Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier: +IwnxIK1dbBpIjMrBmvgLd3Ql1L/JUK0cCYGIbfWOyU=
Subject key identifier: 5C:8C:B3:0B:8B:E1:EF:7D:C6:4F:ED:BF:BB:30:7C:60:75:92:10:7D
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial: 0198D99999A3FE92AC708C689D1153F2A9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number: 0F70
Signing time: Sun 24 Aug 2025 01:02:58 +0000
Manifest this update: Sun 24 Aug 2025 01:02:58 +0000
Manifest next update: Mon 25 Aug 2025 01:02:58 +0000
Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: tAvpBWQn+CMaIBJ+VqPY1RaDT2lxXcJ0K4FbcLbH0pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:99:99:a3:fe:92:ac:70:8c:68:9d:11:53:f2:a9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Validity
Not Before: Aug 24 01:02:58 2025 GMT
Not After : Aug 25 01:02:58 2025 GMT
Subject: CN=5c8cb30b8be1ef7dc64fedbfbb307c607592107d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:8b:39:ae:bb:6d:0e:18:cb:90:99:63:72:
2d:68:6a:9a:31:b6:8f:a0:a2:23:17:ee:81:7f:db:
1e:49:c2:bb:8e:51:d7:b7:e4:b9:00:a0:a5:86:9d:
65:f5:6a:fc:b4:79:da:45:95:09:f0:12:b8:8c:24:
0e:3f:64:16:97:69:40:b1:b4:b9:a3:19:2d:6a:e5:
4f:d4:04:7d:e5:37:68:61:95:13:2f:49:63:76:9d:
70:da:4e:39:11:10:a8:91:28:b3:28:80:55:59:28:
15:f3:f0:4b:f9:73:8c:00:78:7d:ff:f9:72:af:00:
40:3b:35:44:a4:55:ec:f1:81:f9:71:fd:16:c1:4e:
1d:db:74:77:db:ee:9b:74:24:5f:0e:15:49:64:07:
08:0d:6b:f4:2f:ff:e6:1f:e8:e7:6b:12:d3:da:7a:
bb:14:47:3c:cb:3b:7f:71:bc:66:c4:2b:6a:21:b5:
c4:39:ac:b4:3b:9d:bb:24:6c:56:6e:93:05:31:c2:
e1:35:91:4b:5c:84:45:ed:bb:4c:0e:a9:f4:72:69:
55:ed:28:cc:0a:58:3b:d3:48:91:a9:9a:32:9d:e8:
42:ce:f3:27:a7:d1:c0:c0:8f:75:7f:63:65:bc:91:
9c:98:b6:95:e1:a4:78:57:0c:ac:69:22:95:7a:ea:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8C:B3:0B:8B:E1:EF:7D:C6:4F:ED:BF:BB:30:7C:60:75:92:10:7D
X509v3 Authority Key Identifier:
keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2c:49:00:72:cb:4c:13:78:0f:cf:b5:7e:c2:42:e4:cd:71:
8f:cd:ac:9a:f1:8c:e8:d7:1f:ef:09:9f:8b:53:18:c0:3f:d5:
cb:54:b4:c0:f4:d1:39:44:21:b1:9b:cd:e0:0a:c8:25:11:c4:
bd:7b:6f:3c:d3:c9:f8:c0:61:e1:80:4b:65:6e:c3:48:51:14:
ef:ee:d1:82:71:07:40:09:d1:a4:0a:36:7f:0c:bb:1b:1a:78:
b9:2d:78:46:99:d2:00:58:a9:88:2f:af:56:42:40:56:60:bc:
6f:dc:3d:67:2c:fd:4b:8f:f1:54:16:f6:c2:9c:e1:37:44:84:
c5:26:30:c1:cb:42:03:56:b1:cc:5a:dc:72:80:0d:22:19:78:
87:35:19:6f:d8:3c:a9:09:37:3a:5f:99:5d:61:09:dd:86:4f:
ac:ae:74:2e:c1:60:d2:e1:07:fb:d5:fa:05:a4:b7:82:11:c0:
5b:61:88:b5:b4:7e:c4:bf:b1:8a:ff:4a:2d:b6:dc:ab:8c:d5:
09:62:14:d2:18:ef:f5:1d:3b:1d:ea:c4:88:19:ca:fa:77:57:
3b:bb:e4:5d:f7:8a:d2:e1:b8:b9:43:a4:63:0c:4b:ee:6d:a3:
68:db:6f:b9:13:c7:39:37:93:50:43:60:38:ab:91:b1:4a:51:
f3:48:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:41:52 2025 by rpki-client