:f1:bf:
1f:74:b2:3c:60:ee:2a:6c:97:a9:94:21:c2:51:d5:
8f:e1:e8:42:52:ae:53:c1:b9:7e:c0:72:de:aa:a0:
29:f9:46:3e:93:1b:f7:b0:36:bf:13:da:f2:b7:0d:
8c:b6:ec:59:7a:bf:1d:c5:52:3c:43:50:aa:5b:27:
c5:f3:6c:7f:f0:ad:e4:da:ce:22:34:aa:12:ef:f3:
49:e1:95:44:e8:2e:50:cb:25:27:35:1b:2d:74:68:
16:cb:08:35:fc:a9:55:c8:80:53:22:1c:42:ed:3f:
ff:a7:be:e6:b7:cc:a7:6a:57:e3:ce:dc:7c:54:27:
e7:97:99:65:b9:13:a5:63:1e:fc:e1:19:d4:51:34:
b5:9c:1a:76:00:28:2c:d7:03:41:3f:50:19:33:aa:
3a:05:4b:08:cd:09:d6:1a:b9:c0:21:89:34:ea:ee:
fe:4a:37:6c:14:f5:e6:3d:61:dc:7c:e6:4f:3d:06:
f4:fe:3f:05:50:e6:4a:bd:fc:d8:1a:33:67:d3:4c:
6c:94:56:bf:c1:7f:5c:c5:81:6c:14:d8:4b:2b:fa:
6b:6c:76:81:da:43:03:bf:b6:76:0f:2b:55:40:63:
cd:84:21:3b:97:02:22:07:4c:cd:15:8b:d8:f2:0f:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:53:81:2F:BA:FB:42:4B:E4:A4:B6:9D:C3:0D:AC:1A:91:94:15:5D
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3e:a1:c4:67:5a:44:c0:54:64:00:29:5d:0a:ea:e6:a8:1f:
33:a6:26:28:3b:1f:82:ae:d6:9e:e7:b0:44:49:c9:d0:6d:e5:
cc:df:80:bc:b2:b2:55:a5:54:e7:02:ca:f0:e7:77:04:de:56:
fe:08:6a:47:15:df:7e:82:35:6f:99:57:e7:ff:a5:10:8f:4e:
ec:23:56:d0:b1:59:67:e7:d3:ab:c4:f2:60:fd:b3:74:7b:0f:
64:74:25:06:1c:81:b4:58:60:17:0c:9b:33:a1:01:60:78:a5:
ad:55:64:a1:f1:ce:00:e2:9c:06:98:f1:24:66:dc:b0:0e:ce:
0c:76:32:34:34:d1:24:79:7e:13:d7:fc:ca:50:a5:8f:9b:d4:
77:c7:b5:43:ae:e7:5e:6e:93:d6:de:f7:b6:57:ad:cd:5a:67:
43:0f:25:c3:c9:d8:8b:20:ca:4a:78:dc:80:1b:ca:c5:56:b3:
ef:fc:ec:e8:98:6d:78:5f:a7:59:85:c6:1a:61:4d:8c:ea:f8:
fe:0a:04:1f:74:c2:69:c5:55:f7:85:8b:e3:24:9c:ae:74:1b:
51:44:fc:9b:df:0f:e5:16:c3:46:bb:a7:9e:1e:a2:82:cf:f7:
3a:f9:e3:72:28:a4:9c:21:c8:c7:e6:01:98:7a:a7:13:51:ea:
b6:1b:37:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:32:48 2025 by rpki-client