Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier: GRnEij2h2ikXYmMW68oHR8MJu7ieXTf20C9cLVL+RL0=
Subject key identifier: 70:00:45:4A:B8:23:08:DC:43:FA:87:C5:38:2E:B8:4A:B4:BB:97:55
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer: /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial: 0198D660875B672F93EBA316178C814F2FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:46 +0000
Manifest this update: Sat 23 Aug 2025 10:01:46 +0000
Manifest next update: Sun 24 Aug 2025 10:01:46 +0000
Files and hashes: 1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: aaiiImSF0NCoy+ejHI571zqKRks6zBE/CdJ1I2fjtLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:87:5b:67:2f:93:eb:a3:16:17:8c:81:4f:2f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Validity
Not Before: Aug 23 10:01:46 2025 GMT
Not After : Aug 24 10:01:46 2025 GMT
Subject: CN=7000454ab82308dc43fa87c5382eb84ab4bb9755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:87:c8:7e:88:3b:71:8c:7b:15:7b:fb:e8:
de:3f:12:9c:b6:cb:57:db:28:dc:5d:86:ef:9e:c9:
07:df:35:a5:59:89:2b:f1:66:6f:21:14:d5:24:84:
c1:02:a9:6a:27:68:b4:f2:8f:c5:88:1a:84:eb:a2:
be:c4:18:b0:bc:35:4d:b6:6e:a5:8d:34:a2:5f:34:
64:2e:7f:6b:66:77:3e:c7:d5:53:09:ed:31:84:19:
76:fe:89:c1:e1:40:18:df:c8:95:51:4c:18:4c:95:
c7:52:d3:62:dc:cb:e0:15:b9:b4:a4:50:e8:ae:ef:
49:ff:78:95:c8:3d:41:79:20:3c:4e:0d:85:17:97:
d7:c1:7a:a1:c2:e6:09:c5:d4:4a:6c:3a:0d:c3:d6:
ca:6d:e5:7b:ef:31:d9:e6:fa:43:9d:66:da:cd:a9:
da:f2:dc:0f:04:b8:55:d1:6e:c1:fb:a6:f9:7c:97:
7a:0b:9a:cf:2e:90:83:e4:d9:37:2d:75:fa:73:72:
8a:93:35:a5:21:a1:a5:19:df:68:c2:20:b2:da:b7:
02:5a:bf:9f:9f:f7:3c:08:6c:1a:18:a6:a8:b8:0f:
4c:c1:62:c9:21:d6:15:50:56:39:ba:20:73:ff:0e:
d0:5e:a6:03:24:98:fb:07:86:9d:a1:3d:46:15:30:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:00:45:4A:B8:23:08:DC:43:FA:87:C5:38:2E:B8:4A:B4:BB:97:55
X509v3 Authority Key Identifier:
keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:94:b9:4e:a3:c5:93:fe:bd:e1:0c:ad:08:4b:4f:91:26:d5:
53:da:c2:28:76:f6:5a:19:14:f2:dd:3c:2c:bf:bf:72:06:81:
01:4f:fd:22:27:31:7d:51:82:7d:c9:66:9a:d1:c6:46:0f:57:
c5:b1:9c:33:70:a3:86:09:60:cf:82:a0:06:a3:4d:e5:12:4b:
41:05:dc:45:b0:e5:5b:54:a7:a4:e2:c2:7f:80:08:ff:1e:c9:
cf:45:ee:dc:74:23:03:fb:a7:43:76:d0:b5:7a:14:f3:49:3b:
8a:90:b7:73:64:8d:b0:07:0a:46:4d:d8:c5:f1:27:86:b3:dd:
8a:74:67:02:8b:3d:85:49:79:75:1b:4b:06:f4:ec:60:a9:f3:
5b:2c:a4:2e:50:a4:bc:96:4f:06:db:10:68:6a:95:be:03:22:
96:41:c4:0e:04:fb:45:03:b3:26:96:5d:07:f6:d0:b2:67:5c:
d9:7e:60:ad:40:42:d4:8d:a3:66:ca:91:1b:ee:57:ca:f1:78:
d9:9d:ed:ef:1b:c7:dd:39:5e:ca:c6:01:88:d9:c5:54:c6:27:
26:fa:fd:ed:92:44:9a:0d:e0:24:cb:55:8b:a1:c0:d0:a4:22:
41:d7:70:a3:b9:5b:27:59:42:99:d0:03:7c:26:c6:c5:c3:63:
b7:f1:e7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:55 2025 by rpki-client