Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: 3LgNmKjGOBHy7Y2mbtMaahRb2MwaysQLzSiIYWom6Kk=
Subject key identifier: 58:31:A3:6C:F0:8C:18:DB:FB:CD:DC:2B:F3:B5:2B:5D:C8:D2:BE:34
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 0198D474A2AE0B80EE28C369B63AABED71B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:04:30 +0000
Manifest this update: Sat 23 Aug 2025 01:04:30 +0000
Manifest next update: Sun 24 Aug 2025 01:04:30 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: NQukRDZ6UpxsOj7Lj9MprIISfEEsX4KT8+Inj6WK4m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:a2:ae:0b:80:ee:28:c3:69:b6:3a:ab:ed:71:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: Aug 23 01:04:30 2025 GMT
Not After : Aug 24 01:04:30 2025 GMT
Subject: CN=5831a36cf08c18dbfbcddc2bf3b52b5dc8d2be34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:92:f2:47:9f:4d:77:81:c0:08:59:f8:21:
1a:f5:0f:a6:eb:00:40:c1:42:cd:30:44:ea:88:ab:
bb:82:9d:e3:d0:5a:5e:6a:5d:56:98:80:a0:bd:94:
82:8e:cd:9a:a8:01:71:8c:33:18:6e:60:72:1a:dd:
81:a1:41:fe:e7:b1:bf:3e:4a:65:78:35:09:f1:7e:
4a:83:3f:14:88:35:44:70:15:2e:68:f5:6f:a4:b7:
df:6d:e3:57:69:05:e6:02:a2:4f:7f:5b:c3:56:09:
b7:3b:2b:4c:d0:4c:ce:6a:e5:9a:18:21:ab:eb:16:
73:ce:95:07:7e:4d:9f:67:50:20:73:6f:6c:66:1f:
6c:23:25:f8:3b:2a:4c:7f:16:4b:b7:1a:74:8f:46:
3e:b8:08:d5:83:07:9b:6f:8b:16:66:33:5a:7d:33:
2f:fb:56:12:e3:0f:b4:ae:61:fa:bf:9a:98:7c:ad:
43:8c:25:90:17:ff:ad:6f:81:6c:90:a9:da:08:9c:
a9:cf:23:5f:bb:b2:bc:0e:70:e9:28:bf:b6:84:4c:
dc:62:27:a9:d8:7b:79:67:68:11:79:80:fc:4b:ba:
44:c4:e7:35:79:c6:4f:c2:24:91:d4:1c:4d:b9:fb:
8e:f1:1c:47:ff:92:40:f6:dd:83:44:39:17:97:11:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:31:A3:6C:F0:8C:18:DB:FB:CD:DC:2B:F3:B5:2B:5D:C8:D2:BE:34
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:75:c4:96:0b:c3:fa:ac:e5:7a:e3:e0:3f:d8:6e:b9:36:4e:
01:69:cb:d5:b0:0c:5e:e7:79:55:cb:73:39:6c:db:27:bf:1f:
cb:9b:9f:76:a7:0f:63:9b:e9:a1:81:c3:b1:e1:4a:fe:37:9b:
c5:f8:a7:26:b4:de:0c:e4:b5:46:a8:96:44:c4:95:c2:71:6b:
24:79:78:e7:51:56:92:6d:84:4f:3e:e8:5e:fb:49:08:ac:ff:
fd:18:ea:90:a9:4d:87:04:fb:44:46:93:1f:3f:d9:00:35:3a:
3b:2d:06:ad:62:d7:80:10:d6:38:67:d1:e3:70:2f:22:ab:8f:
61:c1:d6:46:a7:aa:08:69:db:16:4a:ca:b8:87:cb:d2:69:9a:
ea:16:e8:22:ee:54:98:d0:a7:ec:4c:03:55:57:4f:68:59:9f:
24:a4:f7:b9:96:c7:3d:e1:5d:0c:6a:e0:dd:f6:41:f7:20:c8:
5b:44:17:e3:5c:ee:2d:0f:48:5c:a6:1b:9d:8a:ac:77:d4:d2:
a5:42:41:f9:4b:b1:84:d5:ae:bb:bb:09:f2:9e:c0:10:5a:ec:
74:1f:f8:13:dc:6f:29:ce:51:91:90:3b:29:db:4b:4a:35:9d:
1c:c7:f2:22:2d:84:3c:9c:4b:ad:14:a7:4a:c3:7c:97:2b:a2:
37:bb:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:43:43 2025 by rpki-client