Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
File: ckWEKSHz0CDU2AReUrsQ_PV-r28.mft (raw, json)
Hash identifier: BXlHq09d1KS1M8Svs+qfIM1ZSYkGG8MjTjrxW/P5cDM=
Subject key identifier: 8B:53:86:DA:33:8A:D2:2D:34:EB:57:DE:87:B8:D4:52:25:3B:ED:5C
Authority key identifier: 72:45:84:29:21:F3:D0:20:D4:D8:04:5E:52:BB:10:FC:F5:7E:AF:6F
Certificate issuer: /CN=7245842921f3d020d4d8045e52bb10fcf57eaf6f
Certificate serial: 0198D4E0A2FFE84659E824CDE74F26F86A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
Manifest number: 0FC5
Signing time: Sat 23 Aug 2025 03:02:28 +0000
Manifest this update: Sat 23 Aug 2025 03:02:28 +0000
Manifest next update: Sun 24 Aug 2025 03:02:28 +0000
Files and hashes: 1: ckWEKSHz0CDU2AReUrsQ_PV-r28.crl (hash: gjlnAqf6zmJul0BI0zqg0jbTF29CuPM/p8VHSFSc2NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a2:ff:e8:46:59:e8:24:cd:e7:4f:26:f8:6a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7245842921f3d020d4d8045e52bb10fcf57eaf6f
Validity
Not Before: Aug 23 03:02:28 2025 GMT
Not After : Aug 24 03:02:28 2025 GMT
Subject: CN=8b5386da338ad22d34eb57de87b8d452253bed5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:70:4e:59:ed:c9:9b:f5:b8:2f:09:1f:15:84:
92:f6:6e:95:9b:e9:fe:70:8e:af:b5:48:1f:e2:da:
9f:71:52:ce:f5:23:ce:74:aa:b8:31:e0:bd:03:0d:
04:67:1c:ec:7b:da:33:c9:36:7e:01:dd:80:a3:67:
63:e7:9b:ab:c4:66:5c:70:ad:25:60:6f:4e:b8:33:
3a:44:e4:84:a1:c7:08:07:88:b6:16:ec:e5:2a:74:
4a:7d:06:fe:6a:43:13:7d:a2:66:71:55:a6:45:f5:
8b:49:e7:12:0d:b6:13:99:5d:a2:e1:55:d3:f8:26:
c2:7c:26:4e:53:2d:a1:8c:1e:32:00:40:9a:0f:bb:
54:c2:aa:76:01:a4:38:c2:8d:99:32:1b:fd:94:01:
7b:4e:95:4d:e4:c2:ac:2f:d8:5d:fa:3c:bc:99:e7:
0d:51:9f:14:1b:08:be:8c:42:9a:3c:d3:7a:79:fa:
74:de:61:a9:28:f3:13:ac:ca:86:3b:51:1a:eb:26:
22:95:bb:05:a1:7e:04:d7:af:25:a1:77:ac:9c:1c:
cb:d7:2f:51:4a:33:32:bd:43:23:12:a8:2c:b7:12:
02:6b:fd:d8:b4:5f:4b:f4:99:55:72:0e:e8:bb:3c:
c9:21:2a:a4:9e:3f:89:1d:42:c1:ea:2f:51:10:c2:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:53:86:DA:33:8A:D2:2D:34:EB:57:DE:87:B8:D4:52:25:3B:ED:5C
X509v3 Authority Key Identifier:
keyid:72:45:84:29:21:F3:D0:20:D4:D8:04:5E:52:BB:10:FC:F5:7E:AF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:98:2a:96:93:18:9c:f6:59:3a:3d:43:36:8a:6f:71:04:4d:
1b:42:3e:62:9b:c9:f6:c4:28:07:82:da:f4:10:56:f9:4a:87:
13:03:56:5f:a7:4a:ff:16:2d:63:4b:50:fd:f4:66:9a:28:03:
48:b9:32:44:61:64:d8:f3:b9:0c:8a:c1:1d:93:0f:1f:b9:e8:
83:4b:40:0c:a8:bb:6f:50:4b:b5:9b:83:60:f8:3a:6f:63:c4:
2e:1a:17:ea:01:3d:0b:4e:de:12:1a:3e:2c:d9:e2:50:bc:20:
ad:95:68:9f:44:6a:70:8b:d2:95:9e:d6:df:f6:58:15:e8:0c:
a9:83:36:46:bd:25:ab:b7:1a:ff:f3:f5:6f:6e:15:6c:48:8c:
66:7f:87:32:41:24:83:8e:c8:98:53:de:c1:a3:24:21:72:ff:
c6:aa:2e:17:10:8e:3a:ad:24:ae:48:1f:55:0a:0a:07:ca:ca:
af:26:d3:36:59:65:96:bd:6a:44:cb:be:95:d6:0a:26:cb:5e:
5f:20:bb:0a:dd:98:27:d6:0b:fe:f7:f4:cb:19:a6:b5:40:9f:
cb:15:4c:c1:ea:0b:80:08:8b:79:25:9b:d0:83:07:44:f5:52:
a1:23:bd:7c:b0:50:37:ec:7a:4a:cd:e9:1a:f0:19:3b:16:f7:
7a:cd:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:17 2025 by rpki-client