Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: cHAXUIu2bnKXe1wX4VFtvRGU8oVUSlJoL0WYsiR6+FQ=
Subject key identifier: E8:A0:F8:57:70:43:AF:4E:11:07:20:31:15:EB:A9:57:88:93:0A:A1
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 019922FA51CB5A9A80562B4FB9077FB40E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 07:00:54 +0000
Manifest this update: Sun 07 Sep 2025 07:00:54 +0000
Manifest next update: Mon 08 Sep 2025 07:00:54 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: LxgHgIxWW2p2dX5sLiiyzg6vfBdXzWLHVySuKjrUfqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:51:cb:5a:9a:80:56:2b:4f:b9:07:7f:b4:0e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: Sep 7 07:00:54 2025 GMT
Not After : Sep 8 07:00:54 2025 GMT
Subject: CN=e8a0f8577043af4e1107203115eba95788930aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:64:7c:a8:83:ea:f9:e3:50:63:3c:5f:47:d0:
77:1a:a0:bb:3f:3f:e8:4d:27:13:c9:ae:23:ed:51:
da:eb:bb:f0:e3:35:52:70:12:12:90:9d:7d:43:a2:
11:bd:75:e8:e3:12:38:48:05:a3:a2:10:78:ad:a1:
83:7a:99:85:46:8c:c9:df:f8:08:14:a5:f1:98:ac:
ac:ff:eb:76:34:4b:bb:d0:89:de:b2:7a:0d:bd:7b:
e6:ee:72:be:29:c7:f6:58:9e:8f:b2:e6:ca:0e:99:
b4:61:a2:2d:50:5f:35:e1:1c:eb:78:d0:68:b3:7d:
af:4f:3a:20:03:14:47:8b:35:ae:cc:3f:0b:53:50:
a6:9c:e8:06:82:bc:cb:c2:43:d6:35:9d:54:95:0b:
9f:28:4e:15:fa:c7:c3:f9:e4:79:94:6d:99:36:54:
89:fb:9e:4d:f2:58:cb:86:31:74:12:02:1c:e1:ff:
e2:bf:f7:62:0c:cd:23:0f:bb:9d:c6:6e:55:92:76:
df:32:3e:01:58:86:00:23:b7:07:38:a5:e4:d1:38:
13:8d:95:69:49:96:4f:2b:ba:22:93:bc:81:c9:66:
fd:24:e9:32:38:c2:ef:18:7f:c8:fc:fe:66:5a:44:
d1:07:4d:b2:33:25:d5:69:e1:8f:d8:c1:0b:a6:86:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A0:F8:57:70:43:AF:4E:11:07:20:31:15:EB:A9:57:88:93:0A:A1
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a3:7e:e6:83:dc:73:ac:52:05:73:fd:e5:6d:b2:30:c4:4b:
f8:d2:40:df:f1:27:d0:bd:71:4c:4e:57:9a:5b:54:c7:cb:6b:
17:86:0e:5f:ef:46:39:00:fd:57:99:1d:d8:b7:8b:f6:80:14:
4a:c2:db:c2:94:80:ff:da:e2:71:a6:b9:2c:b8:33:e4:37:94:
43:b7:0b:ad:06:6f:18:0a:d4:f3:b9:85:f0:7d:11:04:04:c0:
45:93:36:a5:d8:80:60:29:0c:55:57:0a:84:46:d3:ac:12:01:
7c:f3:2c:57:c6:34:ba:0c:88:e1:26:57:d9:68:87:d6:b6:92:
d9:71:1f:de:9e:00:e2:d5:0c:43:24:66:16:90:41:4b:88:06:
11:84:62:39:b5:cc:51:49:e9:31:0a:da:10:99:24:d3:6f:c4:
96:b4:90:51:d2:cb:1f:7e:bd:21:de:74:c4:17:82:ae:ab:64:
49:86:45:0d:09:99:a2:c5:61:66:7e:fd:b8:40:4d:0d:c5:26:
44:d0:94:50:c7:00:6e:49:3d:93:b5:d1:5e:61:9f:4b:06:0f:
b6:b6:ab:a6:42:4e:09:ec:a3:ec:8f:31:6f:f0:a5:89:9c:71:
95:9d:68:f6:59:c3:bb:f8:88:bb:8c:95:7a:a0:25:eb:1b:7d:
68:13:82:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:33 2025 by rpki-client