Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
File: mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json)
Hash identifier: ZFHtv3YOpLnoqBDs6T+6b1rCAAiEIH6qvmA1NVtOws8=
Subject key identifier: 5A:1F:9E:05:05:DC:DE:6C:2F:EF:82:80:6F:EB:02:BE:19:CF:59:53
Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
Certificate issuer: /CN=983f1b139df24a05c2e5256052b0212517e47351
Certificate serial: 019922FA34A9AF7DDCE771B68C9D6F20DDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
Manifest number: 0273
Signing time: Sun 07 Sep 2025 07:00:46 +0000
Manifest this update: Sun 07 Sep 2025 07:00:46 +0000
Manifest next update: Mon 08 Sep 2025 07:00:46 +0000
Files and hashes: 1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: o2hfhjatUmPEXdku/tp55iqIeuO9qUqfpPEbypMC+YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:34:a9:af:7d:dc:e7:71:b6:8c:9d:6f:20:dd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351
Validity
Not Before: Sep 7 07:00:46 2025 GMT
Not After : Sep 8 07:00:46 2025 GMT
Subject: CN=5a1f9e0505dcde6c2fef82806feb02be19cf5953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:d5:20:7b:9a:14:05:59:70:97:f6:79:f8:
75:7e:ad:7c:0d:a8:80:5a:ee:bc:cb:cc:03:8b:eb:
31:f0:09:17:17:72:c3:9a:e4:a4:e7:8d:a8:f9:49:
7b:61:36:98:e2:08:69:56:00:15:8d:8a:7e:fc:38:
18:c0:43:48:18:58:8f:19:6f:89:d6:e3:08:16:a1:
f8:a7:7a:90:ca:e7:a2:a7:ab:2b:0c:0c:fb:c0:d3:
0e:c7:b1:0a:5f:21:a7:71:f2:30:cf:78:58:76:c9:
43:84:ff:3e:16:24:0f:5c:84:c1:f3:38:d7:b0:12:
b8:b7:db:8e:5c:ef:b2:02:80:59:1a:75:f2:17:28:
81:6f:6a:27:95:45:12:d3:4e:a6:42:92:d8:b5:0b:
4e:a9:ea:c4:7b:a1:63:d8:4f:4b:5e:e1:46:47:5f:
87:01:9d:4f:1f:2b:c4:99:51:0b:4f:e0:97:b4:0c:
29:d5:c0:90:69:01:61:0b:6b:d2:45:8f:b0:2f:16:
f4:0d:61:85:8a:01:3c:06:39:a4:98:f4:5f:20:da:
db:81:23:48:e5:b4:1c:f0:7f:1c:3a:62:c3:dc:7c:
0f:56:63:5c:ec:c3:df:e9:56:ef:2e:50:b6:06:60:
1b:b7:31:ac:8f:2d:37:8a:85:93:6b:cc:3a:16:d2:
69:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1F:9E:05:05:DC:DE:6C:2F:EF:82:80:6F:EB:02:BE:19:CF:59:53
X509v3 Authority Key Identifier:
keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ee:71:88:17:41:6d:6b:05:48:c2:33:2b:b4:3c:36:a7:eb:
0e:4b:69:cd:d2:4e:c6:c9:9b:2b:f7:37:8d:0e:77:b4:84:ea:
01:5b:d6:df:18:4a:66:6a:ab:a8:c4:a2:64:2e:4d:a4:dd:1d:
e0:fb:f6:95:40:3f:d0:3a:1b:a8:93:2b:24:19:95:c5:eb:c0:
37:b4:ff:78:57:7e:ec:e8:55:a4:31:a0:fc:98:0b:32:52:b5:
21:ca:79:34:fd:46:dc:80:a9:8d:4f:0e:58:a5:35:3b:0e:5c:
30:31:48:52:d2:2d:b2:a0:8a:6b:e9:0c:00:b1:1a:89:4b:91:
25:fb:f6:63:c1:39:a7:7e:a4:cb:fa:85:4f:b4:e1:8c:49:5b:
9f:de:8e:77:6c:71:90:ea:9a:e5:41:83:b4:a4:06:11:9d:4e:
87:47:02:12:b0:46:93:db:52:c8:20:30:8e:81:53:ef:96:f9:
75:7b:5a:76:e3:90:13:d6:6f:4f:ae:d2:c2:9f:47:53:f7:16:
6a:99:9b:66:7f:2b:b2:47:8d:79:94:f7:a4:38:db:d4:d6:28:
6d:31:b8:29:9d:d2:aa:61:6c:4b:01:79:42:49:b6:1b:79:82:
03:43:b4:67:7d:ab:f6:56:10:18:38:dd:04:e5:f7:56:48:66:
3a:d3:0b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:42:00 2025 by rpki-client