Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier: TPjj369DqFibfaLCuFiAFsNFt7W/Giuq+/YwdDYP0aI=
Subject key identifier: A2:8B:8F:E6:26:3A:BB:02:EC:3F:A5:DC:B2:A0:B6:11:E7:3E:B7:55
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial: 0198D51637F062FE675300F7A8F1D6618F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 04:00:59 +0000
Manifest this update: Sat 23 Aug 2025 04:00:59 +0000
Manifest next update: Sun 24 Aug 2025 04:00:59 +0000
Files and hashes: 1: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: OA9osSRACrPg6xezLnTlx79A2TNfeiPYLVkVAeIW2RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:37:f0:62:fe:67:53:00:f7:a8:f1:d6:61:8f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
Validity
Not Before: Aug 23 04:00:59 2025 GMT
Not After : Aug 24 04:00:59 2025 GMT
Subject: CN=a28b8fe6263abb02ec3fa5dcb2a0b611e73eb755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:24:b5:7d:fe:96:38:83:89:cc:f6:fc:94:
66:9a:68:0c:98:07:6c:15:e0:7d:bd:5d:15:b1:af:
9a:56:d2:f7:c1:ad:4f:17:7f:aa:5f:71:0f:be:90:
90:55:53:56:18:6f:71:06:93:87:4e:81:2b:bb:ce:
ae:a4:b3:73:32:b9:5f:c7:b5:b7:92:3f:22:27:e9:
48:c9:64:e2:9a:58:72:91:c9:01:22:0f:df:60:84:
54:2b:ee:d3:ce:0e:86:ce:df:f8:e8:e9:3e:49:44:
a9:5a:d1:40:86:a0:6d:ef:71:f9:8e:b6:9f:c3:50:
a5:0f:fe:f5:51:2a:61:c1:61:39:39:e9:33:ac:9a:
d1:bf:ad:85:42:eb:6f:19:ca:bb:5e:d0:35:20:6c:
10:53:af:a7:1e:18:91:fb:3b:99:58:23:ec:26:58:
5c:80:06:00:68:95:54:89:3b:60:8c:f2:81:3b:67:
bd:3c:8e:56:a8:ef:26:8a:b0:5d:fd:b6:1c:bf:b9:
a4:22:96:99:41:f1:c7:74:d7:d6:12:62:37:24:81:
16:93:07:79:2e:72:e6:20:a2:34:56:be:78:55:18:
63:ba:cb:f2:71:a5:6a:a5:fc:72:b4:73:3f:c4:98:
c3:d5:f2:35:aa:c4:c1:f8:4d:b7:87:f4:29:33:66:
c7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8B:8F:E6:26:3A:BB:02:EC:3F:A5:DC:B2:A0:B6:11:E7:3E:B7:55
X509v3 Authority Key Identifier:
keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8d:fa:08:36:2b:98:38:33:ea:a6:ef:9b:a1:39:45:19:26:
da:b8:c0:05:25:41:5d:95:7e:92:8b:ed:54:e6:96:9d:87:18:
36:e2:a7:65:b7:2a:85:40:39:9f:07:66:a5:95:44:78:6a:f8:
06:64:08:ee:08:93:3b:06:6d:e1:e2:44:16:dc:03:87:5b:d3:
76:73:d7:f2:ab:da:3c:04:e7:23:7c:d8:2c:f0:ac:8d:10:86:
28:53:b5:7c:dd:6a:19:09:02:fa:d9:f5:c4:0a:8a:19:5c:5b:
b0:3e:f4:1f:1a:43:b2:01:b2:ea:73:a5:95:fd:4f:e6:22:6b:
80:6e:d6:46:60:7d:83:86:e9:ec:1e:d0:09:d0:7e:ee:3c:fd:
c2:ac:cf:70:56:f4:f4:96:51:1d:74:d0:90:de:41:8d:fc:8e:
52:c0:e3:61:80:4f:06:00:39:7f:7f:20:1d:28:67:ea:76:3d:
e4:15:b4:64:eb:7c:95:95:8a:71:c9:df:84:e7:1c:87:24:d3:
be:38:2e:7f:25:7f:e5:6d:3a:a0:0f:65:3e:82:b7:e0:12:9e:
76:b3:2d:f6:d4:82:dd:35:d1:4e:f0:0e:99:72:d0:b9:1c:ef:
ed:08:fb:9b:40:da:9f:b2:49:b1:53:0e:24:11:50:03:9d:bf:
6b:b6:03:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:00 2025 by rpki-client