Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
File: SdWTfY5gK0jLL_UXFtmV0jofPho.mft (raw, json)
Hash identifier: uIgFkKccmkdeNbsPks/9jaJS1B0OqA2EDhRSA0/dY+8=
Subject key identifier: 62:F9:07:25:AE:9B:99:69:23:8B:33:8E:48:08:05:80:E2:BF:7F:57
Authority key identifier: 49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
Certificate issuer: /CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Certificate serial: 0199239EB7BD69A227B67615F9FEE9ED12DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
Manifest number: 0F35
Signing time: Sun 07 Sep 2025 10:00:28 +0000
Manifest this update: Sun 07 Sep 2025 10:00:28 +0000
Manifest next update: Mon 08 Sep 2025 10:00:28 +0000
Files and hashes: 1: SdWTfY5gK0jLL_UXFtmV0jofPho.crl (hash: mz1T3bnivxP7FAtmOMnwBeOm+qYD+1Viyo6Vkjhi2Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:b7:bd:69:a2:27:b6:76:15:f9:fe:e9:ed:12:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Validity
Not Before: Sep 7 10:00:28 2025 GMT
Not After : Sep 8 10:00:28 2025 GMT
Subject: CN=62f90725ae9b9969238b338e48080580e2bf7f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fd:4e:df:7f:91:f5:44:06:5e:d8:54:ab:a6:
2b:09:15:62:a5:58:4f:4f:6f:e6:75:b4:77:db:52:
8b:77:8b:da:61:f1:7c:c4:37:59:cd:2e:b2:94:e6:
bf:1e:b4:23:05:5a:b5:dc:cf:31:97:82:0e:28:aa:
7c:c0:1a:53:68:85:0b:42:c9:16:50:2a:cd:cd:1e:
7d:4c:52:5a:22:13:b5:dc:e9:d2:71:76:3b:f0:d6:
16:2a:e2:fb:cb:3c:eb:72:87:85:d5:c1:19:4c:9e:
ca:fe:39:50:6a:94:7f:d4:f5:c5:e0:93:45:3b:69:
6e:cd:84:2a:b1:f0:fc:4c:ba:10:32:69:62:9e:23:
21:8e:bf:6d:b2:90:ac:ca:46:2f:95:57:42:09:c4:
e1:b1:d8:5f:0e:02:f0:6a:cd:63:74:0d:48:ba:11:
33:2d:56:38:78:1b:9f:a6:44:9c:38:db:48:24:b2:
9f:c3:43:61:df:20:60:6b:af:fb:53:d3:e4:52:4a:
be:7b:07:18:70:34:96:b7:b4:f9:27:e5:83:dd:a5:
65:80:74:c2:30:7b:66:5f:2e:d5:ab:ca:b9:df:5a:
12:58:c4:7a:4f:27:8b:f1:49:69:2a:df:ba:19:44:
06:5d:ca:80:d5:f9:d5:0d:45:a7:38:19:89:3b:a0:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F9:07:25:AE:9B:99:69:23:8B:33:8E:48:08:05:80:E2:BF:7F:57
X509v3 Authority Key Identifier:
keyid:49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2d:63:c8:58:86:59:59:ad:35:92:c8:90:f8:19:af:e6:26:
6e:34:fb:6d:dd:b9:bf:5b:28:04:66:8b:90:29:76:53:fe:96:
52:0b:14:c2:77:d0:93:ba:ba:81:e9:89:5d:da:05:2a:49:dc:
29:a6:fa:f9:7d:cc:83:5f:34:a5:50:b7:97:77:f3:f2:45:db:
a9:4a:f8:19:09:4f:e7:b5:26:b3:e2:8c:80:cc:c6:1e:50:c4:
a2:a2:02:c4:43:15:7b:32:40:cb:6e:f7:93:91:cb:77:56:29:
ab:6d:c5:c8:30:a7:15:8f:38:fa:46:25:2c:fb:08:06:a8:6e:
4c:8d:9b:40:fc:9d:99:ec:1b:07:65:7c:7d:21:63:f5:ec:46:
16:97:58:82:66:1d:c2:14:f9:e1:fb:a2:f3:79:3f:d0:97:aa:
1b:e1:bf:20:cc:b3:39:df:8b:3c:f3:df:16:f7:b8:09:37:dd:
bd:54:c3:eb:f3:22:0b:ae:a9:81:d6:8a:72:ad:e6:2b:d6:18:
0b:c7:b7:f8:4d:21:bb:ae:ed:be:21:1c:1a:84:8f:37:40:c3:
c5:c4:65:90:31:76:7a:a2:99:72:67:8f:6b:96:b3:00:53:32:
2f:a8:85:36:e6:73:3b:1e:1f:eb:ca:27:9c:e0:6f:ae:1d:2b:
38:66:a9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:11 2025 by rpki-client