Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: RTj4VLgREUMtMq3BcY9fv8JH1S/5EEyFjzXUfBVYLRU=
Subject key identifier: C2:17:D9:74:38:6E:8C:42:2E:1C:80:6E:C3:E4:DE:93:BA:D7:D9:EB
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 0198D66151EE4FC7016FA8979AD489315487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:02:38 +0000
Manifest this update: Sat 23 Aug 2025 10:02:38 +0000
Manifest next update: Sun 24 Aug 2025 10:02:38 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: w505+rhllv/jwQeY46rJbGkrzvl3qsro2NKK6tD2Q9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:51:ee:4f:c7:01:6f:a8:97:9a:d4:89:31:54:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Aug 23 10:02:38 2025 GMT
Not After : Aug 24 10:02:38 2025 GMT
Subject: CN=c217d974386e8c422e1c806ec3e4de93bad7d9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:d4:d5:68:2c:c8:43:75:cc:22:85:55:01:
4c:55:e2:10:9b:a1:1f:95:78:27:ce:36:8f:b1:b2:
1e:75:ed:99:5b:bd:df:e4:05:7d:44:c7:d9:c0:40:
62:12:f3:78:8e:01:5d:41:53:41:1d:21:e2:62:b2:
c7:26:6b:b3:c5:ba:94:13:c2:99:83:59:d5:03:01:
f0:a6:c8:d2:fa:bf:09:7c:48:46:f4:df:fd:f0:e7:
53:cd:07:d2:ca:93:47:9a:3a:c7:c7:b7:86:b8:50:
d3:d0:17:cb:5e:19:e3:01:27:cd:01:d8:8c:ae:20:
2a:0d:37:eb:cd:ed:3b:f7:7a:74:f1:d8:d0:5f:36:
6e:20:c4:ae:86:90:3e:ac:b4:b7:c1:50:78:71:4f:
26:dd:90:91:71:59:ba:34:d2:35:2e:21:fc:cf:8b:
dd:62:6f:f0:b4:2a:74:50:6c:56:bc:33:01:cb:b0:
91:56:d5:e2:b6:e4:8e:cd:80:73:ca:12:81:03:65:
be:29:60:09:9e:0d:f3:5c:e8:26:71:30:d1:d0:df:
e2:a8:0d:25:a1:d9:ba:cc:5d:38:22:db:44:ba:a4:
8a:52:52:91:45:98:0f:04:a6:40:38:5f:8c:22:65:
d7:61:2c:c4:6c:a4:46:ad:01:e1:57:aa:2b:29:65:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:17:D9:74:38:6E:8C:42:2E:1C:80:6E:C3:E4:DE:93:BA:D7:D9:EB
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:08:5e:5e:4f:ee:20:99:b7:5f:6c:d8:20:a1:4d:85:da:4a:
bf:47:45:ed:9a:6e:1a:e2:15:62:ba:c9:d9:62:a8:ff:2f:35:
c5:fb:73:8f:23:53:f1:17:6f:2f:e9:73:fb:dd:53:ee:29:23:
39:64:c6:e4:43:ab:b8:b6:60:e0:6d:12:84:0e:76:e3:7b:fa:
37:1b:28:e7:60:1b:be:28:4d:40:30:0d:56:6f:b4:02:f6:30:
39:85:6d:3a:3a:78:c9:5c:bd:61:21:0c:20:00:65:6a:0c:ae:
8b:d4:b3:8b:ef:ef:0d:36:07:dc:47:2e:4f:dd:84:15:ad:42:
52:59:fd:49:4b:8a:0a:83:93:b6:fc:a0:49:0f:a9:14:54:8b:
10:25:98:eb:52:c2:95:d8:51:59:00:10:72:4e:50:97:ba:4f:
c7:7f:46:c9:cc:22:01:84:ca:48:cf:30:9e:13:55:f0:f7:2b:
21:f2:5e:94:e2:f5:e4:12:d4:ad:8c:84:dd:90:c5:f9:66:ce:
1a:02:19:c6:55:6b:cf:af:18:f9:e9:38:6a:7b:23:c3:ed:d1:
8e:69:fd:1a:05:7d:ff:6c:a8:7e:13:a9:7a:a9:b8:38:e9:32:
6f:15:97:45:8f:59:84:a0:d3:49:09:9d:d0:c7:b5:c0:38:99:
ea:ad:e9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:59 2025 by rpki-client