Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
File: rAsK5lTCnX8fDU4tNRarfe8Msp0.mft (raw, json)
Hash identifier: X00wgbyuyD1kyB1T0nKt499KPzyWSJCXu6bkzIfncEk=
Subject key identifier: 24:CA:12:A7:64:9C:DE:07:41:25:04:72:99:F1:AF:B5:AA:D4:97:5C
Authority key identifier: AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
Certificate issuer: /CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Certificate serial: 0198D6CCE8E3827C56378F2C96E7E6AB28CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
Manifest number: 0569
Signing time: Sat 23 Aug 2025 12:00:09 +0000
Manifest this update: Sat 23 Aug 2025 12:00:09 +0000
Manifest next update: Sun 24 Aug 2025 12:00:09 +0000
Files and hashes: 1: rAsK5lTCnX8fDU4tNRarfe8Msp0.crl (hash: 18eAhr66gdDedk2wnRtMbtw+vMlBYnRqSMaW6hY+AWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:e8:e3:82:7c:56:37:8f:2c:96:e7:e6:ab:28:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Validity
Not Before: Aug 23 12:00:09 2025 GMT
Not After : Aug 24 12:00:09 2025 GMT
Subject: CN=24ca12a7649cde074125047299f1afb5aad4975c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:f3:dd:48:be:3d:f0:b9:cb:28:34:54:25:
3d:0c:4d:06:12:e7:c1:41:14:a6:8a:fb:ec:f8:6a:
ab:cf:58:8d:98:c5:0e:45:85:d2:43:93:ec:dd:37:
da:ab:d4:71:1a:c4:f9:ff:1b:ca:08:18:af:80:08:
93:1d:2c:a4:e6:f0:83:c5:85:0a:d1:3a:92:7c:36:
c1:50:f0:fe:d7:db:38:a5:f0:b8:36:e4:ab:dd:b2:
51:98:54:a7:71:e6:f2:9c:ab:88:19:f1:ff:55:ef:
75:f7:7f:bb:10:47:a9:78:94:fb:13:92:d2:fc:e4:
66:d6:4d:db:86:3b:c6:ea:ea:c9:2d:f5:60:5f:aa:
ff:b7:6d:75:2c:0f:47:74:b3:38:de:e6:eb:8e:b0:
79:dd:d6:d8:7d:e8:3f:de:3b:e5:4a:09:26:9d:c6:
fc:95:67:a6:08:05:ad:56:55:d8:7a:76:df:7d:0d:
94:86:ae:64:dd:51:b7:b1:f6:24:0d:87:39:03:f8:
0c:86:2d:6d:ca:2c:e3:4c:ec:6e:74:cf:7d:8f:91:
95:24:c1:4a:60:90:aa:7b:6b:2b:cd:49:ce:6b:ad:
24:fc:21:e5:05:3a:66:35:36:34:39:ef:49:87:4f:
ab:32:bc:55:a8:fb:d4:e3:7f:7c:59:1e:d8:43:6b:
8d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CA:12:A7:64:9C:DE:07:41:25:04:72:99:F1:AF:B5:AA:D4:97:5C
X509v3 Authority Key Identifier:
keyid:AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:23:4d:10:10:26:7b:b2:e2:75:eb:d4:b6:af:9d:9c:fe:c4:
5d:8f:dc:b2:62:0b:b5:47:a2:f6:d8:f3:3f:e3:ba:26:4d:f0:
9f:68:64:fa:48:86:c5:cd:ff:cb:1b:6f:8f:25:0c:d8:05:5f:
61:ac:f7:7f:74:02:57:6d:23:86:fd:ec:fb:68:65:19:71:02:
97:87:6d:ff:01:9b:54:25:16:3a:71:af:a8:ca:01:9a:ad:6d:
f6:f0:35:c5:fe:b2:3d:2a:e9:d6:3a:b0:6e:5d:f2:e5:8f:08:
6e:e3:3a:c7:70:3c:09:88:fe:57:ab:4b:4a:21:20:45:5b:ab:
71:0f:b3:fe:53:e6:9d:4c:e7:78:f9:c3:cf:a2:fb:6a:44:7f:
43:63:54:93:8d:bd:ae:01:fd:23:91:77:05:78:b1:f6:95:e6:
b6:8b:70:49:7d:c5:c8:3b:35:45:fb:d2:86:4c:44:a2:d6:d9:
86:8c:4e:d3:79:58:a4:d7:09:bd:51:4d:3b:c0:88:5a:1d:c4:
93:70:f9:3d:5f:cd:61:66:57:96:8f:a8:60:3a:18:7c:9c:78:
99:82:4b:28:8b:86:dd:17:0c:7a:6d:4a:0e:f1:13:94:99:46:
70:7e:fa:a8:8a:dc:f0:89:e3:e0:85:d4:ce:db:3c:7e:67:ea:
14:30:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:20:02 2025 by rpki-client