Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
File: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft (raw, json)
Hash identifier: x0Ypc5qkhvL7Sem1/4gnh3Yg76faHvkPZ1oh+BJBaIA=
Subject key identifier: 32:30:C6:52:3F:54:FA:01:98:52:24:8F:AA:77:2C:24:69:60:4E:05
Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284
Certificate serial: 0198D5F1BAA4FF1A48BECCDF3B34DFC0AADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
Manifest number: 123B
Signing time: Sat 23 Aug 2025 08:00:45 +0000
Manifest this update: Sat 23 Aug 2025 08:00:45 +0000
Manifest next update: Sun 24 Aug 2025 08:00:45 +0000
Files and hashes: 1: GA0RPX0Ob2MlFQ2Rid7QsDPJvlM.roa (hash: 3tIOpxV3dFmPnHX5pAbw7q08MNAptrdhnPG7hgsjWKs=)
2: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl (hash: 1uY++VqbYfw+LPBXTti0lm2Cr07TIB7mGD6Au3jBYdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ba:a4:ff:1a:48:be:cc:df:3b:34:df:c0:aa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284
Validity
Not Before: Aug 23 08:00:45 2025 GMT
Not After : Aug 24 08:00:45 2025 GMT
Subject: CN=3230c6523f54fa019852248faa772c2469604e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:b4:db:02:71:a3:19:23:21:0b:d2:77:ed:
6e:05:36:c9:7c:ac:7c:51:9f:a7:cd:29:75:d6:e7:
ed:d3:6e:f0:58:6a:e1:63:5f:86:c0:40:dd:0a:cd:
8e:b5:cd:28:51:dd:69:98:39:ba:d4:6e:68:c9:73:
1c:b1:c9:f4:22:ef:f0:60:39:58:3b:66:51:60:c0:
3f:3e:af:a4:ab:81:bb:f5:49:7e:97:b7:20:23:6b:
2b:ec:5c:b2:31:99:84:58:b4:16:ff:c8:e0:c5:e6:
23:42:87:30:18:f0:bf:db:f2:fd:01:f2:65:6e:9e:
8d:ff:7d:e9:d0:16:83:39:b9:dd:e4:49:cb:a0:e2:
b3:97:82:c1:06:7b:02:50:80:09:f1:0a:f8:cb:13:
be:72:d0:e3:c3:93:4b:d6:af:e2:ef:ec:5b:02:9b:
e8:69:7f:87:66:ba:a3:50:19:e7:65:04:46:50:64:
11:59:9b:2a:a8:e2:e7:61:19:48:dc:f8:3d:4f:3a:
de:3c:96:ac:21:cf:75:ea:e7:f4:85:6c:69:c9:1a:
e1:2f:fa:4b:d0:09:ce:55:a1:c6:ab:07:4c:d3:c2:
6f:1a:9f:22:ba:e7:0a:40:e1:f4:a1:b6:cc:b9:5f:
05:73:92:b2:e3:92:7f:b4:f2:29:1d:9f:7d:99:8d:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:30:C6:52:3F:54:FA:01:98:52:24:8F:AA:77:2C:24:69:60:4E:05
X509v3 Authority Key Identifier:
keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8f:aa:ba:7c:3e:9c:3e:31:d3:bf:f9:03:2f:ad:a8:f0:52:
07:8a:4d:8f:64:1b:52:b5:b1:a5:ec:f7:35:c2:a9:09:29:79:
9f:b0:5f:f1:d2:0b:e2:c3:d3:d3:93:dd:cd:e9:28:d6:9b:a6:
57:73:e5:8e:09:62:ac:0f:d5:e4:0d:f1:0d:e6:f8:c9:31:f9:
34:12:b7:bd:93:8b:70:4f:eb:76:cd:f7:e4:46:5d:aa:83:7b:
d9:51:1e:60:5d:ba:e8:60:6f:10:68:86:af:a7:9a:c6:30:d6:
00:90:98:39:ae:a8:96:e1:2d:56:b3:d1:de:a7:39:0b:79:a8:
0a:69:3b:a7:44:df:2e:6c:2b:30:31:d7:23:ad:6f:ab:4f:8f:
89:c9:92:34:37:63:db:68:37:b9:3b:7a:f2:32:ab:56:8a:ef:
0d:af:94:49:02:f0:c8:7a:10:db:ed:b1:52:e1:46:7d:19:63:
b0:3f:ab:2c:fd:4d:7e:20:25:9c:d3:0d:ef:80:e5:30:41:6b:
82:df:87:69:8f:6e:43:d7:84:5e:e7:2a:eb:1e:5b:56:ff:14:
77:5e:b0:ed:62:c6:3f:a8:a4:ad:d8:fb:e3:bd:b8:ce:6b:59:
9d:b3:6e:56:99:ac:ff:e5:72:5c:a8:f7:b0:63:9b:ff:7c:83:
95:12:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:30 2025 by rpki-client