Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
File: ardZKec1zmWma9gtyotlHZhWzSw.mft (raw, json)
Hash identifier: y5OoA/EADmOp42as77xFBUpTlTnuOZL6MmZsI1qxlow=
Subject key identifier: DF:92:C4:3B:9A:AB:11:51:28:2D:73:CD:68:AF:4F:9F:35:CB:23:2E
Authority key identifier: 6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
Certificate issuer: /CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Certificate serial: 0198D73B7C9CA94A6F212941794F60FC5630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
Manifest number: 1298
Signing time: Sat 23 Aug 2025 14:00:56 +0000
Manifest this update: Sat 23 Aug 2025 14:00:56 +0000
Manifest next update: Sun 24 Aug 2025 14:00:56 +0000
Files and hashes: 1: ardZKec1zmWma9gtyotlHZhWzSw.crl (hash: /0IDBa89jkaXvfy5/LeOpn+ArFxVAeRqMvHBFDvygYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:7c:9c:a9:4a:6f:21:29:41:79:4f:60:fc:56:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Validity
Not Before: Aug 23 14:00:56 2025 GMT
Not After : Aug 24 14:00:56 2025 GMT
Subject: CN=df92c43b9aab1151282d73cd68af4f9f35cb232e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:69:27:15:24:bc:f2:6a:f4:ae:ae:db:1a:
67:c1:dc:f0:a4:b1:4a:5a:96:07:77:3e:96:de:d2:
3a:05:8d:af:16:78:bd:65:e3:e3:e7:c8:61:7e:ba:
56:f2:71:a0:f6:02:4d:8b:43:44:ca:a3:ea:a6:0c:
6f:15:f6:be:e9:6f:45:e3:fa:de:0f:64:98:d6:a2:
93:68:b4:66:af:99:54:57:96:4d:29:f3:46:1d:34:
58:73:6f:79:43:7d:77:90:3a:c8:60:08:30:73:0a:
93:fe:94:43:c0:79:9f:fb:5c:c8:9c:5e:f2:fc:0f:
9d:9f:5d:ef:31:77:fa:15:ec:4b:33:cf:8d:40:d1:
6a:63:b3:53:3b:a3:1a:62:38:87:af:59:7e:70:8b:
69:f7:ea:44:8a:24:b1:ee:98:a4:57:d2:a4:5c:3f:
b6:da:63:84:96:c9:b6:c8:20:83:7f:ac:39:71:29:
78:4f:27:c1:c2:06:15:b8:1d:a3:1b:20:ce:08:28:
82:c6:c0:8b:46:68:4f:5e:c9:d0:65:52:6e:21:b1:
ab:35:15:47:f5:24:f1:9d:1a:d3:e7:85:4c:74:aa:
ac:8f:3f:36:89:98:36:52:dc:5e:3e:7e:68:19:4d:
4d:4f:0d:53:6f:52:20:6b:55:9e:52:eb:e5:4a:2d:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:92:C4:3B:9A:AB:11:51:28:2D:73:CD:68:AF:4F:9F:35:CB:23:2E
X509v3 Authority Key Identifier:
keyid:6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2c:a7:17:2c:48:0c:4f:06:78:7d:4b:07:8b:36:66:02:2b:
8b:08:e8:81:01:51:b5:be:3f:8c:b9:62:38:f4:bf:20:d9:0b:
50:07:9f:99:6a:b2:eb:71:55:fa:ca:11:38:1d:97:1c:78:09:
9d:fe:76:79:4b:ed:20:1b:99:06:e2:07:f8:45:c5:62:e4:ae:
6c:4d:ca:91:28:c7:65:0b:ee:eb:dd:1d:9d:88:e1:ee:d8:b2:
97:81:9f:f3:86:87:1d:35:81:dc:0b:17:a5:52:e0:e5:87:2a:
4e:1e:1a:56:69:38:bf:5e:3f:8a:9e:73:27:23:81:ee:50:ae:
fe:69:b4:5f:5d:32:e3:a4:2d:0f:c3:57:8b:86:a2:e1:52:12:
1e:fa:81:a9:6c:13:03:14:c5:6f:65:be:88:46:80:ae:30:f8:
99:3b:fc:26:6c:0d:44:e5:af:58:66:5b:cf:f4:20:c0:98:8f:
ff:26:58:9a:03:75:e8:52:de:a8:cb:59:37:8f:fa:6b:bf:10:
ad:3b:a4:a9:11:36:ac:e7:68:35:3b:42:d1:45:87:bc:29:7d:
a9:a0:61:01:cd:20:6b:69:ed:02:ae:5f:27:ff:b7:32:c1:22:
7d:01:0c:04:2f:4f:d5:fb:76:bb:8a:8d:25:80:74:ed:a3:2a:
61:ac:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:57:52 2025 by rpki-client