Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
File: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft (raw, json)
Hash identifier: eP8FnEJ/gJpUG+vwjFivXmy5tsP08RUDuUibEc+Trss=
Subject key identifier: D0:5E:6C:3B:6F:81:8D:39:ED:B0:77:7A:B2:D9:FB:56:3D:97:9B:8E
Authority key identifier: 71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
Certificate issuer: /CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Certificate serial: 0199FC591377008836FDF722AE8E21DF62A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
Manifest number: 0756
Signing time: Sun 19 Oct 2025 12:02:00 +0000
Manifest this update: Sun 19 Oct 2025 12:02:00 +0000
Manifest next update: Mon 20 Oct 2025 12:02:00 +0000
Files and hashes: 1: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl (hash: OWq730cRSiG+ndj4y7EcjaLPU/+yb5A5FXKf3TyHvmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:13:77:00:88:36:fd:f7:22:ae:8e:21:df:62:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Validity
Not Before: Oct 19 12:02:00 2025 GMT
Not After : Oct 20 12:02:00 2025 GMT
Subject: CN=d05e6c3b6f818d39edb0777ab2d9fb563d979b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d9:38:81:14:58:56:99:ca:3c:ab:4a:0a:f7:
bd:4d:c2:88:01:00:1c:b6:8a:9c:bc:1b:0a:c8:c8:
d5:93:c9:34:0e:93:83:39:b3:5b:63:7d:3d:1d:f9:
90:f8:71:3c:b7:db:71:49:44:a5:1f:25:53:95:d3:
fd:da:2e:4c:f4:09:aa:e9:d8:2b:76:2b:7c:80:3b:
b5:9c:57:98:cc:b1:0c:11:de:63:d5:a0:45:07:77:
bf:38:26:44:3d:37:ab:42:47:cb:3f:05:aa:33:4a:
a3:ae:bf:bc:06:a8:dd:50:09:73:07:18:61:c5:10:
a1:88:74:ad:bb:1f:22:b1:a6:9b:b6:dc:f4:19:db:
b1:e6:08:32:08:b0:a4:58:37:72:e4:6a:1b:56:1d:
7f:b5:15:f7:d7:2c:e2:a3:df:d8:c8:71:d4:7e:02:
c0:71:a7:33:dc:a4:96:50:ae:ae:0b:13:09:94:f0:
dc:39:e0:92:56:53:44:18:5f:dd:33:01:fc:69:35:
e8:23:aa:89:9e:3d:2c:02:b4:97:f0:97:ed:5a:d4:
78:61:2d:64:dc:bc:0b:78:08:a1:25:a5:c4:d5:b9:
f1:43:99:10:a6:60:fc:d2:da:14:3e:89:9f:0f:39:
e4:cd:69:18:c0:64:2b:a8:bb:1c:0c:ba:8e:0a:54:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5E:6C:3B:6F:81:8D:39:ED:B0:77:7A:B2:D9:FB:56:3D:97:9B:8E
X509v3 Authority Key Identifier:
keyid:71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:62:65:39:3f:3b:7b:e4:b8:fa:78:08:da:5d:f3:64:e8:83:
04:a6:c7:c3:02:de:5e:b7:b6:a4:33:08:2e:f1:b1:09:8a:5e:
61:0f:c3:f3:c1:8a:1a:d9:1f:76:da:42:bb:ea:34:ad:ff:09:
18:84:c7:dc:66:bf:42:ce:43:6d:ff:3e:90:dd:f6:ce:9a:c4:
36:4e:09:c4:49:1e:b0:9c:27:da:1a:67:2a:54:96:a9:b2:ec:
bb:0e:f8:c5:c4:f3:89:45:60:76:ec:9a:83:1c:98:37:ae:b4:
25:fe:a5:d9:2f:e0:82:6d:48:d4:00:29:d3:97:85:36:6e:98:
d5:3b:60:4d:aa:e4:1e:9e:42:2c:d3:65:bc:55:2b:28:7e:96:
53:59:22:e1:c1:1a:04:ed:1b:d0:ce:3e:85:31:fc:39:8b:fd:
62:7b:87:0d:77:e9:f0:84:39:45:a8:35:48:5f:66:c8:22:e0:
b9:0a:f5:12:6c:1e:f8:e4:1d:20:6b:f0:c8:f4:62:f1:e8:e7:
a1:49:55:3a:f1:b4:7a:2a:c7:e5:20:a7:a6:94:c9:2b:29:ac:
6b:c1:c8:db:e0:bd:67:f2:ff:aa:6f:f0:48:e1:ee:9a:72:7c:
ec:98:bd:ec:36:0a:74:90:7b:cd:4b:eb:13:13:90:69:28:05:
16:a8:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:21 2025 by rpki-client