Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
File: R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json)
Hash identifier: IU+XLOprUc3H1Kx9IDL/O42eimGFwGYd4CLc/ThpN9M=
Subject key identifier: 54:28:4E:84:F5:E3:2E:E7:5E:CA:0E:E8:F2:16:D1:11:D5:FB:DD:01
Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
Certificate issuer: /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Certificate serial: 019923A05029DB234D633CC9D81545055584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
Manifest number: 106D
Signing time: Sun 07 Sep 2025 10:02:12 +0000
Manifest this update: Sun 07 Sep 2025 10:02:12 +0000
Manifest next update: Mon 08 Sep 2025 10:02:12 +0000
Files and hashes: 1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: SDGmMmA+WHHAbQyQKUXx5eOcszyI397b8GiFQzQscTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:50:29:db:23:4d:63:3c:c9:d8:15:45:05:55:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Validity
Not Before: Sep 7 10:02:12 2025 GMT
Not After : Sep 8 10:02:12 2025 GMT
Subject: CN=54284e84f5e32ee75eca0ee8f216d111d5fbdd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:78:48:2a:98:f6:81:c4:bb:9d:0e:75:61:d1:
f5:f4:9a:12:9e:be:e9:92:44:77:23:ff:b4:e6:45:
87:6e:33:d2:31:fd:bb:ad:c2:e2:e8:d5:f6:96:ac:
70:b6:ed:0c:78:ef:c7:f7:03:18:72:eb:fb:df:a2:
5c:af:97:cb:57:3f:12:e3:ee:76:4a:ee:92:3b:0b:
dd:da:e7:ed:a0:60:83:05:ae:cb:4b:35:ab:0e:c6:
b3:84:63:f6:cf:5e:9a:7c:a2:80:fc:1e:2b:fa:5a:
92:28:9c:0e:b4:a5:4f:a7:ae:d0:69:d4:68:7e:67:
d7:b1:f3:88:c5:a7:14:f4:1d:0f:40:90:48:6c:8d:
b0:6e:d5:b6:86:03:72:1b:97:f2:d3:bd:73:a3:d7:
a2:10:72:8f:82:4a:08:51:e1:c0:9f:1c:df:18:80:
ce:0d:a9:20:88:8f:f4:f5:84:96:83:f3:f5:42:77:
05:61:5e:62:66:fa:c3:8f:3a:de:06:8c:6c:0d:8c:
6a:79:42:96:a5:39:c3:02:3d:db:e0:3f:cf:66:02:
e3:1c:2a:2d:c7:b6:e7:20:74:79:fa:69:2b:63:c1:
03:ee:b9:75:59:63:6f:a0:c0:11:17:f1:d5:f4:4f:
85:e0:03:13:19:81:8f:c8:60:3e:53:5d:a1:72:5a:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:28:4E:84:F5:E3:2E:E7:5E:CA:0E:E8:F2:16:D1:11:D5:FB:DD:01
X509v3 Authority Key Identifier:
keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:69:06:b8:11:4e:ef:38:10:05:67:78:11:24:f4:50:b0:47:
21:87:6b:99:07:02:eb:5b:3f:87:a0:6b:fb:2b:d0:44:b7:9b:
08:c1:97:81:f5:f4:4a:b7:85:6f:63:be:e8:d9:b3:45:91:91:
0c:c1:13:a1:13:d6:97:0f:17:69:53:b6:69:44:58:f0:5e:19:
bc:a9:21:91:7b:38:db:f0:26:e3:5c:94:c0:9d:38:d9:0d:55:
b0:2f:0d:6d:3b:3d:bc:c2:ee:eb:61:ec:fe:99:44:56:1e:da:
a6:9c:0e:03:21:02:57:9c:4c:59:8d:96:d7:7f:38:b0:77:49:
82:60:95:3a:db:ba:16:3a:0e:75:24:f7:9e:31:62:f7:8c:42:
cd:eb:f7:49:28:5e:ea:cf:c5:0d:87:23:30:19:26:02:fd:ac:
74:64:bc:bc:a8:82:ad:c3:46:88:6b:06:eb:cd:f3:1c:c2:51:
ae:56:1c:05:ec:4c:4a:18:48:4c:b7:64:47:c4:97:08:a3:54:
de:ec:7d:2e:50:e2:28:3c:4a:13:a3:62:4c:13:9a:c1:4c:f1:
ee:08:c6:a9:73:62:8c:cb:ab:11:fa:74:8a:d2:34:e6:8a:5f:
4d:66:a4:65:ba:62:36:8d:9d:94:6f:46:cb:17:2b:e6:ff:f2:
3a:8e:5e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:21 2025 by rpki-client