Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json)
Hash identifier: FX8DGEqqgTpn2nVE3LYnER9ayA1wbPKYrqlMN1/9qFQ=
Subject key identifier: CA:4A:BB:B8:D0:79:78:D7:FE:ED:4F:B7:C6:84:66:0A:E8:21:5E:06
Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Certificate serial: 01992255CC519DC1A4CF9F51AC613832DB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
Manifest number: 0563
Signing time: Sun 07 Sep 2025 04:01:12 +0000
Manifest this update: Sun 07 Sep 2025 04:01:12 +0000
Manifest next update: Mon 08 Sep 2025 04:01:12 +0000
Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: 19Rpfe3LWP2INS7t60gsqnPo4q/XU2rDNh6FYhzf/fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:cc:51:9d:c1:a4:cf:9f:51:ac:61:38:32:db:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Validity
Not Before: Sep 7 04:01:12 2025 GMT
Not After : Sep 8 04:01:12 2025 GMT
Subject: CN=ca4abbb8d07978d7feed4fb7c684660ae8215e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:41:b0:9b:1f:a6:d8:05:ec:51:cb:ee:34:
67:cf:5d:56:0d:2a:2b:11:5a:29:b2:e3:2e:b9:46:
ac:aa:53:6a:8d:1e:89:11:23:49:7f:ca:b0:85:94:
f7:44:f3:1a:65:3f:66:45:7e:8f:94:3d:5c:13:97:
ba:95:6b:77:de:a7:57:39:ed:6b:49:76:21:51:3c:
69:3f:d3:c3:5b:1d:c3:fc:5a:34:b1:8b:1e:f5:91:
b3:67:f7:0f:e8:fe:92:07:16:06:9d:36:67:54:c3:
36:a8:82:c5:42:98:75:1e:95:22:7b:20:61:2a:4b:
7c:09:5b:57:40:9c:2e:26:0c:1d:8c:4b:69:61:07:
3d:e6:21:6f:78:78:40:17:b9:74:d7:c0:8f:5f:2a:
7f:84:20:86:61:15:78:90:52:de:a2:1c:f7:3f:87:
cc:24:a1:df:6a:6b:5f:02:a0:21:88:7c:9d:d7:87:
db:c6:9a:9b:11:48:70:5d:df:06:f4:e3:a9:af:bd:
7a:e8:8f:5d:35:a6:77:d2:78:14:00:c1:c4:52:98:
1d:6b:3c:0b:16:0f:f4:5d:e8:01:21:d9:f3:34:d7:
1a:d1:b8:6a:fc:78:7a:d0:dc:ae:ed:70:8f:c7:5c:
45:56:dd:90:37:53:b0:82:da:90:27:fa:ef:1a:8e:
0f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4A:BB:B8:D0:79:78:D7:FE:ED:4F:B7:C6:84:66:0A:E8:21:5E:06
X509v3 Authority Key Identifier:
keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6c:c0:79:76:03:c4:29:f0:88:c7:28:b1:01:74:92:79:b9:
4a:5d:3f:00:87:8b:19:1c:d4:34:09:57:82:c5:de:14:87:4c:
57:71:48:70:42:b2:21:ba:f1:12:44:b5:0f:cb:d7:79:37:4a:
9b:52:34:84:0f:5a:ce:8a:54:9e:4d:57:3f:c7:6a:24:2c:c2:
4a:8a:ee:88:81:48:62:c7:59:92:3f:a1:7c:bc:29:5f:fe:8b:
6e:c3:85:b3:f5:86:99:16:d0:8e:03:19:e3:45:d7:3b:c8:9d:
e4:77:07:08:83:61:1d:d9:5e:d7:04:77:2f:fa:d0:3a:ae:ba:
b8:bb:ca:92:e2:f6:c5:4e:fc:0e:bc:97:63:52:48:72:6b:ed:
1a:a6:ea:57:e9:f1:00:85:f3:9d:74:b2:05:17:9b:82:a6:af:
55:64:cc:35:99:ba:3e:43:b2:ca:f2:7d:ec:5c:70:b5:21:2d:
21:5a:13:57:5c:d2:d5:a2:32:e7:07:38:8c:c9:35:0a:0f:ec:
48:38:01:b5:6d:d1:01:8a:7e:f7:19:ae:ae:ae:64:a1:90:ef:
58:fe:e7:15:e5:6e:4a:30:43:0c:f0:3c:7f:81:37:bc:f3:77:
c7:ce:5d:ae:e5:2d:77:ae:c3:25:d3:e2:a9:fc:d6:63:69:2d:
72:5a:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:54 2025 by rpki-client