Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
File: _tPwXKP9-ef5nGXMagpnJPWTGnA.mft (raw, json)
Hash identifier: mwRJmFC1JKZhwCgHE5y401pUm1TKJcBrPCqpVeoP2yE=
Subject key identifier: B6:67:DB:DF:46:6B:F9:37:63:1A:10:CF:E3:BC:FC:3E:E3:7F:53:B8
Authority key identifier: FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
Certificate issuer: /CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Certificate serial: 0198D6612D582919DD61B64789D1E50D07ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: _tPwXKP9-ef5nGXMagpnJPWTGnA.crl (hash: PKzdNlxPXsoUz91OAU1JJ+6XM2+MtHEV4gA/JYP4aI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2d:58:29:19:dd:61:b6:47:89:d1:e5:0d:07:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=b667dbdf466bf937631a10cfe3bcfc3ee37f53b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ed:40:3c:69:1d:ae:19:d0:d0:54:c3:c8:5c:
af:64:e5:dd:d1:c0:89:2b:bf:fd:25:e7:c4:f0:b7:
5e:6c:9f:5a:93:8d:44:8d:c3:a4:04:9f:18:60:9c:
da:de:fe:1b:ee:94:0a:48:41:93:33:20:60:7c:9d:
e9:4f:f0:60:4b:cb:3f:fb:ac:1b:bc:88:4a:ec:26:
8e:2e:6e:80:89:b0:4d:53:1a:e3:14:03:1e:61:35:
69:0b:31:45:38:dd:7a:1f:b5:09:c0:18:60:d4:09:
cb:2c:d3:8a:db:9e:05:56:24:9d:e7:e3:43:36:b7:
c2:14:f4:2f:a6:d2:fa:64:07:0b:47:17:52:ca:c4:
3f:5a:65:b0:64:ed:26:ff:bc:84:d2:1a:d1:4c:53:
ae:0f:f1:ab:21:6e:c9:60:eb:08:0b:9a:ef:23:58:
01:8d:11:06:fc:13:69:07:8d:ed:62:b4:84:c1:ad:
a3:a6:31:da:17:9c:0a:12:93:e3:6d:04:39:ef:db:
27:0b:b5:03:97:3c:df:dd:89:15:44:dd:b8:0e:c4:
18:34:46:a2:3e:f7:4d:df:fa:74:0e:f1:44:75:90:
b0:a1:38:4f:28:61:d7:d3:d2:c2:28:00:9e:63:97:
3b:a2:a8:aa:c6:6d:36:ab:a5:57:64:fa:29:a7:7b:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:67:DB:DF:46:6B:F9:37:63:1A:10:CF:E3:BC:FC:3E:E3:7F:53:B8
X509v3 Authority Key Identifier:
keyid:FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:40:51:cd:da:fc:cb:e4:d8:22:be:b2:51:d8:6f:f1:53:06:
b9:13:67:4a:48:68:27:37:4f:87:b2:65:a7:47:66:b9:4e:73:
e3:f9:3e:57:99:68:f4:d4:bc:37:c6:97:d4:59:c0:61:e9:97:
f2:2b:1d:1e:94:6a:5a:75:ee:bc:87:02:c5:0c:ee:00:e3:f6:
6c:83:69:42:d2:c3:bf:b4:d6:b3:d4:5b:34:02:35:44:f1:8a:
43:e9:82:2a:fa:b1:53:72:ac:36:86:9f:9a:bb:4f:c0:38:7c:
05:d5:e2:e2:07:77:8d:ac:73:8b:74:19:95:62:9b:88:69:90:
8d:e7:ab:05:4f:b1:36:11:aa:90:55:39:48:5b:ab:db:0d:fa:
d6:1c:c6:55:1a:75:24:ea:8f:fa:45:74:98:c9:b8:87:ed:79:
30:71:19:f6:23:37:32:32:e1:8a:05:fa:c2:db:d3:1a:ff:78:
3b:09:90:9c:1f:7f:92:9a:b0:2b:0e:85:c8:50:29:d0:5a:10:
46:86:31:81:da:f3:41:9c:dc:b5:a0:93:da:a8:35:5f:19:71:
d0:46:74:1f:b0:af:09:90:8d:27:95:23:cf:96:5b:7a:fd:df:
10:a5:3a:77:5a:0c:65:fe:5a:14:68:2f:bc:f5:b3:04:44:01:
43:be:00:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:56 2025 by rpki-client