Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
File: rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft (raw, json)
Hash identifier: ZA01n/m6+kmBpBE5gy3kxkSf688riOQuFD0j+DB0Ul0=
Subject key identifier: 86:02:B9:CB:BF:73:4E:3B:56:D0:C8:FD:F2:2A:84:C2:ED:AE:DF:E7
Authority key identifier: AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
Certificate issuer: /CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Certificate serial: 0199239EF50EC6110A35CB61903A717549B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
Manifest number: 0661
Signing time: Sun 07 Sep 2025 10:00:43 +0000
Manifest this update: Sun 07 Sep 2025 10:00:43 +0000
Manifest next update: Mon 08 Sep 2025 10:00:43 +0000
Files and hashes: 1: rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl (hash: tpbdY+6kRPAeEYg8GuvtjVc6FxNNOxzAMI4TyaC2kV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:f5:0e:c6:11:0a:35:cb:61:90:3a:71:75:49:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Validity
Not Before: Sep 7 10:00:43 2025 GMT
Not After : Sep 8 10:00:43 2025 GMT
Subject: CN=8602b9cbbf734e3b56d0c8fdf22a84c2edaedfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:0c:b0:da:9d:c5:fb:b7:68:9f:3e:2d:3f:
75:6a:a2:87:16:58:a2:14:51:75:88:0e:fd:30:86:
f4:dd:ea:f4:40:b4:ce:a5:b2:45:de:ce:87:02:21:
f3:7b:c1:b2:65:cc:0f:d1:75:ac:fe:d3:69:a0:6f:
ff:f3:b9:67:65:f3:07:77:ab:2d:18:b8:30:ec:c9:
64:bf:32:1b:34:05:25:8d:90:ab:d7:fa:a4:2c:10:
80:ec:b1:26:dc:46:45:c7:71:80:8f:11:6a:91:58:
96:74:94:d5:73:53:08:08:6b:2b:21:5c:6d:a2:f4:
99:95:ab:48:75:24:88:0e:93:e8:ce:70:26:ba:72:
95:8d:1a:aa:ed:f7:64:e8:8b:92:ba:e0:72:12:ba:
bb:41:03:77:ad:7c:35:4b:0c:69:94:e6:bb:9e:77:
82:76:3f:11:5c:4b:28:86:60:07:27:97:fb:b6:df:
61:ae:f1:f2:27:dd:ef:03:3e:e7:2f:5e:ea:84:d2:
01:40:f2:ba:57:c8:3a:20:2a:9c:70:1c:36:f2:17:
fc:6b:6e:56:0d:fe:a6:8d:a1:88:6c:89:91:b9:aa:
30:ff:30:5f:fd:ef:4e:bd:7d:b8:9f:0b:08:06:12:
69:a6:e5:d5:8b:16:a7:2f:2c:bd:52:b0:d9:1b:21:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:02:B9:CB:BF:73:4E:3B:56:D0:C8:FD:F2:2A:84:C2:ED:AE:DF:E7
X509v3 Authority Key Identifier:
keyid:AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ab:09:04:7d:c7:35:a5:df:72:99:8c:4a:13:f2:bd:cc:ac:
93:33:b2:95:3a:b2:c8:d4:11:4e:8b:b5:12:67:d8:45:04:ff:
4e:d1:01:8c:32:de:87:3b:a2:02:b8:8e:aa:c8:8b:90:c6:1c:
ec:1d:cf:03:76:64:da:68:94:59:5d:ed:71:07:d6:35:39:9f:
62:97:f7:25:2b:9d:91:f1:a5:80:74:82:59:32:c2:e4:5e:49:
23:7e:15:8c:d9:54:8e:58:59:68:dc:b4:02:9d:2c:11:7d:6b:
8d:4c:65:f4:c7:fd:23:ec:a0:26:91:db:ba:77:53:63:54:a2:
5c:11:ac:fb:a8:69:8f:2d:f4:e9:c1:f7:c7:a5:a4:c5:d7:60:
01:95:73:c1:f9:c9:6f:a8:76:01:35:9e:e1:12:e7:22:dd:a6:
5a:6d:8b:6b:ae:d5:26:2d:83:fc:5e:c2:e3:1e:05:90:1d:10:
2f:67:66:fe:11:f5:91:1f:8e:c2:2d:c5:fb:8f:48:9f:d1:48:
2e:b7:70:8c:07:d1:92:e9:0c:1f:68:3a:94:c2:10:85:7b:2c:
95:7c:87:2c:6a:db:f7:08:f3:0d:2a:84:ea:d3:ca:67:fd:9b:
b3:4b:4c:45:43:22:cd:86:03:a8:e5:85:62:e1:67:92:2d:76:
e9:ed:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:13 2025 by rpki-client