Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier: XrqCwqry0KT4h4yoDmYnpJLiOFDgCaQxs+Xqk6Kh+Yk=
Subject key identifier: 6B:F4:9C:87:DF:B5:D8:08:33:62:B7:F7:42:8C:0D:33:F5:C3:A1:EE
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial: 0198D660BF681C2F755E18D17F3A2BEEC3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number: 0C76
Signing time: Sat 23 Aug 2025 10:02:01 +0000
Manifest this update: Sat 23 Aug 2025 10:02:01 +0000
Manifest next update: Sun 24 Aug 2025 10:02:01 +0000
Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: cH+TdXb/Xj0RHKPk0tujybzW9x9UazYw60d3kQJDyio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:bf:68:1c:2f:75:5e:18:d1:7f:3a:2b:ee:c3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Validity
Not Before: Aug 23 10:02:01 2025 GMT
Not After : Aug 24 10:02:01 2025 GMT
Subject: CN=6bf49c87dfb5d8083362b7f7428c0d33f5c3a1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:9a:a9:d2:06:81:23:0b:0a:37:90:ea:e7:
ed:e0:67:3b:33:f6:f0:dc:a0:44:2c:80:f7:e9:2a:
a9:cc:c6:16:7b:3a:57:55:cc:63:04:a4:f9:c6:1b:
1e:b3:2b:20:54:8a:50:d8:18:0f:9b:82:5e:e9:67:
a2:df:43:15:f8:9c:58:a0:30:df:c4:1d:3e:23:78:
4d:0a:ef:0f:c3:05:b5:f7:a0:68:ca:48:57:16:ef:
13:e0:68:46:0d:72:92:5e:b1:0a:bf:9f:89:5a:0a:
b8:01:24:d4:e1:0b:b1:0d:22:2d:b8:9c:2f:c9:3f:
e9:48:5c:67:63:12:4d:cb:07:08:be:c4:12:e3:7b:
f7:50:2d:cf:31:0b:89:68:21:11:9d:99:1c:0a:ce:
4c:ef:24:eb:da:26:64:df:b8:66:30:20:61:a9:09:
d1:e9:c4:66:4d:e3:19:67:e0:f8:fb:80:a3:d6:61:
34:0d:0b:6c:8f:66:d7:6a:00:dc:ab:f1:d9:ea:33:
23:81:42:a3:d0:ee:b3:cb:29:a3:67:5a:96:af:29:
3a:20:2d:1a:76:f1:77:5b:9c:4f:18:1e:76:04:a7:
07:71:06:7d:9a:d1:31:cd:60:f9:5d:df:8c:07:c6:
a7:52:0f:c1:35:33:b3:2f:ea:71:ba:1a:8b:38:3a:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F4:9C:87:DF:B5:D8:08:33:62:B7:F7:42:8C:0D:33:F5:C3:A1:EE
X509v3 Authority Key Identifier:
keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3b:94:da:27:62:aa:e7:93:ed:6d:89:98:36:af:d0:76:e8:
28:d7:b8:ab:7a:ad:fc:2c:1e:34:35:d8:43:d2:55:12:eb:4b:
09:88:0e:48:a0:1f:39:59:04:c4:8f:c1:d4:46:02:4a:32:a3:
5e:83:d4:57:05:72:b8:95:c3:d4:13:17:15:56:8e:ce:b7:01:
fe:a0:61:83:16:18:22:0b:eb:fb:00:38:c7:a3:80:a0:40:61:
85:d1:fb:12:35:15:2d:bb:fd:b4:90:17:0c:ec:9e:02:59:bd:
18:06:f6:37:e1:4a:2a:5e:3d:ad:20:28:18:e3:8c:64:a4:81:
ef:95:ed:83:8e:56:dc:05:97:72:81:e1:9f:79:40:0e:9b:7c:
dd:6a:1e:b7:9e:59:47:8b:48:bc:17:5f:77:a9:ce:2a:f9:c6:
06:3c:e9:40:71:4a:40:e6:b5:a7:b8:b9:df:2a:e2:a4:53:a6:
e8:38:13:4b:56:61:a0:c0:86:21:ca:01:c1:40:de:91:a5:38:
7a:e6:5e:d9:f3:da:bd:0a:bc:b8:95:01:4b:55:37:e3:f4:5e:
7a:7e:ab:e6:ec:db:1e:f0:21:fe:a9:72:f8:95:ce:56:13:36:
c1:58:6c:12:b6:04:5a:45:f3:16:78:63:2d:f4:34:29:24:da:
e7:13:ac:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:53 2025 by rpki-client