Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
File: RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft (raw, json)
Hash identifier: uI01uQg0jdZOP+HhFI5RKwbBnUVSeFmY+y4qcnaiKBw=
Subject key identifier: A5:A1:C7:82:8A:BA:A9:40:04:12:53:D9:BE:56:27:2D:D5:7E:DC:6A
Authority key identifier: 45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
Certificate issuer: /CN=45981ce71942d45729f8706e2bb1b0149a52b415
Certificate serial: 0198D660754FC46238E40656C9BA966C90A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:42 +0000
Manifest this update: Sat 23 Aug 2025 10:01:42 +0000
Manifest next update: Sun 24 Aug 2025 10:01:42 +0000
Files and hashes: 1: RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl (hash: jF/ySkGH1CnqzVNpeZHUahB+EFTrqTLgEf6bYgH2c9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:75:4f:c4:62:38:e4:06:56:c9:ba:96:6c:90:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45981ce71942d45729f8706e2bb1b0149a52b415
Validity
Not Before: Aug 23 10:01:42 2025 GMT
Not After : Aug 24 10:01:42 2025 GMT
Subject: CN=a5a1c7828abaa940041253d9be56272dd57edc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:79:a1:64:5f:ad:a8:fc:b8:ae:65:9c:7f:1f:
58:0b:5c:22:53:ac:7b:2e:19:09:9e:0d:a4:67:c8:
ca:e1:01:24:23:7c:a4:3e:1a:5d:ca:ed:ce:4f:36:
1b:db:5d:1e:04:88:b1:bb:5e:23:fd:bf:8a:fa:28:
19:fe:ec:d6:be:b1:8a:f0:51:6a:36:4b:36:cb:b5:
b1:a0:f3:74:cc:ce:7a:a4:4b:71:cb:b7:98:b8:33:
30:6f:29:36:47:a6:50:04:d0:49:a7:3d:87:26:d2:
8a:46:83:1f:cb:9d:ce:88:d8:7e:0e:5b:c8:a8:fa:
17:70:32:2c:63:e2:8c:68:c5:4b:b9:97:c9:4d:16:
d3:19:aa:0c:3a:02:d9:5d:f8:9a:28:73:6f:63:6d:
f2:f0:93:da:c2:94:fb:91:eb:92:11:e8:a1:b0:a5:
be:92:c4:51:08:78:12:41:07:9b:3e:77:bb:27:06:
47:a7:87:05:28:5b:10:15:37:8e:bb:ea:76:ee:34:
5b:17:9e:40:18:73:f8:4e:22:66:4e:03:05:4f:81:
84:fe:78:5f:66:78:e8:0a:5d:04:2f:4a:41:ad:3b:
63:cb:b0:dd:8c:86:1d:89:af:d1:de:5b:c8:d1:04:
82:af:1c:d0:16:a9:5c:a9:e6:fe:f8:7d:fe:58:8b:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A1:C7:82:8A:BA:A9:40:04:12:53:D9:BE:56:27:2D:D5:7E:DC:6A
X509v3 Authority Key Identifier:
keyid:45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:83:48:95:57:f1:75:80:a1:a1:95:0a:f3:e0:c3:dd:b5:3c:
d6:35:ba:c2:b0:ae:e8:c7:71:65:97:c3:c6:01:0f:df:27:73:
39:bf:5b:f0:a6:c3:e7:fc:7e:6d:e1:5b:2c:b1:96:b3:58:3f:
ab:51:4d:d1:3f:bd:71:cd:c9:27:aa:64:e4:c1:4d:82:a1:ad:
d3:e7:74:85:2c:14:bd:5a:9b:a4:fe:a8:91:81:7d:55:d5:3d:
eb:04:47:84:c3:fe:c2:bb:92:67:cb:7b:84:6d:b8:a5:7f:2e:
77:c5:5f:5d:02:58:65:7a:c0:75:96:ff:8c:21:2a:17:4e:88:
d0:34:56:51:28:46:10:6c:dc:1f:98:0e:c7:7a:b8:93:1a:26:
c6:87:2d:c1:de:e7:cf:b1:a6:6f:96:a5:ba:13:1c:26:6e:d8:
c0:3b:5a:af:98:94:4f:5e:72:92:8b:09:70:6c:9d:71:5e:4c:
a4:59:25:02:fc:ab:d4:05:06:c9:0d:63:bc:3c:3d:2b:3c:78:
a3:32:d2:ae:4d:bb:a4:83:b0:f8:09:6e:eb:40:85:fd:c3:33:
9f:54:22:1d:8f:e4:e9:89:44:d6:cb:23:2d:47:24:14:75:b6:
a2:14:de:cd:6e:71:53:05:65:92:19:4f:a0:70:45:65:73:ca:
56:77:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:02 2025 by rpki-client