Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: FsHIqOQ/KnkCc5PudNkSyh0lvGYu6kbfkh+xtEHK5LE=
Subject key identifier: 18:F9:B4:C8:9D:35:1B:6A:F3:18:DC:92:2C:DD:E2:30:58:78:92:E1
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 0198D4DFE3E1069AEECB1C8868643339E43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0ACB
Signing time: Sat 23 Aug 2025 03:01:39 +0000
Manifest this update: Sat 23 Aug 2025 03:01:39 +0000
Manifest next update: Sun 24 Aug 2025 03:01:39 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: myzlKm4baSOJGYDNpocUmLObor50Vx9ueUalwolrByM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e3:e1:06:9a:ee:cb:1c:88:68:64:33:39:e4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Aug 23 03:01:39 2025 GMT
Not After : Aug 24 03:01:39 2025 GMT
Subject: CN=18f9b4c89d351b6af318dc922cdde230587892e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:f5:58:e3:de:a7:c2:69:44:2e:a5:74:3e:
40:f1:1c:f1:57:db:a0:c2:c1:fd:c3:46:e5:3c:45:
33:37:80:de:94:01:e1:6f:63:ed:0d:0d:f7:0f:bc:
13:9a:73:cc:5c:c0:fb:d2:a4:f3:86:ac:5f:3a:38:
cf:47:72:66:aa:7b:0e:65:bd:4c:a1:33:8b:45:83:
d6:09:aa:e8:25:e5:9a:53:2b:b8:d8:a2:8c:f3:77:
4a:49:c5:6a:9c:6e:4d:7b:55:d6:aa:74:e5:be:02:
3b:97:d1:52:b9:a2:da:1b:f4:59:d5:9a:d2:e1:e9:
c5:ae:6c:0c:e3:89:9b:92:46:e4:6b:31:4c:83:8f:
3b:60:cd:82:d5:1e:82:9b:29:48:79:e8:e4:81:77:
a4:1b:16:fb:18:84:74:fb:0e:7c:71:26:3b:fa:80:
ce:94:6f:53:32:10:04:da:61:92:f6:ae:e9:b2:ec:
01:d2:9b:ab:cc:99:ec:8b:f7:5e:75:3d:bc:64:6c:
09:32:a5:9a:63:87:2e:00:ef:10:d0:2a:89:94:2e:
58:41:11:b1:bb:64:9e:69:b0:41:30:ef:e4:d9:77:
1a:a5:de:b0:2b:68:11:f3:89:9d:e5:80:b6:f0:77:
31:81:83:83:73:61:22:9d:0a:5e:53:be:d1:ea:36:
e1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F9:B4:C8:9D:35:1B:6A:F3:18:DC:92:2C:DD:E2:30:58:78:92:E1
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c2:90:93:40:2e:33:1c:9b:2c:32:e3:e9:33:55:43:1e:cd:
7f:6a:27:67:c7:fd:e9:ed:7a:33:e0:6a:f7:1e:9b:bc:0e:8a:
2a:e4:f6:b5:c0:11:f6:ff:2f:9e:80:4f:02:5f:e8:2a:92:74:
83:bf:b6:e6:9a:00:66:77:8d:3a:11:34:e2:ce:af:a8:65:72:
80:17:85:9f:22:c1:ba:f8:45:d9:69:da:b6:67:fa:f8:f8:f0:
e3:4d:9a:4b:d7:ae:37:1c:0a:75:b0:9e:9f:c0:af:f2:0a:42:
52:c8:e2:81:d1:6f:49:80:fe:c8:0c:76:8a:4b:21:cd:8d:c7:
9a:72:dd:c9:b8:ae:27:c7:9c:9f:03:ad:92:b5:e0:d0:ee:6e:
f9:ad:8f:02:0c:19:20:12:90:23:b2:03:fc:ff:4f:c1:19:0a:
2c:c6:5e:a6:f0:79:19:42:a3:95:30:43:c6:5c:25:3d:c9:e3:
c1:7e:fa:36:86:20:97:e8:67:19:0b:39:52:74:f6:ea:89:82:
db:68:90:cd:76:f9:e1:18:92:fd:24:7c:7b:57:e3:06:43:31:
da:85:0c:73:30:96:db:14:13:88:79:12:fc:4c:39:f0:99:db:
9e:a8:40:78:cc:f3:17:03:b0:0a:fa:d8:5a:13:33:4f:19:b0:
0f:3f:1c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:35 2025 by rpki-client