Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
File: bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft (raw, json)
Hash identifier: cRTMTAEhF+vQy/pqSGF76FdUZnswRM+DGTWc0/jmqgc=
Subject key identifier: AE:51:03:29:21:B8:8A:4C:85:5C:F5:FB:4F:8D:2D:67:23:6C:D7:C1
Authority key identifier: 6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
Certificate issuer: /CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Certificate serial: 0198D660093AD68B7C7192BCE0BD62C80663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
Manifest number: 0EDE
Signing time: Sat 23 Aug 2025 10:01:14 +0000
Manifest this update: Sat 23 Aug 2025 10:01:14 +0000
Manifest next update: Sun 24 Aug 2025 10:01:14 +0000
Files and hashes: 1: bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl (hash: VsMJPozZ5BwFFPtk5w98MnkWvfMO6ctkSXFBAPxLb3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:09:3a:d6:8b:7c:71:92:bc:e0:bd:62:c8:06:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Validity
Not Before: Aug 23 10:01:14 2025 GMT
Not After : Aug 24 10:01:14 2025 GMT
Subject: CN=ae51032921b88a4c855cf5fb4f8d2d67236cd7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:9d:fa:e6:f4:d1:99:dd:a7:74:08:69:c5:
86:2b:c5:67:de:d4:e9:94:cd:fd:49:c0:8e:6d:ad:
36:83:63:5b:b8:09:f0:1b:6c:a0:aa:60:2c:8c:db:
1d:6a:c1:40:d4:2e:d0:b1:f6:ca:b9:16:84:58:01:
ac:d5:17:fb:cc:b0:6c:4d:52:d0:2a:9d:c5:fe:53:
34:7f:52:d0:42:aa:61:00:8a:27:be:8a:2a:a1:58:
45:15:72:25:0e:b9:85:4d:94:16:f5:6f:09:db:29:
03:42:0a:e7:2b:b1:68:ba:62:db:19:5f:00:c8:cc:
cb:60:59:3a:2c:7f:2c:ce:33:aa:2e:85:20:ef:ab:
cd:29:20:51:8c:d7:d0:f5:de:11:5f:a8:3e:61:03:
23:06:f1:db:7a:26:2f:62:8f:9d:eb:64:d8:79:5e:
06:ba:56:c8:a3:cf:f2:1f:98:f3:dc:0f:d5:41:c7:
44:80:25:76:b6:21:51:2e:ff:d7:24:b5:d2:26:f7:
c2:ea:93:8c:f5:29:2e:b6:61:e6:76:54:ae:24:90:
1b:49:b2:ea:b0:33:95:bb:ad:87:dd:8f:24:b6:7f:
57:58:99:75:fe:2f:27:a9:4f:db:5f:7d:4c:64:b0:
1e:90:f2:f1:97:22:91:27:9d:67:e7:77:1e:14:40:
21:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:51:03:29:21:B8:8A:4C:85:5C:F5:FB:4F:8D:2D:67:23:6C:D7:C1
X509v3 Authority Key Identifier:
keyid:6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:60:63:16:4f:ea:66:ee:cb:f5:01:a2:58:14:be:6f:ae:40:
d9:c3:71:55:42:26:37:a9:cc:ca:44:00:77:2b:a2:a1:fa:49:
20:7b:47:2d:18:dd:1c:7b:f2:71:93:79:f5:70:12:18:9f:67:
00:da:70:c3:4d:64:fc:1c:2f:3d:5c:17:d8:8a:7c:82:80:16:
50:8e:d0:39:c5:dc:c4:8f:73:0f:79:c5:8c:c1:83:ca:21:3b:
ec:2d:30:ac:e4:91:1a:13:d4:e0:fb:83:b8:d2:af:65:21:36:
f0:41:62:87:b9:03:8e:66:40:70:f5:64:01:a5:8d:30:25:1c:
de:6e:50:09:8e:49:9e:56:b5:f4:d9:0c:b8:dc:fb:af:63:b3:
e4:22:a0:9e:75:a9:a5:80:a5:64:39:90:bf:65:06:14:00:c7:
fd:b0:b8:78:5a:5f:ff:52:52:38:00:3f:7d:1d:77:64:cb:56:
85:33:aa:4d:ef:c7:11:ed:b5:eb:86:24:38:00:8c:65:1f:ff:
71:96:c6:53:8e:80:43:3d:fa:28:99:9c:ec:c6:55:04:88:00:
ab:d7:f6:34:9e:a4:e1:4b:a4:9e:ea:36:9e:c2:00:c0:98:8e:
e2:f7:8c:9d:ea:5d:52:d6:20:79:fb:62:2a:70:c7:2f:6e:05:
ec:97:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:57 2025 by rpki-client