Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
File: rKcX8QfgYizkyz71KwFU-n-baS0.mft (raw, json)
Hash identifier: RLZaFYK/IIFyM3CJd4Q6GPp9/4a1ja8KQ0sAIVkJG5A=
Subject key identifier: C3:38:5B:EB:72:59:2A:01:04:EE:0A:77:AE:19:70:4D:92:81:5A:9C
Authority key identifier: AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D
Certificate issuer: /CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
Certificate serial: 0198D661011AF97CC9048E004F501408C331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
Manifest number: 11C8
Signing time: Sat 23 Aug 2025 10:02:18 +0000
Manifest this update: Sat 23 Aug 2025 10:02:18 +0000
Manifest next update: Sun 24 Aug 2025 10:02:18 +0000
Files and hashes: 1: rKcX8QfgYizkyz71KwFU-n-baS0.crl (hash: bLrMZvtFAXIxnyXye0IfUirpj/V/cPvzFfbzB90y9pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:01:1a:f9:7c:c9:04:8e:00:4f:50:14:08:c3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
Validity
Not Before: Aug 23 10:02:18 2025 GMT
Not After : Aug 24 10:02:18 2025 GMT
Subject: CN=c3385beb72592a0104ee0a77ae19704d92815a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:07:aa:c2:68:25:e1:89:b3:de:1d:50:5b:80:
3f:cd:4d:a8:23:7e:17:fb:49:b4:e8:13:2b:d7:71:
57:aa:8f:c2:00:3d:1f:f0:7d:51:22:c6:8a:7c:26:
f6:9c:7e:04:01:10:fb:a3:3d:e3:91:c9:66:ef:bf:
b9:7c:f1:20:11:9d:ed:58:7b:61:1e:cd:e9:46:96:
ff:0a:ae:a5:a5:e0:ff:bb:6a:4b:d3:8f:26:5c:e9:
9b:75:a7:74:31:43:cc:02:1e:af:b1:14:c6:a1:e8:
b1:dd:59:f4:51:66:b6:39:ef:6d:fe:19:87:61:6a:
4b:fc:e5:68:1f:02:ac:6e:4c:df:5f:8b:96:68:7e:
be:d2:92:c3:73:ba:98:37:09:7c:28:8e:38:ed:49:
15:20:cf:44:22:e9:a8:df:79:8d:da:55:fc:5d:26:
b2:75:8f:0b:9b:51:ce:45:2d:33:32:90:8b:68:98:
78:be:1d:69:3b:5d:24:3c:de:75:8c:0d:d4:cb:35:
12:36:db:96:b4:ad:ac:81:81:3d:d4:01:a6:96:23:
6f:12:b7:1d:4d:f3:a1:e0:d5:ec:a2:20:e0:c7:05:
db:b2:d0:ae:99:88:d6:6e:4a:15:a3:e9:e1:7b:03:
19:d3:b1:c8:76:c1:a7:6e:c0:d3:7d:03:1b:50:af:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:38:5B:EB:72:59:2A:01:04:EE:0A:77:AE:19:70:4D:92:81:5A:9C
X509v3 Authority Key Identifier:
keyid:AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:60:f4:c6:e7:c5:8d:8f:c5:bc:60:07:41:2d:b2:fb:01:19:
c9:e5:0e:a8:5a:4b:ae:12:95:99:c5:ed:0c:b8:6c:d0:3b:de:
15:55:66:a4:b7:90:58:01:fe:01:5b:c0:bd:5b:1e:c6:ee:e2:
84:30:ce:1b:7b:28:bc:34:42:dd:2c:79:73:8a:7f:f5:4c:9f:
69:71:a0:ef:c0:10:52:02:b1:7f:f0:f1:a2:35:e0:d3:2e:46:
08:1e:66:9b:f2:91:fc:5c:bf:bf:07:ce:9b:2b:c1:7b:32:e2:
3c:f5:9f:07:84:4c:c1:56:00:af:55:fe:e4:eb:cf:f7:16:ef:
cb:1f:ba:c3:a3:39:24:a0:31:3f:cb:38:2e:66:59:5e:de:cf:
d9:e3:bc:1c:f2:1f:0a:dc:4f:20:99:2c:8c:67:dc:75:95:96:
7e:43:66:e4:b4:8b:80:7f:78:3e:59:f6:3d:90:b6:67:40:6f:
23:0e:19:14:c1:ff:2a:74:e3:8d:5a:a8:6c:37:60:44:d5:cb:
6f:b9:19:a6:2c:35:a0:c8:91:2d:55:76:d5:6d:a4:64:6c:9a:
7e:53:28:30:26:46:23:5c:dc:f4:09:a3:eb:3d:7d:f7:45:9e:
e2:63:38:c5:e3:c7:a1:aa:e5:0e:b0:2f:86:e2:be:c2:c2:c2:
be:9d:7f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:02:53 2025 by rpki-client