Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: P6+1I+BHiMiN6KqxjTBQyK+is9Dzn/agXNVDr30hPV8=
Subject key identifier: 2C:79:8C:85:91:60:CE:DC:6A:9E:D3:90:97:9F:C3:EA:CD:ED:65:67
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 0198D54DE636ED69FEBD1368AAC9FA492A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 1658
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: rsF/Fn5OnZqm0aFerCTiA7RQBVhkUlyr/qREsOWsJ/E=)
2: qGuTXxX3KPPGE7gornZUmtCgXus.roa (hash: hoxbUVU+eahUxnAmZd8qLyauIUnjncf8aJqcwbWkeXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e6:36:ed:69:fe:bd:13:68:aa:c9:fa:49:2a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=2c798c859160cedc6a9ed390979fc3eacded6567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0d:56:68:3f:80:c2:fc:06:cb:6e:25:92:47:
f0:02:81:c0:38:40:82:1d:6b:26:8f:15:2e:16:8d:
25:f3:ef:cc:8a:c2:5f:85:6f:96:ac:ae:be:77:9e:
16:d2:79:b2:0b:13:e6:ac:95:11:25:d1:e3:db:00:
cb:ee:4c:d9:83:be:a4:db:71:91:14:e0:aa:23:73:
86:ee:5c:4c:13:44:7b:b4:15:32:20:f6:d5:41:8c:
0c:e8:ca:37:ae:5a:bd:0c:5e:f6:e9:b9:62:88:16:
e6:c4:62:6a:11:29:6b:da:27:c1:55:53:1a:0c:01:
a9:5c:93:c6:75:d8:f3:3c:81:a4:21:ff:44:2a:37:
0f:51:d5:31:6f:77:82:05:49:f3:2d:24:06:10:26:
ba:6e:95:4e:c2:5d:89:34:c4:af:3f:3f:52:e9:c5:
10:17:5f:65:6d:4c:54:43:f3:77:de:df:b4:d3:5d:
85:b3:dd:cd:cf:1f:93:3e:54:f0:76:cf:ae:55:c1:
ff:c9:15:4d:47:88:d0:c2:c7:60:f9:44:8c:f4:82:
d4:9f:7c:60:f3:92:48:71:58:fb:27:10:8e:98:fc:
a4:50:f3:56:c4:0b:6b:1a:2c:87:36:dc:d1:9d:4e:
99:ee:bd:39:e8:df:cf:73:68:71:ae:8e:d0:e5:65:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:79:8C:85:91:60:CE:DC:6A:9E:D3:90:97:9F:C3:EA:CD:ED:65:67
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:25:74:fa:26:64:56:d9:32:8d:a0:9f:e0:b3:05:7f:1b:ee:
e3:01:4f:78:e0:92:2b:a4:aa:ac:15:06:ac:a1:a8:e3:3f:1b:
64:3b:d6:64:e9:12:65:07:71:ea:48:47:57:24:2a:33:63:4b:
e4:a6:3c:4d:a9:fe:ca:5e:f7:1f:b0:94:07:96:bc:9d:d3:6b:
2d:fc:e2:a1:98:08:c1:12:9a:79:21:1c:c2:67:c3:1f:5b:39:
5a:39:9a:73:f4:eb:10:b7:b7:2a:45:1a:90:3e:b0:92:cf:dc:
cc:af:c6:ca:59:1b:b7:7a:0f:a4:68:6a:0b:a8:e9:47:3c:6a:
07:a7:ef:51:b0:3a:0a:9d:07:73:ef:2c:ab:20:c9:f8:21:18:
88:46:19:11:0f:36:a0:45:d7:1d:22:f2:24:9f:02:ce:db:6f:
d2:3f:94:1d:7d:d7:0f:26:37:a5:92:99:7a:dc:1e:72:0f:5f:
06:fa:64:c8:01:2f:46:18:47:51:52:ea:b4:f0:28:a7:58:60:
82:45:0d:ae:3a:12:2b:13:46:bc:ae:5b:ea:ec:96:24:b8:ac:
d2:22:a8:63:43:c1:5e:fe:03:a7:79:31:75:13:ed:f8:3b:57:
09:6b:86:ed:2f:fb:f9:84:1c:0f:d7:47:7b:53:8e:8a:07:c6:
b7:bd:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:59 2025 by rpki-client