Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
File: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft (raw, json)
Hash identifier: AYDb9ebF5y2vh4/pGkrOl+vTCxOyr6qzCKzCNa5lfJs=
Subject key identifier: DA:91:E4:33:B4:E1:7F:35:23:C6:13:60:D0:08:86:8D:3A:C8:43:9C
Authority key identifier: D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
Certificate issuer: /CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Certificate serial: 0198D6CD212BB44F41DB6BB44CE5D0C5E4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
Manifest number: 0362
Signing time: Sat 23 Aug 2025 12:00:24 +0000
Manifest this update: Sat 23 Aug 2025 12:00:24 +0000
Manifest next update: Sun 24 Aug 2025 12:00:24 +0000
Files and hashes: 1: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl (hash: GzWYcM/RK03QLkw8GLtRb6TZu8MsEKtwJxqFPvbLbfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:21:2b:b4:4f:41:db:6b:b4:4c:e5:d0:c5:e4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Validity
Not Before: Aug 23 12:00:24 2025 GMT
Not After : Aug 24 12:00:24 2025 GMT
Subject: CN=da91e433b4e17f3523c61360d008868d3ac8439c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:ec:4d:54:9c:60:90:5f:fe:55:ff:d7:00:
4b:82:a4:9d:e8:b7:60:85:27:24:a8:17:a6:ec:8c:
ce:76:e6:de:2d:d5:73:fd:5b:d3:a5:56:75:18:f4:
e8:c0:9f:31:a3:81:c9:49:45:f8:ef:9f:6c:bb:1f:
03:fa:01:85:19:a1:fe:bc:f7:2d:32:08:8a:42:cf:
0b:d3:b3:9f:03:c1:c3:db:bf:00:95:96:e6:d8:01:
4e:b5:f8:f5:02:07:0e:94:1e:b3:a8:6c:dc:0f:64:
fc:3b:3f:9d:37:87:61:fc:e8:01:10:ff:58:08:cc:
71:a5:a6:4d:40:e9:e2:03:a1:41:86:e0:57:d8:46:
a7:8b:87:df:81:7c:da:09:23:2b:a5:d9:b0:22:58:
1f:cf:b2:8f:90:7e:e3:6d:e7:e3:fc:b7:db:ec:25:
f6:72:da:bc:f6:9c:87:1d:76:08:01:d2:63:bf:a2:
9d:a2:28:74:16:31:7f:33:d4:d9:d6:12:6b:db:57:
4a:76:5c:bf:4d:c7:81:a6:0e:a6:24:82:2a:26:cf:
50:e2:a2:c1:6e:d7:db:4f:31:74:56:40:34:aa:ba:
1e:62:6f:a2:44:14:99:0a:5d:b9:32:4f:2d:fd:50:
c7:b7:f8:3c:ea:b4:86:91:38:55:c2:d2:17:1a:1b:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:91:E4:33:B4:E1:7F:35:23:C6:13:60:D0:08:86:8D:3A:C8:43:9C
X509v3 Authority Key Identifier:
keyid:D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c1:bf:61:02:41:c1:a1:fd:f2:18:f5:cc:da:50:a0:ef:ba:
bf:11:9c:da:db:21:3c:19:76:2c:62:cb:0f:dd:6b:fa:c7:af:
7b:df:ff:55:72:6b:f3:c4:83:e6:02:3e:4f:86:3d:5b:45:2a:
c6:6c:41:44:b2:9a:d8:f6:f6:53:63:e6:da:a0:d5:ce:af:79:
ab:56:f8:b5:59:30:a7:e4:96:be:6d:47:f1:19:9a:4e:1b:9f:
ce:b8:d5:ea:ba:4a:6e:17:8e:3e:85:71:05:9c:71:1f:c6:7c:
a6:80:24:8c:15:bb:11:9f:96:0e:d7:f5:f4:10:b2:e0:b8:f6:
b8:f8:91:29:6d:c9:82:c7:96:40:ab:33:e8:71:88:2e:69:27:
40:e8:9b:3b:57:c5:c4:e1:18:39:4c:26:19:4c:7d:13:4f:c7:
46:22:e9:96:f8:58:cd:46:b5:5e:fa:88:37:61:15:79:55:26:
97:9e:bb:cf:29:64:42:ac:0d:1c:1f:a0:18:76:45:45:a9:63:
b3:40:ac:45:39:ed:4f:bb:c4:0a:ca:8a:c1:94:8f:cd:a5:6d:
28:46:8e:4a:90:79:f3:36:89:60:6a:8f:d7:f3:cb:d6:58:db:
c6:16:d8:19:6b:99:0e:8b:18:86:60:90:64:29:fb:b1:04:85:
a1:b6:c4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:05:46 2025 by rpki-client