Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
File: _kK02grqV4yifyXesM_tYagLnqI.mft (raw, json)
Hash identifier: ooWlzcREQwc2+qXKEjkdgETk7EZTm20bZ4CJLvjhXmQ=
Subject key identifier: 29:BC:BC:3F:11:F9:AA:AC:23:1E:61:9D:5A:71:A5:D0:C2:62:A6:FB
Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
Certificate issuer: /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Certificate serial: 0198D6CD3ED39E36B0C08D25B70583159B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
Manifest number: 0987
Signing time: Sat 23 Aug 2025 12:00:31 +0000
Manifest this update: Sat 23 Aug 2025 12:00:31 +0000
Manifest next update: Sun 24 Aug 2025 12:00:31 +0000
Files and hashes: 1: _kK02grqV4yifyXesM_tYagLnqI.crl (hash: H3mvcykL6TNSMoxlgkr0DwTw7yEGLKOgVb28/9AWlP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:3e:d3:9e:36:b0:c0:8d:25:b7:05:83:15:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Validity
Not Before: Aug 23 12:00:31 2025 GMT
Not After : Aug 24 12:00:31 2025 GMT
Subject: CN=29bcbc3f11f9aaac231e619d5a71a5d0c262a6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:89:16:8d:fe:9e:b2:f5:3a:b1:44:d4:1e:
07:93:e5:28:83:bf:c5:0d:c7:31:27:e4:4d:06:bc:
c3:22:01:08:78:07:29:97:b3:9d:ec:57:30:c1:bc:
a1:91:08:67:44:42:41:7d:b9:05:2b:2d:39:fd:f4:
e8:c1:db:ec:3c:f1:99:7d:68:ce:5c:96:c1:f0:65:
29:84:b4:a3:1b:89:4f:90:da:cf:df:d0:b7:9a:4f:
d1:5a:a8:d1:f9:3c:d4:5d:08:7f:d7:6e:e9:d6:6a:
30:23:76:30:15:f1:fd:93:db:11:d0:88:e7:03:18:
e9:d8:65:35:72:14:3c:b7:13:fe:4b:36:98:8a:46:
31:24:a7:aa:f1:c6:bb:af:f8:16:50:16:67:bd:9b:
a1:3b:53:7f:ca:a0:b3:96:36:80:50:3c:9c:84:74:
bc:aa:e7:76:90:83:61:55:92:7c:e2:9f:a2:6d:c1:
e8:ee:b7:ce:78:f7:30:a7:03:07:c6:00:84:7c:fd:
78:38:05:65:61:ed:c5:2a:7a:73:bd:03:fd:76:ee:
25:23:53:6d:b3:ab:6e:0f:e6:96:ca:e3:9b:48:93:
04:3f:68:e1:cf:0b:bc:bf:d2:92:d1:49:4a:34:9d:
6a:62:e6:50:3d:c6:b4:93:2c:34:93:20:fe:ed:85:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BC:BC:3F:11:F9:AA:AC:23:1E:61:9D:5A:71:A5:D0:C2:62:A6:FB
X509v3 Authority Key Identifier:
keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:18:bf:74:72:c6:52:8f:d5:f6:8e:9c:c5:7e:ac:ed:70:fc:
47:4e:83:cd:f9:32:dc:34:7d:51:f5:02:4c:f1:08:a7:c6:09:
ae:f3:73:5d:02:fa:75:15:fe:75:17:c1:45:ef:d9:3e:4b:ab:
72:d2:39:04:66:91:e7:de:40:f0:71:c5:24:3f:e5:ce:ad:e8:
c9:5d:90:f4:4d:27:d3:f3:51:93:93:f8:40:24:8e:fd:fb:15:
b6:aa:87:65:cd:aa:f8:eb:a6:98:b9:fd:5b:bb:50:8c:0a:14:
eb:45:31:f1:97:a0:ef:78:7e:3e:bb:cf:85:9f:f5:40:86:3b:
4c:75:cc:f9:79:3a:ef:49:5c:8c:98:38:a0:fd:32:c7:e3:aa:
90:dc:cc:40:6e:95:3d:ad:0e:a9:06:db:8a:4c:29:35:e3:0c:
cc:e7:65:bc:87:33:fa:a6:a6:56:80:d9:58:bd:9d:f7:c2:5d:
64:92:45:9f:24:d7:63:fb:d4:7b:1d:f2:e8:f6:fb:d7:4b:5a:
bd:8d:a2:b9:15:3b:79:c4:93:45:f7:66:a3:7c:46:92:ab:ed:
01:9e:ab:e2:de:4b:5f:f8:39:44:be:c2:3e:03:43:ef:bc:5f:
81:0f:4b:96:35:40:67:a2:12:e7:97:eb:fe:43:e1:d2:07:0a:
54:12:4e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:09:54 2025 by rpki-client