Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
File: rAsK5lTCnX8fDU4tNRarfe8Msp0.mft (raw, json)
Hash identifier: tpvpLoxApZFEX+AlGBw6iGU9gxnB85f9m1xLtZmnuGQ=
Subject key identifier: 11:43:15:B1:4C:35:44:A0:04:00:AF:8B:43:DD:EE:38:83:AB:B3:D8
Authority key identifier: AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
Certificate issuer: /CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Certificate serial: 0199FA6AAF3F571B3BDF746013324381121A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
Manifest number: 0600
Signing time: Sun 19 Oct 2025 03:01:59 +0000
Manifest this update: Sun 19 Oct 2025 03:01:59 +0000
Manifest next update: Mon 20 Oct 2025 03:01:59 +0000
Files and hashes: 1: rAsK5lTCnX8fDU4tNRarfe8Msp0.crl (hash: 2vijEEyutt6mjIEjQV0oJdGBnH8GMYQQaMdV3X7sypE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:af:3f:57:1b:3b:df:74:60:13:32:43:81:12:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Validity
Not Before: Oct 19 03:01:59 2025 GMT
Not After : Oct 20 03:01:59 2025 GMT
Subject: CN=114315b14c3544a00400af8b43ddee3883abb3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7b:37:d3:8a:98:bb:ca:36:f8:39:50:44:18:
3c:a5:f8:2e:69:a4:fa:ab:35:ba:d2:6f:a2:41:46:
9b:10:01:8c:cf:4c:c0:81:21:5e:4c:77:33:fc:e0:
8c:d2:d0:4b:7d:db:1d:c1:95:c3:00:1e:2d:bc:30:
5e:25:b8:60:ff:bd:27:85:d2:a8:56:e7:57:e8:81:
c9:4d:b3:16:fb:2b:2f:ce:f4:9b:01:6b:3c:78:6c:
7b:cf:6b:3e:e3:44:d2:7f:40:fc:92:74:2d:91:7a:
d9:92:cd:20:d9:af:62:7f:bd:c3:93:7a:2a:5e:f1:
44:df:f6:0d:ba:2a:5f:9c:58:26:c8:5d:67:70:e8:
20:47:68:4f:6d:75:b3:cb:3a:86:a4:9c:c5:9d:5b:
9d:76:85:63:b2:23:e0:26:b6:1c:83:fa:15:8d:cd:
ff:4d:73:44:34:24:08:6d:82:e1:83:d3:cd:8d:b5:
7e:0b:3b:ae:0f:11:72:e4:b3:72:5d:2a:c1:81:3d:
c6:07:c3:aa:68:00:67:83:3a:e4:18:c6:7b:aa:4a:
aa:cc:75:ec:35:5c:73:31:a4:71:d8:7c:fa:09:a1:
2d:d6:aa:8b:60:34:fb:b7:46:89:55:e1:16:74:d6:
1e:66:c9:90:1b:8f:a1:7f:b0:3c:71:34:ca:45:a2:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:43:15:B1:4C:35:44:A0:04:00:AF:8B:43:DD:EE:38:83:AB:B3:D8
X509v3 Authority Key Identifier:
keyid:AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ce:12:cf:98:ed:bf:b7:65:18:5b:af:2d:2b:0c:fd:98:a0:
e8:41:ab:ff:17:f0:b8:f5:fe:0b:12:f7:5c:98:27:f0:17:6f:
24:ad:cb:7c:b6:b4:42:58:ab:41:5e:7a:10:97:50:d5:03:47:
97:41:52:df:1e:f0:e3:66:ef:90:ee:ad:24:b6:8e:c8:5c:7e:
36:f8:9b:5d:fe:e9:aa:5b:87:6f:2d:37:1d:76:dc:c0:4c:bc:
20:f6:e0:5e:2e:21:21:b6:e1:5a:40:a4:bb:4c:67:d4:ca:4b:
42:f2:f8:c0:f0:a2:04:2d:a7:e3:9d:62:b4:39:a5:21:ed:ab:
80:d2:ee:fd:9a:42:81:57:b0:74:18:6b:3a:6b:09:09:6b:49:
10:2a:93:7b:9c:93:9e:14:fb:2c:e6:7a:0b:f9:d1:11:2d:57:
dc:46:34:33:8c:f3:a4:04:df:1e:34:1e:f5:67:0a:3b:9c:aa:
a9:f5:47:ea:97:40:3e:f2:57:95:87:e5:a1:a7:6f:df:be:b0:
5b:17:12:04:dd:64:08:22:a6:e2:97:8e:38:87:6f:35:d2:f2:
38:dc:7a:84:08:b1:40:93:f1:fd:95:07:27:e5:37:f1:62:a2:
d1:cf:21:6e:ee:bf:6d:7f:ed:74:a2:cc:8e:25:d5:1f:46:86:
c9:84:aa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:09 2025 by rpki-client