Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
File: mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json)
Hash identifier: 9qmYmx4V9d5NPl8oSETbkwxfBVvYAqdbRFvoVff4o7w=
Subject key identifier: FC:42:54:AD:9A:23:74:F1:44:F2:39:FD:F8:66:AC:9A:C8:FC:E5:C8
Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
Certificate issuer: /CN=983ea291971990dc486f93812783fadd87ade863
Certificate serial: 0198D66052C38EF49A146812E65B3E73EF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
Manifest number: 0A12
Signing time: Sat 23 Aug 2025 10:01:33 +0000
Manifest this update: Sat 23 Aug 2025 10:01:33 +0000
Manifest next update: Sun 24 Aug 2025 10:01:33 +0000
Files and hashes: 1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: AXGmarWX4YYuN2POMB/BtRspg9VV1+npoWyHGJDNn+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:52:c3:8e:f4:9a:14:68:12:e6:5b:3e:73:ef:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983ea291971990dc486f93812783fadd87ade863
Validity
Not Before: Aug 23 10:01:33 2025 GMT
Not After : Aug 24 10:01:33 2025 GMT
Subject: CN=fc4254ad9a2374f144f239fdf866ac9ac8fce5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:d3:9d:8d:9d:2a:b8:62:ec:94:b6:c2:43:
e2:48:0c:d1:37:79:15:6f:55:e7:f8:55:d8:bc:2d:
82:83:aa:0d:71:b7:00:a6:44:8c:2a:94:4b:b1:8e:
d5:13:8b:a9:47:1c:18:3d:19:3a:ae:86:4f:ea:15:
01:ea:ad:de:07:74:a6:e1:54:bd:51:03:cb:d8:0e:
3c:fe:21:2a:ce:6a:ca:25:86:f3:26:f5:2f:c3:b0:
59:0d:d5:11:33:e9:7f:ba:b6:36:29:7c:89:09:b0:
98:39:94:d0:26:22:00:55:98:3f:a0:85:20:ed:84:
44:2c:68:f8:b7:68:00:73:48:ef:da:5e:52:27:71:
df:33:ee:3e:c4:54:b3:ef:9d:cc:6f:44:1a:b7:4e:
f3:9d:2b:df:76:8d:05:40:41:76:89:a5:bc:e5:31:
a1:8c:39:32:f3:4e:d8:0b:c9:5c:35:e7:7a:3f:59:
b2:31:4c:3a:0c:d5:b6:c9:32:fc:c9:c9:91:3b:24:
26:e6:af:be:e0:d9:03:c9:95:cf:20:b4:c6:5d:8e:
0b:87:fc:40:b1:11:59:71:cf:06:00:a8:92:be:ea:
59:12:6d:89:69:4f:cb:56:f7:f1:0a:0a:ee:83:c5:
64:cb:73:6c:51:65:35:a0:09:f6:0d:37:f3:40:ce:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:42:54:AD:9A:23:74:F1:44:F2:39:FD:F8:66:AC:9A:C8:FC:E5:C8
X509v3 Authority Key Identifier:
keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7d:7a:05:79:66:c1:9a:a6:9e:55:f1:15:02:4c:e8:18:63:
28:b8:b9:3e:39:ad:5e:8b:a0:8d:8f:d9:c5:cd:4b:98:b3:9f:
2a:a9:74:15:cc:bb:8a:36:b2:cc:bb:ed:2e:6d:6f:19:63:7d:
a4:15:e0:1a:ef:bf:d4:8b:9a:bc:2a:25:4a:c1:e7:36:d4:ef:
61:47:d6:52:70:a0:a4:65:44:f9:33:57:36:94:1c:5d:50:04:
9f:fd:87:2c:31:2a:4a:dd:02:8d:0e:c9:7f:ec:6b:8e:5c:08:
46:c0:91:ad:1c:10:1e:4d:55:ba:a7:0a:72:2f:30:50:e6:57:
80:5d:4e:af:0c:96:d4:46:db:74:74:de:60:35:d5:2b:df:fe:
cf:a3:75:17:f5:f3:78:e9:36:4d:bd:7b:37:69:3c:d3:c3:0e:
a3:6c:35:bd:c1:df:9f:0e:94:4f:41:3f:71:71:ed:3a:5b:b5:
c6:e3:e0:a8:50:24:f4:84:e8:1c:80:a9:58:cd:10:e9:d9:8e:
d2:e5:88:16:58:ce:a0:ec:d6:9c:8b:79:00:35:2d:b1:f0:26:
0a:da:aa:a7:2a:f8:5b:10:94:7c:6c:db:65:42:cc:7d:b5:20:
06:07:c6:87:6c:96:57:97:29:4a:af:0e:eb:98:e1:c1:21:6b:
a4:a6:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:30 2025 by rpki-client