Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: yEhSYXrJb5739X9fFr5uo0R4llTk9tYW4t/EoSrPtZw=
Subject key identifier: DB:E3:37:A5:30:86:8D:BA:6F:58:F2:48:2A:99:92:08:D4:70:E8:6A
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 019921B13980213D91F69EA36A96BB438D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 0AFF
Signing time: Sun 07 Sep 2025 01:01:26 +0000
Manifest this update: Sun 07 Sep 2025 01:01:26 +0000
Manifest next update: Mon 08 Sep 2025 01:01:26 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: W9H3GXEMK9g+UIXe8MkEXZZOyHGCCUi+ngkMyX67Y6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:39:80:21:3d:91:f6:9e:a3:6a:96:bb:43:8d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Sep 7 01:01:26 2025 GMT
Not After : Sep 8 01:01:26 2025 GMT
Subject: CN=dbe337a530868dba6f58f2482a999208d470e86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:d1:62:27:6b:e7:e8:dd:fb:3d:72:82:1d:
5a:b2:5a:00:82:d6:5f:b1:f2:39:23:fb:c3:e0:00:
e8:21:ac:57:25:a8:e6:6f:f8:4f:68:0c:51:4b:67:
69:30:93:b3:df:52:51:6c:0d:fb:8f:0b:6c:0d:d9:
1c:4e:a5:17:b4:f4:1d:4f:29:94:ae:af:d6:65:d4:
71:98:e2:7d:05:33:68:7c:9a:c6:8b:54:9f:92:43:
3d:41:2c:62:8d:80:ea:e1:e3:09:23:0c:19:6e:42:
91:3f:f2:1b:de:70:36:68:63:de:71:eb:74:b2:bd:
6c:87:c6:53:f8:2e:01:e0:e9:ea:48:0f:f3:a6:c5:
fd:36:d8:69:f1:ce:b8:d3:cc:b2:eb:b2:03:a7:9f:
25:3d:bf:15:2b:5a:93:ee:2d:83:9c:78:af:5e:32:
93:f5:f0:37:ac:3c:64:49:e3:34:df:88:37:e8:00:
71:28:42:a1:0b:49:34:a0:74:7c:f9:63:34:d2:f6:
69:d1:8d:d2:9a:16:eb:0f:9d:79:7f:ce:05:1a:c0:
b0:66:ed:56:b7:9e:f4:1a:b5:22:bf:db:92:42:61:
81:31:21:8d:a0:d4:2e:30:43:7e:66:c6:b6:b8:75:
b8:80:88:68:7c:88:c1:5f:90:c6:30:48:b7:75:e2:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E3:37:A5:30:86:8D:BA:6F:58:F2:48:2A:99:92:08:D4:70:E8:6A
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:81:fc:c3:4e:5b:61:bc:d0:0e:3f:e3:c8:a0:49:ac:ca:0f:
0d:14:0a:d7:f2:30:72:be:05:90:d5:25:50:db:72:8a:22:2f:
3e:ca:18:55:8e:61:46:43:f5:f3:6c:61:ec:4f:af:20:9a:e6:
59:6d:d4:ec:28:7b:60:b3:bc:bf:30:60:63:09:fd:d3:7a:d7:
78:c4:84:b0:8c:00:23:0a:0c:cf:26:aa:b8:15:f0:db:67:6a:
79:55:dc:de:91:3e:db:ef:22:5d:fb:1c:97:1b:a2:bd:25:b7:
f2:83:f3:15:39:62:3b:a0:a2:70:fa:1e:28:9c:67:b3:16:d1:
f7:56:50:8e:e4:84:41:2c:d1:fb:18:00:5f:64:d9:7d:00:b1:
1e:2f:3d:bb:c7:1b:c0:6f:9f:49:c2:86:a3:fa:c4:53:09:43:
09:30:30:7c:d9:85:7e:e4:4f:90:64:ab:58:4e:a6:fe:17:88:
cb:96:6b:23:f9:d7:c7:8c:03:ce:0b:ac:88:94:3e:3d:82:e1:
4a:43:ce:92:d7:99:a2:a7:e9:30:05:bc:36:c0:d4:4a:87:5b:
f8:8f:bc:98:61:e0:58:0b:62:cf:e8:42:1f:07:59:46:15:c7:
57:1c:af:f2:b7:d4:e5:b9:a2:6a:eb:93:1b:7e:b1:a4:dd:1c:
3d:cf:3c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:41 2025 by rpki-client