Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
File: c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json)
Hash identifier: Wn7VNv3G8Lvakfxw2D5Wm4AGSL4sDquhgUWbND13c60=
Subject key identifier: 67:FA:75:AB:5C:B3:8E:FC:46:4D:CF:53:0B:F5:3F:8D:2C:3D:14:9A
Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
Certificate issuer: /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Certificate serial: 0198D66060C92231983129D709E5831482FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
Manifest number: 1011
Signing time: Sat 23 Aug 2025 10:01:37 +0000
Manifest this update: Sat 23 Aug 2025 10:01:37 +0000
Manifest next update: Sun 24 Aug 2025 10:01:37 +0000
Files and hashes: 1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: JiB6hA4XOqBSU3olX80hfVS3tmSIBjWOxv71sldmQ/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:60:c9:22:31:98:31:29:d7:09:e5:83:14:82:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Validity
Not Before: Aug 23 10:01:37 2025 GMT
Not After : Aug 24 10:01:37 2025 GMT
Subject: CN=67fa75ab5cb38efc464dcf530bf53f8d2c3d149a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:40:67:72:ca:74:4c:9f:0d:d4:b0:b6:1c:
68:03:9f:1c:b5:ec:cf:25:21:99:22:40:05:6b:ea:
5b:b8:26:0b:47:ef:1c:28:fe:56:87:4b:0b:07:89:
a0:c6:0d:82:20:3f:f2:8a:7c:3d:a6:29:3a:54:2b:
8e:da:e3:03:75:ee:47:ae:80:f9:24:21:4d:e0:59:
36:65:fb:7c:4b:98:01:d7:07:6f:29:5f:6b:af:3f:
07:aa:29:d9:78:ca:cc:66:bf:4d:58:64:9f:a5:fd:
3a:d6:46:91:9b:28:82:f8:d7:86:13:f4:83:db:94:
a8:37:c1:16:e9:47:d4:58:b1:bf:78:f7:e7:00:42:
2c:31:47:a8:6a:52:e8:e9:02:80:7a:6c:3e:8c:f6:
7b:8f:b3:06:01:c9:d3:90:98:53:27:73:82:34:33:
ae:f3:51:e1:44:73:9d:39:a2:cd:73:fd:3c:b6:ec:
b5:5e:5e:72:ca:1b:e0:a6:e0:cd:7c:61:d4:e2:04:
d3:35:84:2c:05:5d:d8:b7:29:94:e6:ba:6d:36:fa:
2f:9b:7f:d3:92:da:40:37:7a:90:e0:ef:26:d5:01:
b5:95:4d:f1:46:a1:70:79:85:9a:6a:41:22:62:83:
62:bf:46:6c:c0:e6:ed:be:19:a0:be:e6:6d:4a:a5:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FA:75:AB:5C:B3:8E:FC:46:4D:CF:53:0B:F5:3F:8D:2C:3D:14:9A
X509v3 Authority Key Identifier:
keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bf:7d:8b:0d:0f:92:fb:d9:cd:47:dd:42:6f:04:32:c9:96:
7d:cf:bd:ea:92:31:53:c8:a4:6e:c8:2b:c6:cd:f1:03:6b:e4:
9a:3c:4a:2c:ed:2d:5d:fc:20:04:63:0d:f4:3e:b8:8a:e2:f0:
44:f2:e8:63:ab:26:e1:98:ac:1c:4d:ce:cf:1a:a8:0a:5a:bb:
40:f9:82:0e:f2:8a:5a:38:2a:56:45:a3:36:2b:99:38:83:88:
18:c5:47:01:cd:fb:2e:7c:84:e6:8a:4b:d8:b5:0b:0a:11:c1:
17:94:e2:62:da:90:8d:3a:df:91:77:bc:9b:73:ed:a6:1a:3c:
95:74:85:f6:d7:09:49:04:fd:8b:1f:e7:e7:2e:5e:02:0e:b1:
ad:1d:b7:c2:da:dd:56:ad:5d:be:63:22:a7:f5:80:6b:31:f2:
14:80:4e:6b:18:1b:5c:f6:83:37:b2:67:37:52:ce:61:59:07:
0a:48:a5:31:bb:ce:18:49:cd:76:59:66:d3:b8:32:05:0b:cd:
61:91:53:23:68:93:45:30:a2:e9:05:0e:f9:2b:31:84:5a:d8:
d1:6d:b7:2e:f7:00:61:66:59:60:c0:92:1e:a2:18:c6:a4:eb:
3c:49:3e:2b:f6:0e:75:ec:95:30:43:c3:1a:d0:3c:d7:72:13:
44:19:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:53 2025 by rpki-client