Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: P1GWewAC+tBlwH2wepgKFali3KS/149A0keTIuER/pA=
Subject key identifier: F1:10:EB:DF:BC:99:DF:B7:83:71:F3:EB:F5:3C:7F:2E:87:7F:F3:A6
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 0198D47323011D0DC15EA29F6BFB9CA5D5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 097B
Signing time: Sat 23 Aug 2025 01:02:51 +0000
Manifest this update: Sat 23 Aug 2025 01:02:51 +0000
Manifest next update: Sun 24 Aug 2025 01:02:51 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: HWfePLY+8i/65ftlvwGLjd/LaupcF1AUskgimPPKQSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:23:01:1d:0d:c1:5e:a2:9f:6b:fb:9c:a5:d5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Aug 23 01:02:51 2025 GMT
Not After : Aug 24 01:02:51 2025 GMT
Subject: CN=f110ebdfbc99dfb78371f3ebf53c7f2e877ff3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:ba:2d:69:9d:8c:ca:5e:27:c0:53:d9:6c:
58:c3:39:71:8c:a7:d7:4c:44:a6:43:ef:0b:9f:e7:
43:50:69:1c:b2:35:0f:ae:d7:69:ff:47:c3:26:32:
9a:16:55:64:c4:70:d9:7c:8b:64:5f:69:31:1f:da:
35:18:c4:30:9f:36:c3:7c:c3:fc:75:d2:b1:4b:a7:
82:87:7c:c3:6d:63:d8:cc:b4:0e:df:38:ac:53:67:
43:e4:1e:2b:9f:d3:43:56:e8:3b:2e:4f:9e:cf:94:
c5:84:bd:be:58:06:fc:8c:ef:1a:5e:c7:7f:cb:b8:
07:8e:3d:c1:c6:9e:b4:74:1c:53:e9:34:be:63:5d:
8b:b1:aa:fd:96:fd:70:bc:c3:20:e4:3a:6a:2c:47:
ad:91:cd:ee:05:09:1c:e2:c2:7e:bd:f6:43:7d:e4:
80:ad:4b:15:a9:43:a7:4f:29:be:c2:ff:1f:f1:66:
3a:09:bd:9e:6e:d0:60:7c:6c:75:da:a8:5c:33:7d:
28:9a:b9:42:fc:1d:a2:bb:1a:91:73:a6:68:12:82:
34:63:c0:eb:25:f1:f3:e2:c8:40:1a:fb:fa:23:0d:
4d:ca:d4:ab:3b:81:f1:13:83:f5:82:bd:7e:d9:31:
4f:da:06:de:8f:1f:fe:4f:9c:d7:e9:55:f6:d0:0d:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:10:EB:DF:BC:99:DF:B7:83:71:F3:EB:F5:3C:7F:2E:87:7F:F3:A6
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:02:52:ea:38:0e:21:c4:ef:13:4a:b4:a8:eb:40:76:65:58:
10:7c:b3:15:76:8e:a1:ee:db:dd:62:2a:56:7c:4f:25:4d:88:
d2:49:65:8c:1f:18:3b:91:04:12:1a:b8:81:e7:aa:5c:c3:42:
3d:cb:96:d8:e4:52:03:ab:b5:87:b0:81:29:9f:5e:85:37:21:
e0:5a:c9:17:3b:aa:bc:c8:16:58:2a:94:82:8c:7c:c2:67:6d:
86:fe:27:f3:f1:aa:80:6b:e8:3f:21:27:80:62:55:86:0f:ac:
f6:5e:52:99:c1:eb:b1:33:ce:4a:8d:72:ea:11:9a:6e:f3:1c:
8b:29:a8:6e:6d:e5:6d:63:9f:ba:10:24:b6:8c:21:f1:1f:c5:
6e:c0:29:51:f4:d1:e6:89:54:d9:6f:98:26:55:c9:b3:ef:43:
91:73:da:30:52:23:77:67:ec:aa:d9:4b:23:c8:3c:65:a8:f4:
1d:0e:c0:e6:fb:17:03:a7:c5:89:92:f9:c6:27:ed:fe:53:06:
1b:47:1e:3d:59:14:09:21:d5:05:e9:23:aa:ed:c3:46:a7:d5:
36:ba:fa:07:ef:a7:6b:ea:ca:06:5b:72:04:c1:c9:85:34:7c:
78:38:4b:13:f7:b4:14:33:0a:cf:54:7a:90:e5:c9:d4:f7:11:
37:f2:be:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:44 2025 by rpki-client