Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
File: rKcX8QfgYizkyz71KwFU-n-baS0.mft (raw, json)
Hash identifier: +1iJEhl4vF1mMTANs7tn3zRoNvi+7Pv0RETg58ZBscI=
Subject key identifier: A8:4E:E7:FE:7A:65:3B:57:AB:39:18:AA:E3:DC:DA:40:9B:2D:E4:AB
Authority key identifier: AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D
Certificate issuer: /CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
Certificate serial: 0199FBEC027A13F533FC7747663C74F7B968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
Manifest number: 1260
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: rKcX8QfgYizkyz71KwFU-n-baS0.crl (hash: HIbdxQzZkwA7X1pbxr1B1/TlyEynWvUUEhpmHoCMxkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:02:7a:13:f5:33:fc:77:47:66:3c:74:f7:b9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=a84ee7fe7a653b57ab3918aae3dcda409b2de4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:db:65:18:6b:83:96:af:0d:17:7a:0f:0d:
6b:ab:47:d1:d9:d9:28:8c:7c:57:aa:e3:1d:19:23:
83:95:e9:a1:a4:04:a5:f0:e7:7b:25:c7:e3:c1:16:
cc:be:ce:71:69:78:c0:5e:60:83:ff:21:0d:ed:2b:
aa:24:e8:3b:53:ce:65:3d:1c:06:37:08:69:30:1f:
fd:60:ea:de:58:7e:25:ed:46:da:74:fb:13:d4:c2:
45:5c:47:4e:83:79:04:a5:2c:82:72:1a:bb:8b:0c:
66:5a:7e:5a:d3:bb:a7:b9:1b:79:70:06:34:8f:ff:
81:ef:21:9f:53:6f:4b:36:da:c7:04:7f:d8:65:3a:
b9:2f:b3:39:4d:e5:fb:be:f1:f7:19:e9:da:ba:38:
6b:09:ea:56:56:de:f1:b0:73:41:18:4a:07:fc:a4:
85:5f:7a:f0:1e:e4:61:37:a8:f9:b4:74:ec:47:90:
a5:5e:c7:92:ee:cc:cb:d4:c2:3c:10:82:3e:ab:73:
ea:d6:0d:99:48:af:23:16:b1:f8:77:1a:5d:09:d0:
fe:53:5d:1c:44:da:68:54:de:6e:eb:a3:7f:12:27:
4c:33:54:c3:0a:0a:3b:b3:54:f4:cc:12:0e:70:f4:
0c:0e:bb:b0:46:08:35:4d:50:1c:7a:e2:f9:25:c0:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:E7:FE:7A:65:3B:57:AB:39:18:AA:E3:DC:DA:40:9B:2D:E4:AB
X509v3 Authority Key Identifier:
keyid:AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c6:e1:f1:5d:59:0e:94:cb:32:15:e5:ca:4a:49:f5:59:9f:
31:87:e6:3e:79:f6:99:e0:15:d7:9e:f4:6e:a6:63:40:1e:44:
f9:89:d0:3a:64:5d:64:38:82:93:f4:d9:84:09:60:72:aa:b3:
82:48:b1:d5:e7:df:48:a5:63:da:29:25:17:ac:7d:8b:86:00:
30:d4:e1:5c:a3:47:b2:6c:ac:89:ef:13:a0:bf:5a:33:66:ee:
23:24:72:38:16:76:b7:74:23:0c:03:77:7f:cb:8c:2c:75:ce:
cc:8b:2a:1b:f9:df:0a:ac:23:7b:44:5c:b9:d4:86:13:75:c7:
7f:bb:86:0a:8f:7b:6c:fb:12:72:da:0d:bc:03:4b:98:46:18:
58:43:6c:b1:67:c6:a2:6b:b1:63:ce:24:34:a0:dd:b2:bf:d0:
8a:1e:dd:da:ef:98:0d:29:3a:fc:87:7d:ed:c8:58:c6:80:9d:
6a:e4:43:15:6c:f8:5b:16:37:85:39:dc:ff:46:6b:f5:53:03:
70:73:33:49:09:dc:8d:2b:f2:ff:03:90:58:7d:a7:c9:ec:27:
8f:60:00:f1:1f:82:27:2d:a6:dd:94:f6:eb:78:b9:2e:0f:4f:
59:0e:c3:45:82:ed:3b:14:f6:76:c3:70:f9:2e:b7:f0:06:a5:
22:19:7f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:31 2025 by rpki-client