Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: XTAMhrc9A3hCPCwmP1D28SfbQZd2R1RzGkw9AvNgOfQ=
Subject key identifier: C4:62:AF:A0:CD:B0:82:A3:71:D7:E9:90:DD:52:51:C0:55:5B:D1:F4
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 0198D5BB8DADD54EB7B0408D503BA101333D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:35 +0000
Manifest this update: Sat 23 Aug 2025 07:01:35 +0000
Manifest next update: Sun 24 Aug 2025 07:01:35 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: ik2phQnQYk6wtBsoogNZRevfRPeuRU5LOMwB+EmzUfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8d:ad:d5:4e:b7:b0:40:8d:50:3b:a1:01:33:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Aug 23 07:01:35 2025 GMT
Not After : Aug 24 07:01:35 2025 GMT
Subject: CN=c462afa0cdb082a371d7e990dd5251c0555bd1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:42:f3:6c:37:e8:71:f5:89:bd:73:bf:d2:
72:36:df:55:cc:3e:e5:d9:3c:32:76:61:53:11:d5:
2e:d0:f0:96:b7:67:ae:22:76:34:da:01:53:ba:55:
ba:bc:f5:6d:c9:65:f6:5e:e3:1a:d8:18:4d:18:d6:
4c:66:eb:63:d6:71:be:b7:50:49:80:00:a7:5e:48:
53:79:6f:51:dc:fb:75:46:2f:a8:7a:9a:20:b7:24:
6f:e6:60:43:39:9f:0d:f0:31:4f:ec:9e:bf:e1:f6:
8d:b7:71:f0:04:67:b4:ef:8e:ef:6b:e9:c9:0b:06:
6c:a1:06:fd:0d:3f:66:17:d5:48:70:65:2a:8b:ba:
66:42:00:19:41:3f:23:1f:00:dd:e6:1f:80:62:e5:
a9:84:5c:86:c9:94:75:49:be:b2:a9:b2:44:b7:2f:
41:59:33:a5:f9:be:74:db:40:27:41:f5:d1:22:6d:
30:5d:53:58:88:69:4a:40:4e:67:05:c3:e2:00:61:
e5:c8:d8:fb:49:cb:73:14:ba:37:7e:fe:d3:9d:d9:
b0:82:1f:b0:45:47:12:cb:4c:a4:21:4c:01:8f:36:
f8:43:34:9e:8a:5e:ac:4c:97:f6:58:1c:d3:31:22:
3f:b1:bb:b3:d8:50:23:39:2d:cb:66:43:bd:72:8a:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:62:AF:A0:CD:B0:82:A3:71:D7:E9:90:DD:52:51:C0:55:5B:D1:F4
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d6:44:e8:4f:06:97:3a:b2:51:4e:3f:74:05:ac:67:b3:00:
b9:65:92:5f:0a:97:d6:6c:68:0f:74:12:23:0f:01:69:ca:6f:
af:73:94:9e:e4:51:40:50:ce:29:72:9f:59:e9:6f:94:bd:ab:
98:bd:f9:71:9e:60:aa:46:2c:f6:a8:02:f6:33:dd:af:61:8f:
7d:55:31:1d:1c:f3:6b:69:c0:ab:e7:65:24:a3:f2:0b:90:c4:
2c:91:f0:77:8a:db:e2:c9:6f:c8:b3:3b:a0:04:d3:14:96:55:
29:7d:f9:d9:cb:f9:73:03:41:13:a7:a4:91:87:89:b3:90:d3:
58:20:b6:fa:7b:95:b8:78:49:93:87:3b:00:b5:94:a6:5f:36:
bc:86:6c:fc:4d:e1:bc:c6:b4:69:22:ab:3e:11:5e:5b:0d:c7:
85:f7:38:c1:82:50:b8:d6:da:ee:e7:ff:f2:01:c7:d8:15:bf:
3e:c0:1d:e7:f0:78:30:b2:41:21:30:da:66:34:b4:4a:9d:ab:
a3:53:60:34:4a:04:f6:f0:6c:84:0c:75:fb:b6:19:7a:b0:44:
b5:db:b4:85:1e:6c:7e:13:4b:69:d3:5f:e4:cc:0d:ab:dc:82:
e8:49:7d:92:fe:9d:22:87:8e:83:b3:e8:ef:7f:f5:16:34:85:
2b:4a:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:32 2025 by rpki-client