Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
File: MptRPmVwb8qlQ6EaDkLSixCd87Y.mft (raw, json)
Hash identifier: 6xH45XiRP+2wUhCi5cB8XMep7fN+lb34UOuE3FvH8mk=
Subject key identifier: C1:60:A0:7F:F1:D0:11:9F:15:95:61:76:65:35:55:44:D2:7E:16:99
Authority key identifier: 32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
Certificate issuer: /CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Certificate serial: 0198D69842635D49DEE9D75680C764C86B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
Manifest number: 1358
Signing time: Sat 23 Aug 2025 11:02:39 +0000
Manifest this update: Sat 23 Aug 2025 11:02:39 +0000
Manifest next update: Sun 24 Aug 2025 11:02:39 +0000
Files and hashes: 1: MptRPmVwb8qlQ6EaDkLSixCd87Y.crl (hash: cPcIVer2yPLIxVhOOU6W4Os1zj/CEIFwWOIPh0rfAKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:42:63:5d:49:de:e9:d7:56:80:c7:64:c8:6b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Validity
Not Before: Aug 23 11:02:39 2025 GMT
Not After : Aug 24 11:02:39 2025 GMT
Subject: CN=c160a07ff1d0119f1595617665355544d27e1699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:4d:0e:fa:72:af:49:a1:fc:70:70:a2:23:
52:66:37:6b:ae:34:9f:4d:00:c0:0c:01:d2:f0:47:
22:d8:c2:2d:3d:ba:77:9f:9e:43:ce:30:b2:4f:8d:
ea:a3:61:15:62:c7:b4:ef:2f:34:92:61:62:13:ca:
48:b6:9d:93:06:6e:90:0d:36:f3:f5:d7:68:7b:37:
1f:b5:91:d4:0c:d5:13:02:f4:49:2a:5a:1d:16:bc:
49:ee:94:7f:63:70:8e:69:9c:db:e5:62:8b:e5:bb:
c9:38:8c:ec:83:12:53:b4:66:d1:fd:ca:8b:45:5d:
d4:c8:f3:50:db:3f:18:d4:ed:3c:4f:e9:c0:fb:68:
d2:a3:e0:fb:19:2e:4c:c2:8e:58:ba:78:38:7a:72:
a8:38:9e:77:7f:52:cb:6c:ad:a7:12:f9:63:1c:f6:
90:e4:dd:65:6c:1a:41:4b:6c:40:5a:37:6e:8c:a2:
4c:b6:ad:d0:2b:9a:44:6a:8b:85:de:8f:60:81:c2:
b8:47:0c:74:9f:d1:ab:79:c0:f2:cb:b1:a0:39:95:
fd:4a:43:6d:98:69:5c:a8:b4:87:d2:6f:2f:03:2a:
7d:22:06:ce:1a:2f:86:17:80:8e:ef:16:7e:f1:56:
5b:eb:00:eb:83:15:3a:8a:64:21:1e:a0:46:c2:ad:
69:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:60:A0:7F:F1:D0:11:9F:15:95:61:76:65:35:55:44:D2:7E:16:99
X509v3 Authority Key Identifier:
keyid:32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:06:ac:de:66:45:65:e5:c0:71:0f:64:e3:ac:f4:36:f7:31:
19:cb:ea:3b:5d:ff:99:77:fc:d0:ab:83:9e:ce:4f:68:2a:ae:
44:e6:30:4e:33:62:b3:4d:70:41:c9:1e:be:ec:40:d6:aa:78:
14:89:d1:a0:d9:39:b6:28:9b:ae:de:0a:17:d4:db:53:ce:a2:
eb:e4:fc:6b:3e:52:d0:69:85:ca:7b:8f:c0:64:05:35:fa:01:
4d:8c:47:f1:d4:92:33:fc:d5:fb:d7:36:dd:b0:bf:83:be:bb:
e9:12:28:8a:80:8a:34:84:91:ac:dc:32:12:02:47:bb:de:4e:
54:ce:3b:88:9a:a2:ce:f5:b1:43:2e:67:f1:71:06:71:fb:24:
5d:86:17:fe:0a:34:36:c2:ea:bf:9e:3c:b5:22:63:fa:48:7d:
e2:6a:b9:3a:0b:e6:2a:42:34:47:91:e4:87:70:c0:7e:11:ce:
43:ed:9e:b4:c0:85:1d:f8:00:42:30:cf:16:da:46:81:24:e6:
c5:b7:e6:1f:2a:e6:90:2e:41:c5:b2:ba:0e:31:58:87:2c:4b:
ca:e5:de:26:f8:ba:ab:ef:ff:ab:fa:03:39:30:39:9d:a5:23:
6c:9d:4e:6d:e9:6b:cb:5e:0c:75:0b:a7:b0:1a:90:aa:cb:1d:
e1:72:c2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:10 2025 by rpki-client