Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
File: _s7aKggEQpcq6nJV-LM6dg7LMcs.mft (raw, json)
Hash identifier: X0NYuuCwFM14Ogq4LfXPhERm4VckChGM5pkixtsvyk4=
Subject key identifier: F4:FF:A3:66:E7:4C:D8:C8:F0:71:3B:D2:52:DF:E6:CB:6B:44:C6:21
Authority key identifier: FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB
Certificate issuer: /CN=feceda2a080442972aea7255f8b33a760ecb31cb
Certificate serial: 0198D47310958061861C793163EFBB959F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
Manifest number: 0C52
Signing time: Sat 23 Aug 2025 01:02:47 +0000
Manifest this update: Sat 23 Aug 2025 01:02:47 +0000
Manifest next update: Sun 24 Aug 2025 01:02:47 +0000
Files and hashes: 1: _s7aKggEQpcq6nJV-LM6dg7LMcs.crl (hash: Mpy0/fLJr46uBPfqOW1sY8HO69JPclxmPMVNBEwKCTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:10:95:80:61:86:1c:79:31:63:ef:bb:95:9f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feceda2a080442972aea7255f8b33a760ecb31cb
Validity
Not Before: Aug 23 01:02:47 2025 GMT
Not After : Aug 24 01:02:47 2025 GMT
Subject: CN=f4ffa366e74cd8c8f0713bd252dfe6cb6b44c621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:8c:65:54:cf:f1:f7:3e:0b:27:03:3b:d9:
63:bb:b3:a8:2f:55:d5:34:df:37:c3:b7:79:ab:86:
c8:64:a2:0f:34:e8:66:76:9c:45:d3:64:fa:9d:8e:
5c:3c:35:9e:8f:83:99:5a:a3:9e:a6:28:70:7c:7b:
9c:36:a2:16:af:97:90:90:41:9e:50:eb:dc:33:0b:
ec:9a:b9:ea:70:25:28:6c:90:74:f4:b8:95:07:82:
6e:fa:5d:ad:2b:70:b0:31:da:6c:ba:18:d9:c6:6d:
01:59:93:81:d1:1a:5b:7f:58:f7:69:48:4c:38:9b:
71:5b:99:e4:97:8b:31:60:f0:a4:84:59:3c:46:87:
bb:bb:fa:62:fd:9a:ff:9d:a2:09:d4:9d:fd:eb:75:
82:e1:81:bd:ce:04:14:72:ec:3f:9c:52:3e:c7:75:
df:08:75:d0:72:ff:96:a4:52:d4:c1:9a:b8:17:65:
fb:01:d3:b1:0d:fa:9e:b6:be:e4:20:4b:14:1a:64:
99:e6:0c:80:de:02:b2:7a:6a:c3:63:24:9b:3b:0f:
0c:66:bc:b6:13:28:a8:dd:7c:e4:d9:a3:6a:20:b8:
6a:e7:8f:98:70:c2:5d:35:b2:40:ad:e6:c4:a2:4e:
f2:b8:6d:f6:51:dc:6c:b8:35:34:38:ea:c5:96:37:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FF:A3:66:E7:4C:D8:C8:F0:71:3B:D2:52:DF:E6:CB:6B:44:C6:21
X509v3 Authority Key Identifier:
keyid:FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:19:e0:3e:ad:1d:7a:70:aa:84:1b:05:2b:80:a5:d1:f2:ff:
6b:a8:32:5f:31:c3:48:6c:e7:99:1b:ae:d7:a3:af:6a:d1:05:
eb:54:d3:dd:db:4a:2b:01:bb:1c:f9:ee:2e:c5:e7:0e:27:f9:
eb:ca:08:e7:2f:8d:a3:1e:13:ff:5a:72:11:ce:09:f1:88:0c:
da:48:3c:c4:78:08:ae:4a:1f:b4:28:d1:d4:a8:78:b4:2f:a5:
78:69:92:ae:4a:7f:69:3e:4b:7f:91:9b:b4:82:83:ba:56:48:
7d:61:b5:6a:c5:a3:0e:47:32:38:b5:51:62:f8:a6:df:5a:5d:
24:6f:b3:9a:94:95:c6:f2:69:96:b7:d5:a6:11:9f:5d:39:38:
19:5d:67:87:b5:99:f1:f9:56:d7:d4:10:9e:ed:fd:d9:07:ea:
4d:5d:6b:75:f6:c6:d7:f3:17:fc:56:a7:2a:c5:58:88:23:a1:
ca:44:69:ea:e9:5c:dd:66:03:77:11:00:70:a8:84:fb:da:cd:
61:51:1a:27:3c:ef:4b:47:ce:cf:6b:af:b7:d3:65:3b:7e:d5:
90:29:58:5e:72:3f:b4:85:bd:c1:0b:7d:3e:7a:04:4a:46:22:
04:c3:8c:d2:8a:8d:d0:36:7f:92:55:78:3e:6f:a4:a6:ee:45:
78:e7:33:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:10 2025 by rpki-client