Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier: FCFSf7pdxnuN94GWmkP4t5qU7pDB66NnK56Wltr0enk=
Subject key identifier: 3D:54:6F:3B:48:F1:A1:45:CF:5F:86:82:B8:E9:83:56:37:4B:4F:DC
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer: /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial: 0198D5F1DB9CA02B6AEF4EDB3DA10535C04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number: 0511
Signing time: Sat 23 Aug 2025 08:00:54 +0000
Manifest this update: Sat 23 Aug 2025 08:00:54 +0000
Manifest next update: Sun 24 Aug 2025 08:00:54 +0000
Files and hashes: 1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: LlWuBQN0S0ZtI62jb5BDoFwPxNbNu+hOFNlItLloP8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:db:9c:a0:2b:6a:ef:4e:db:3d:a1:05:35:c0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Validity
Not Before: Aug 23 08:00:54 2025 GMT
Not After : Aug 24 08:00:54 2025 GMT
Subject: CN=3d546f3b48f1a145cf5f8682b8e98356374b4fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:77:95:4b:5a:af:3f:b8:0d:b8:62:ec:c7:
6f:27:df:20:82:08:df:38:18:68:28:e4:04:cc:17:
22:f8:18:6b:a4:a6:48:ad:f9:4e:ad:c6:cf:62:81:
2d:c4:00:31:ad:d5:3c:a6:ee:a8:05:8d:14:4d:8e:
14:71:1b:81:e7:0f:84:af:c4:9f:ef:24:a6:ad:d7:
5f:48:0e:5f:42:8d:09:17:9c:1c:fd:d1:24:5f:29:
d4:79:44:42:b5:f7:b3:0d:29:f0:5d:44:eb:7a:99:
b8:f3:7e:79:b3:ac:a8:e8:5d:68:91:d6:ef:76:00:
49:28:c2:5d:b5:c7:e8:88:df:10:df:e7:dc:9a:98:
e5:57:f3:ed:4b:d2:ce:97:b0:4a:fd:c9:3d:ab:10:
f6:a7:05:85:4c:ba:4b:90:31:3b:48:5f:ee:ea:57:
58:7c:a4:b8:50:93:47:3a:6d:e4:13:33:7d:dc:dd:
13:92:53:12:86:c2:44:cd:c6:61:00:fc:53:b6:f1:
01:68:96:b3:80:85:cc:25:a5:18:aa:b8:93:02:13:
a7:4b:9f:39:3f:b6:07:50:56:bc:a2:cf:04:c3:73:
ab:f7:62:b1:b0:cc:76:6a:a1:2b:36:d5:9d:3f:a3:
66:d8:f2:c5:38:5a:4d:ba:f3:d1:8f:ad:a1:25:62:
00:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:54:6F:3B:48:F1:A1:45:CF:5F:86:82:B8:E9:83:56:37:4B:4F:DC
X509v3 Authority Key Identifier:
keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:6b:a1:36:3f:e0:2f:bf:fd:ee:e9:99:ec:fd:3c:bb:d1:17:
87:ae:7c:7a:4b:a5:70:6a:8f:8f:2f:bf:03:c0:d1:44:70:8d:
a9:31:34:6b:21:cd:1f:80:88:31:56:bf:ee:de:59:1c:d7:04:
92:fd:7f:9b:94:93:c6:e8:f0:d1:88:e2:37:aa:03:e7:f2:99:
cc:b5:60:85:1f:c9:66:5c:42:2e:23:3b:d7:a4:3e:8f:33:58:
0b:8f:64:2a:1a:87:05:4c:c2:3b:aa:ca:a3:dd:b9:69:cd:df:
f5:c9:b5:50:a2:72:e5:5b:47:6f:c0:90:7d:2f:7e:ca:78:0b:
b8:bc:5e:1d:50:33:ac:d8:95:1a:46:2c:6a:60:dc:93:8d:9f:
a3:8b:cd:f3:af:46:16:0b:37:c2:3d:3e:18:3e:42:40:4f:c0:
d8:c3:51:1b:63:ce:0f:7f:97:4c:9f:a3:e5:ba:16:19:dc:07:
59:42:10:8c:35:16:d7:af:0c:36:a0:fb:2b:13:f0:84:32:dc:
8e:95:70:6f:e5:4f:74:bb:73:d6:34:f1:61:fe:74:d9:0d:0d:
f0:56:c5:b1:5b:75:bf:33:c5:e3:53:28:3b:19:92:1f:b8:4f:
18:b5:6c:57:ce:e9:24:3a:ce:81:2a:a8:2f:f2:20:c3:57:58:
62:68:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:26 2025 by rpki-client