Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: RjTgwh+dCs2mBXjFuDKISRnWrDbBg9QnZiMBc9dQekw=
Subject key identifier: 2B:B6:3D:39:88:45:BA:B1:62:BD:BD:78:3C:C9:32:B0:5C:34:97:C0
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 0198D84FE0807EB5AE7BF1A391CD031FBD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 097A
Signing time: Sat 23 Aug 2025 19:02:49 +0000
Manifest this update: Sat 23 Aug 2025 19:02:49 +0000
Manifest next update: Sun 24 Aug 2025 19:02:49 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: Lvgd4qTwJOuwDJe9L9pEKProDE4qhDXvueHttY+ixA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:e0:80:7e:b5:ae:7b:f1:a3:91:cd:03:1f:bd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: Aug 23 19:02:49 2025 GMT
Not After : Aug 24 19:02:49 2025 GMT
Subject: CN=2bb63d398845bab162bdbd783cc932b05c3497c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:fc:51:31:2a:69:ae:a4:d4:ab:8c:a5:94:
52:d9:f0:30:d8:ec:35:bf:f4:dd:63:68:18:b5:5e:
78:1b:ad:64:2c:4a:c1:94:70:af:7a:d2:af:66:3b:
4f:bf:57:5a:3a:3b:2e:6c:e4:25:6f:f9:44:7a:37:
a3:8f:06:f8:b8:68:df:24:89:35:aa:60:c0:c7:4d:
b5:b8:32:f3:5a:ac:a5:99:34:74:b2:8a:55:97:35:
b6:4f:ea:96:ff:23:85:10:57:e8:ca:f3:82:97:d6:
ba:83:99:0c:b0:a3:d7:42:07:9e:73:d0:63:5b:8d:
10:bf:47:dd:d8:11:7c:6f:03:8c:97:8d:d7:c7:33:
90:0a:45:a2:b1:b3:2f:c0:1d:5d:e5:aa:dc:f8:84:
ae:96:ba:f4:db:68:1a:cd:95:aa:32:1e:0a:fb:5f:
0f:87:a3:47:5a:7e:2d:f3:01:98:1c:7e:6e:ca:42:
dd:07:ba:5c:30:d2:b7:7f:f4:1a:da:ce:70:51:b3:
33:35:9f:41:1d:90:75:95:85:69:e2:0c:6b:ad:53:
ae:78:96:73:ec:f5:55:0d:60:20:88:d0:30:f1:25:
ce:4f:08:98:de:92:6d:df:a5:92:86:50:1c:78:01:
d3:3d:93:51:d9:47:7e:44:26:3a:0b:6a:dd:24:07:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B6:3D:39:88:45:BA:B1:62:BD:BD:78:3C:C9:32:B0:5C:34:97:C0
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e4:47:89:44:b6:40:97:4f:97:bc:8e:b2:0e:f1:8c:53:65:
17:6f:af:bd:85:db:a2:3b:47:35:29:c9:41:63:2b:a0:08:2a:
40:3a:14:72:00:6d:5f:75:5b:6f:5d:b8:dd:9d:b6:ac:a0:e0:
64:39:df:72:e7:53:d6:eb:a1:0a:df:6a:b8:50:03:47:59:bc:
fc:32:2c:a3:d4:3a:96:33:f5:a0:38:1d:8f:2d:e0:82:57:c3:
ce:cf:41:fe:cb:eb:31:55:a6:43:1e:98:34:50:f0:b5:33:81:
15:a0:5b:44:9d:94:1d:f9:c7:53:02:68:3c:57:27:75:e2:39:
a8:86:57:c6:0c:63:2a:e8:a8:af:49:ad:de:de:d5:51:f8:62:
1c:fa:66:31:1c:76:a0:40:4b:8a:15:b3:58:7a:0a:2d:8c:8f:
d2:c7:23:c4:dc:ff:55:dc:c9:77:da:2b:b1:89:cf:d9:64:f6:
9c:5d:b2:43:5c:49:01:5b:55:87:87:ed:9f:24:7f:1c:d3:10:
1c:8d:e3:e9:83:11:73:06:8a:10:ec:ce:34:ad:bf:f8:f5:81:
19:4d:c9:2a:2a:ad:d5:d8:18:c4:d9:88:59:61:a7:2f:dd:12:
ad:50:d1:53:d8:ae:1f:ac:a9:b9:bf:0f:49:9f:01:83:21:52:
9f:f4:bc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:38 2025 by rpki-client