Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: 1/fkNt8lbonBTMuXg8Vg/obhlG26pgBQmCU/rujJm0E=
Subject key identifier: 0D:AC:FA:07:3E:4B:51:65:E8:2E:82:F0:99:B8:24:E2:20:A0:DF:6E
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 0198D473A606E2F36FFF534BE178AFB81653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 11C7
Signing time: Sat 23 Aug 2025 01:03:25 +0000
Manifest this update: Sat 23 Aug 2025 01:03:25 +0000
Manifest next update: Sun 24 Aug 2025 01:03:25 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: Cw1mkrFPJ2BXIck25RChpWNaT1MFLNbPmQkYGXxJzwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a6:06:e2:f3:6f:ff:53:4b:e1:78:af:b8:16:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Aug 23 01:03:25 2025 GMT
Not After : Aug 24 01:03:25 2025 GMT
Subject: CN=0dacfa073e4b5165e82e82f099b824e220a0df6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:c0:f1:6d:7f:e5:19:f4:7f:99:01:6c:1f:
8b:61:c7:2e:21:ed:43:e4:3a:bf:60:c2:8b:b3:0a:
49:e6:7c:85:ff:87:11:f9:f7:c4:f7:c0:d4:5a:03:
54:eb:ad:6d:e5:9a:de:e4:22:e6:79:1c:7b:a2:88:
52:f1:77:a5:78:d6:a8:30:5a:4c:5f:ef:ef:1d:e8:
fe:e1:3a:8e:ad:a0:e8:13:b0:e7:5d:a8:91:39:62:
d6:17:9a:fa:f3:02:50:01:cd:eb:8b:ad:ab:81:2c:
5e:1f:82:03:61:ae:e6:74:d9:9a:23:05:4a:dd:79:
24:b2:c3:ff:c7:7b:20:8d:8f:15:f2:2a:44:ed:64:
a0:99:0c:42:36:15:0b:e3:e2:9b:04:c4:b8:14:fc:
28:e6:a5:eb:4c:ac:c7:63:98:98:4d:94:69:0c:de:
d2:50:62:8d:b5:d0:d8:4a:91:3e:09:0c:60:7d:15:
bd:dc:f0:1f:a4:2f:93:e3:a2:df:b4:9f:98:cf:99:
b2:e8:81:f8:f4:33:9a:3b:5a:6f:d2:00:40:10:47:
2a:91:60:da:b6:c2:4c:57:75:42:29:3c:e7:12:bf:
34:d5:b9:a9:e8:d2:2f:a4:6e:3f:af:46:ae:64:cc:
13:dc:61:96:55:99:ff:8d:89:9e:0c:57:b0:42:ca:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:FA:07:3E:4B:51:65:E8:2E:82:F0:99:B8:24:E2:20:A0:DF:6E
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:22:11:a2:e2:ae:60:29:ad:93:c3:27:50:50:53:ff:5f:b1:
dd:ad:82:33:5c:48:54:a6:47:23:56:a7:44:c0:cf:fb:f8:ee:
8e:3c:be:e7:c2:10:9d:d0:a5:8e:42:ec:61:c3:f7:a3:34:70:
33:2c:34:f4:a9:0c:df:b9:66:59:c0:a4:55:7c:77:91:9c:f5:
45:35:53:59:10:e6:3b:0d:fe:38:d3:ce:2a:03:c9:cb:ed:42:
72:2a:45:56:79:20:b1:e7:27:e2:23:30:a5:9a:d7:39:ad:e3:
ff:e4:8e:f3:3f:79:d0:52:76:48:fa:f5:31:a8:24:d7:68:bc:
9a:ce:05:e9:65:07:ec:3e:32:5b:4f:14:8e:8e:03:30:b7:b1:
0c:28:e6:dd:c0:e5:63:25:f4:a0:34:eb:4f:42:b1:68:ce:d3:
51:9c:9d:88:2b:ef:63:5d:e7:2b:40:30:95:6a:80:96:3c:a8:
31:3a:c3:87:b2:75:db:ba:b8:ef:4b:58:50:5e:a2:34:68:c9:
1f:35:ff:4f:0f:fd:56:71:3f:14:91:3b:e1:71:b6:ba:83:c5:
14:97:8c:05:98:22:6a:ea:4f:d7:c3:82:ff:82:7a:84:1d:72:
65:f4:0f:c4:dc:22:7e:cb:68:dc:c5:32:24:e7:78:8d:a3:5f:
f3:92:fb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:05 2025 by rpki-client