Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
File: _KXnwS9jZpo_aAySaEpD-ohO0Uw.mft (raw, json)
Hash identifier: 01p2Jp/BTBSoMfD4GHgCnkeVyi7H+IOaQekMYQ0YeqY=
Subject key identifier: B4:99:39:09:CA:EA:4A:FA:DA:65:EB:0B:DC:BA:29:EF:CE:27:A2:A9
Authority key identifier: FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
Certificate issuer: /CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Certificate serial: 0198D6CDF76AEBFAEB21B28C6897BD4036F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
Manifest number: 154C
Signing time: Sat 23 Aug 2025 12:01:19 +0000
Manifest this update: Sat 23 Aug 2025 12:01:19 +0000
Manifest next update: Sun 24 Aug 2025 12:01:19 +0000
Files and hashes: 1: _KXnwS9jZpo_aAySaEpD-ohO0Uw.crl (hash: xsdjHWacNoMMHAsLdWsRAkJzIAmyY8Ea1FmkezG4/yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:f7:6a:eb:fa:eb:21:b2:8c:68:97:bd:40:36:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Validity
Not Before: Aug 23 12:01:19 2025 GMT
Not After : Aug 24 12:01:19 2025 GMT
Subject: CN=b4993909caea4afada65eb0bdcba29efce27a2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:d3:84:02:ce:1b:79:9b:e9:76:04:00:4a:
04:7f:74:2a:4b:64:e3:99:05:5d:a0:b1:0c:8c:25:
c9:30:8d:e3:dc:e3:90:74:f6:8a:1d:d5:6c:27:b6:
f4:13:17:3c:f1:d5:fa:83:d9:2a:eb:0b:93:cb:1d:
04:29:50:39:6b:de:df:fc:08:f9:8c:4c:e1:a6:75:
7a:73:b4:74:ef:71:35:9b:ac:03:d1:91:52:9f:4c:
11:fc:08:df:0f:73:59:45:a9:aa:69:51:0c:6a:95:
d8:e5:4c:bf:a4:4d:0a:38:ed:01:47:d5:29:a4:10:
7c:5f:80:29:ed:eb:bb:b9:ed:ac:5f:88:5d:fd:2c:
16:7a:b3:67:83:07:3c:64:5e:59:a5:9c:6c:55:b0:
20:6b:d2:60:f3:ff:6f:18:fd:66:ad:3a:4f:29:40:
f6:fb:f5:39:85:36:53:b0:2c:e0:7e:d8:6c:7a:58:
e4:c7:c2:50:d4:b6:6f:73:8a:e3:8c:cf:9c:82:a7:
fb:61:66:3d:b3:a8:18:17:db:60:22:cb:19:81:1a:
c2:d6:5f:33:38:d9:a3:ea:f8:95:19:61:e6:ac:f8:
7b:64:48:06:e8:67:3c:34:94:60:d6:77:77:24:40:
ad:7a:a3:34:35:c7:6a:bc:43:42:3c:cb:fd:81:b2:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:99:39:09:CA:EA:4A:FA:DA:65:EB:0B:DC:BA:29:EF:CE:27:A2:A9
X509v3 Authority Key Identifier:
keyid:FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:57:98:fc:1b:0d:3d:ea:f6:f7:d9:0f:4d:08:b7:30:f5:12:
c6:cf:4d:e1:58:91:96:d2:c0:4b:87:c7:1a:7a:43:f3:80:84:
ab:2a:f3:45:72:b5:85:69:ec:f1:64:0b:3a:56:9b:8f:59:bc:
b6:74:ad:73:72:d7:51:67:8a:30:2a:6f:4a:d4:80:14:7a:c7:
e3:7d:9b:75:3d:12:79:39:6f:e1:9b:75:32:ce:8e:36:92:24:
a0:3d:d7:7d:75:50:35:f4:cd:30:78:ed:d8:85:8c:8a:5e:7b:
2b:78:de:95:b1:f5:e0:30:b3:12:a5:f1:16:f0:21:10:31:44:
54:b0:98:aa:c0:9a:92:1a:5e:ec:ad:80:b2:bc:6c:be:7e:4b:
a1:23:df:20:24:54:99:32:ad:79:3f:de:31:fb:1e:25:28:91:
47:47:2b:09:ad:96:f1:32:44:21:25:69:eb:10:c4:38:a7:48:
39:de:6a:52:84:3a:cc:f5:e2:13:3b:6f:3c:d4:dc:3d:f1:0c:
93:a4:37:0b:5f:98:95:ab:68:7b:bb:82:d6:13:0e:f4:36:5a:
b5:22:2e:2c:13:a5:1e:94:42:26:03:4c:22:53:12:45:95:1c:
ef:d4:2c:1b:98:21:8f:81:86:d4:ef:29:c7:1a:96:99:bf:03:
3d:76:30:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:45 2025 by rpki-client