Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
File: cIKkpfKWFe2f7k9nURSF40z3EuA.mft (raw, json)
Hash identifier: zFtE8TZIf2aQ4562o1Lp1vLoHUzMTRdYZEakugZX+is=
Subject key identifier: AC:DE:6A:D9:F0:7A:54:34:8E:9D:19:D7:23:A9:FA:DE:87:DB:80:38
Authority key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
Certificate issuer: /CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Certificate serial: 0198D7E1450A1AEF1B39269BB3D69670CF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
Manifest number: E6
Signing time: Sat 23 Aug 2025 17:02:01 +0000
Manifest this update: Sat 23 Aug 2025 17:02:01 +0000
Manifest next update: Sun 24 Aug 2025 17:02:01 +0000
Files and hashes: 1: cIKkpfKWFe2f7k9nURSF40z3EuA.crl (hash: KjSu26F/XngPMLLpGCu/MZ4XjO+AZFFKDRoRG8wgEG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:45:0a:1a:ef:1b:39:26:9b:b3:d6:96:70:cf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Validity
Not Before: Aug 23 17:02:01 2025 GMT
Not After : Aug 24 17:02:01 2025 GMT
Subject: CN=acde6ad9f07a54348e9d19d723a9fade87db8038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d0:78:fa:f5:87:ad:72:d5:da:2b:3b:d8:13:
7c:94:67:87:2d:9b:21:af:e4:12:f2:5e:d0:06:e4:
5c:b7:6b:23:e3:7f:9e:6b:f2:75:d7:b9:9d:e3:50:
d9:40:0a:ff:73:cb:2d:91:09:10:3d:e4:00:75:58:
3e:ed:cd:84:c6:ca:71:fe:d8:78:ff:7f:38:23:e4:
ca:be:50:e0:a1:a3:78:dc:66:6e:48:12:e3:1f:38:
80:67:34:f5:26:b5:e5:c1:40:15:ca:22:2b:69:d0:
61:af:2e:c8:33:45:d7:8a:d2:a7:23:4b:bf:64:16:
c2:ee:5a:9b:ef:38:2f:db:ea:61:12:5b:e6:fc:23:
91:77:07:70:8f:64:88:b9:cb:d8:47:52:da:8d:10:
b8:32:3e:fc:d6:f6:af:1f:b0:49:67:fa:6b:85:78:
b1:70:bd:17:0f:e6:ae:80:3d:59:04:53:35:5b:ad:
9f:72:be:c1:e6:6a:74:0c:c1:23:07:6a:f2:d8:fc:
cc:b3:4e:62:9f:b7:53:8f:b6:eb:9b:62:36:67:c4:
22:b1:ea:9b:fe:78:2a:3d:86:28:12:6f:ca:36:29:
94:d4:cb:48:1f:aa:8d:a3:3d:d1:b2:29:f5:c7:92:
99:19:75:9b:8c:8b:9b:6a:ce:45:9d:32:00:d8:c5:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DE:6A:D9:F0:7A:54:34:8E:9D:19:D7:23:A9:FA:DE:87:DB:80:38
X509v3 Authority Key Identifier:
keyid:70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bb:1c:0d:5e:e7:c1:92:71:b5:73:a5:8d:a8:2b:11:54:bc:
ca:22:7d:47:6d:e1:37:a9:8a:f8:1e:ba:12:8d:59:06:48:0c:
cd:01:d6:0d:3b:bf:3a:c9:34:69:2f:1c:f5:be:0f:40:8c:38:
05:ea:ff:b4:30:fd:6e:b5:fa:3f:60:fb:45:84:a1:9f:71:96:
a8:ca:a5:19:bd:4b:c1:fe:78:55:7e:36:2f:35:7e:21:2a:5d:
d1:05:0b:78:47:fb:ed:e9:8c:fd:1d:39:03:88:af:96:bd:80:
c7:42:b6:9b:80:97:7b:d0:ba:9a:a6:7a:51:e7:95:0e:66:b9:
88:6c:3d:54:f7:c5:80:98:01:a0:d4:ab:66:c2:2d:fe:eb:65:
e1:e5:af:f6:0d:28:3d:ee:a4:e2:66:95:bf:e1:ff:d7:c1:b4:
5e:da:d7:e6:28:1a:ab:7d:68:4d:1f:a7:8d:61:dc:57:d0:0c:
2b:37:62:2a:e6:37:4f:09:10:a1:1c:29:78:f6:0b:2e:2b:01:
62:c7:aa:c0:c8:2f:b5:e9:09:4f:18:10:6e:f6:d4:46:d4:17:
9c:1a:e1:84:08:5c:8f:0d:ae:6a:24:20:64:d1:46:57:c2:10:
6b:95:73:9b:a7:d4:8b:ff:2a:d8:83:03:ea:d2:5b:ee:d8:9d:
dd:ea:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:53:48 2025 by rpki-client