Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
File: rKbqw5z6mj664iKLy9RXaD5Swgo.mft (raw, json)
Hash identifier: qwrdTt/tdnT0+mrsmFqKWOgw02nK1ZsOFbt8GpU7qjM=
Subject key identifier: 67:E2:D3:79:B2:3B:9C:EA:AD:C4:37:90:87:F3:11:54:50:1A:59:17
Authority key identifier: AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
Certificate issuer: /CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Certificate serial: 0198D473C9E368A5A5C182A919162B828394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:03:34 +0000
Manifest this update: Sat 23 Aug 2025 01:03:34 +0000
Manifest next update: Sun 24 Aug 2025 01:03:34 +0000
Files and hashes: 1: rKbqw5z6mj664iKLy9RXaD5Swgo.crl (hash: BSJvkVR7W8ynzffkxv6O5or3PSrvJmrz3GXuSvQnzvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c9:e3:68:a5:a5:c1:82:a9:19:16:2b:82:83:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Validity
Not Before: Aug 23 01:03:34 2025 GMT
Not After : Aug 24 01:03:34 2025 GMT
Subject: CN=67e2d379b23b9ceaadc4379087f31154501a5917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:cc:c4:ee:e1:a2:e7:10:d4:68:49:7a:3e:
f6:5d:b4:bb:49:44:cf:7e:60:27:42:7c:d7:c0:89:
55:90:93:aa:c4:61:d0:b8:04:bf:96:62:bf:52:5c:
f8:d0:86:ab:20:5a:a6:73:b3:5f:9e:61:29:60:54:
d7:2e:3f:46:dc:79:84:1b:fa:19:3f:f2:78:74:ba:
9b:4e:12:39:ca:a4:f5:05:cc:14:73:29:9f:bc:92:
b2:4f:d9:71:66:80:36:f7:ae:60:cf:fe:a8:da:fb:
71:a8:e4:1a:b6:74:01:4a:09:21:50:d1:b2:11:6b:
15:a8:4d:96:01:68:af:e8:6e:16:a1:ad:d7:73:06:
6d:01:6b:b1:71:c6:a0:d5:69:ad:81:71:88:95:c9:
7f:d5:bc:ef:e6:91:f9:fd:21:fa:4d:54:dd:3f:f6:
6f:20:18:70:4a:f2:23:8c:6f:a7:18:c8:db:77:8d:
83:8b:6a:94:c0:0f:d4:6b:c7:c5:6e:4a:d6:ea:05:
01:79:32:21:d1:95:e3:c6:ca:1a:54:fa:6c:c3:24:
ca:10:9f:84:25:78:13:48:9f:94:d4:a6:3a:b5:7b:
56:8f:d0:c2:2e:ef:ac:21:d2:68:56:f5:51:73:ba:
af:c4:79:e9:cb:ed:0c:76:31:fd:d9:a4:8e:fb:66:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E2:D3:79:B2:3B:9C:EA:AD:C4:37:90:87:F3:11:54:50:1A:59:17
X509v3 Authority Key Identifier:
keyid:AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:67:1e:9a:0d:01:80:f5:a3:f3:8d:11:f1:68:24:9f:e9:90:
81:cf:12:8c:01:b5:37:22:21:c0:b6:09:c6:d2:78:f6:63:52:
f4:74:7c:e9:18:24:43:c2:97:8b:39:b8:01:8a:b1:27:2b:c0:
78:e8:f6:e2:aa:ab:7b:56:cf:64:bc:94:28:84:e7:79:cc:d4:
28:1c:5c:7e:33:f4:c0:46:6e:30:0e:61:86:af:0b:19:ea:e3:
83:f3:e4:dc:ab:18:b3:af:51:dc:2e:cb:66:aa:f0:f3:06:10:
06:f5:bc:22:02:87:a4:b4:c5:a2:db:46:7c:0a:b0:d3:aa:11:
9e:c5:f7:83:31:6b:38:65:5d:d5:e4:26:32:d4:2b:12:63:2a:
c6:d9:6f:24:32:50:08:40:cb:d2:19:8b:13:76:fc:b9:22:19:
9a:da:2b:fc:39:58:5e:c8:a0:23:25:6c:f1:44:1c:04:2f:ac:
4a:6b:03:4b:72:9d:3e:57:5c:80:28:1e:12:cc:02:7c:df:7c:
c6:07:12:de:5c:85:ac:dd:2e:e6:d4:c6:7b:ab:ad:46:05:86:
ab:2e:ac:e7:56:e6:6c:60:83:fe:5a:0b:e8:2c:71:8f:5a:4f:
50:3a:5a:ff:8e:5b:b6:e1:a0:1d:7c:c5:62:f0:87:25:ad:50:
54:ec:ed:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:47 2025 by rpki-client