Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
File: d_bMQsdY59p8S_q8ISEtHSghYDE.mft (raw, json)
Hash identifier: 0JFye9d7KibZZVfwVHZ5uQvsqeBNqa/VoysGYe4Q6Tc=
Subject key identifier: FD:4E:98:6C:52:CE:5A:01:AD:31:2F:79:44:23:51:82:DF:5A:3B:E4
Authority key identifier: 77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
Certificate issuer: /CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Certificate serial: 0199221EB6C3A7BED051236575FADAADFE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
Manifest number: 063A
Signing time: Sun 07 Sep 2025 03:01:02 +0000
Manifest this update: Sun 07 Sep 2025 03:01:02 +0000
Manifest next update: Mon 08 Sep 2025 03:01:02 +0000
Files and hashes: 1: d_bMQsdY59p8S_q8ISEtHSghYDE.crl (hash: AyZ+MMFsYKX++wElV2LKu434KHEfYJ+RamzULdfXRqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b6:c3:a7:be:d0:51:23:65:75:fa:da:ad:fe:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Validity
Not Before: Sep 7 03:01:02 2025 GMT
Not After : Sep 8 03:01:02 2025 GMT
Subject: CN=fd4e986c52ce5a01ad312f7944235182df5a3be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:21:a2:d2:72:7b:43:3d:0d:27:fe:4e:36:8e:
80:57:27:bf:5e:8a:49:45:3e:c3:b1:98:e9:1f:c9:
f2:80:93:56:95:8f:e3:0d:d1:94:af:dc:c2:56:a8:
ce:65:ab:6a:f2:b8:fd:ae:aa:e6:b7:a4:3a:bc:4c:
09:f0:8c:b7:96:57:69:96:5e:97:b6:66:19:7a:84:
92:00:6c:69:ec:f5:f6:97:40:e5:70:da:6c:6d:e5:
eb:a9:48:d0:70:33:01:c9:51:d6:b9:4e:46:c8:00:
7c:f8:c1:dd:a9:86:8e:a6:df:10:ff:8c:9a:54:8f:
02:c3:a3:35:7b:ad:fb:8d:2f:1a:12:4c:1a:17:ea:
80:41:cb:9f:c0:c1:0c:99:dc:02:c6:5f:dc:4c:55:
18:63:ab:14:eb:17:68:ec:27:a5:4a:04:cc:11:84:
f3:a9:fc:63:4e:c1:ca:d9:a3:15:8c:06:50:f6:22:
f2:0d:94:dc:9e:bc:07:e2:e5:d9:6a:b7:4d:a8:76:
9d:80:e7:88:4a:01:37:44:70:c9:cb:d5:5a:8f:62:
c0:9b:87:a0:62:8c:c8:b7:63:53:2c:db:61:73:f5:
6d:c6:fe:78:7b:41:2b:a0:56:db:47:63:d7:5b:bd:
8f:f8:0f:ce:4b:c8:d6:cc:6a:68:84:6f:48:9a:ad:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4E:98:6C:52:CE:5A:01:AD:31:2F:79:44:23:51:82:DF:5A:3B:E4
X509v3 Authority Key Identifier:
keyid:77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a7:09:a6:43:d4:c8:d2:06:a9:5e:09:32:60:ed:d3:43:ce:
36:3f:a3:04:4a:e5:51:8b:19:0d:8b:fc:21:b2:7e:5b:e6:41:
f5:9c:78:a7:64:51:4f:07:82:40:d2:cd:c7:ad:7a:dd:d6:09:
f3:f6:d0:5e:99:31:9c:77:79:c0:c6:b1:af:1f:db:15:c5:2f:
ac:0c:e0:2d:38:89:dc:a8:aa:0d:b0:dc:01:44:2f:d8:b4:32:
6b:ea:56:f9:9e:c8:cd:10:15:a5:d9:0d:81:cb:74:bd:c6:2b:
02:f5:52:3f:92:e6:10:5a:f9:ef:24:7c:73:b7:2b:fb:23:ac:
5b:d6:28:56:d4:82:2b:23:04:7c:94:75:a6:b6:65:37:80:29:
c3:ae:8b:f7:fa:1b:c8:e7:cb:5a:bf:27:cd:fc:59:98:a1:db:
38:04:d1:11:a8:63:d2:a8:4b:9e:7b:d5:5c:ac:0b:f7:22:12:
a9:eb:a7:a8:86:e3:f3:e0:1e:2d:c7:8e:e9:87:a3:03:a8:53:
ad:a9:d1:73:a0:51:b1:a0:29:c6:9b:ab:d1:c6:d9:63:f7:c7:
90:c7:5c:7e:1c:d8:43:a6:40:b8:33:89:04:8a:e4:bd:d5:e7:
3a:9a:28:97:ba:42:9a:f2:72:81:53:e2:c5:b3:a6:b5:27:d7:
70:97:3c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:39 2025 by rpki-client