Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
File: RK4A_ueCEKsEi0QODLKn9AyduMw.mft (raw, json)
Hash identifier: HRSPBPV14bPRjCqXgmGnHeOip4HsCdD7tiq6OXYmiIs=
Subject key identifier: 87:FB:9C:08:A4:56:E7:F9:10:CD:BA:FF:0F:47:4E:28:03:5B:DB:7C
Authority key identifier: 44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC
Certificate issuer: /CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
Certificate serial: 0198D5BB93011A6AEAC8BAFB249FCAE07606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
Manifest number: 0A73
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: RK4A_ueCEKsEi0QODLKn9AyduMw.crl (hash: MBGWUZNnrKhgib1N7UTMnIQXE8zuLQM87r3WDWVJpCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:93:01:1a:6a:ea:c8:ba:fb:24:9f:ca:e0:76:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=87fb9c08a456e7f910cdbaff0f474e28035bdb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:91:be:37:79:95:7b:fa:6e:3c:4a:63:1c:
4a:0e:e4:d8:9d:84:0c:7d:6d:24:45:dd:4c:9f:6c:
07:12:bb:33:7c:b0:f7:a6:0c:9d:3d:8b:e3:98:d1:
04:3e:7e:ae:31:a1:0a:70:d9:9c:35:4c:ae:7c:e1:
67:c7:c6:79:9c:f7:5b:15:b3:b0:99:07:b6:fc:7a:
78:2c:b7:dd:ff:48:47:70:59:f5:a9:e1:20:04:11:
eb:a7:a9:45:1c:72:70:15:bd:6c:d4:f4:11:d0:25:
45:b0:2e:75:5e:6a:86:17:fb:d9:59:8b:12:e2:31:
63:c4:57:95:72:d0:e4:c6:28:8a:24:c5:6e:23:16:
55:9b:be:07:e6:f7:c0:73:ec:99:38:b6:1e:92:73:
bd:ec:17:ec:61:42:3b:4f:3e:a3:f2:28:80:eb:39:
6f:ab:7c:f1:47:87:40:05:79:7f:ad:4e:65:f8:a5:
88:93:03:38:76:1a:a3:07:6b:db:fc:2a:53:7a:86:
d5:8a:07:d5:f3:ef:50:e2:4e:e3:e4:b9:cf:0d:64:
19:04:f6:19:dc:0e:87:f5:3f:97:00:8f:e6:e3:08:
ba:78:9b:b1:ef:89:f3:0b:99:07:89:9b:98:fa:30:
39:ba:bc:e8:a0:44:1d:8e:10:79:ea:71:04:13:92:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FB:9C:08:A4:56:E7:F9:10:CD:BA:FF:0F:47:4E:28:03:5B:DB:7C
X509v3 Authority Key Identifier:
keyid:44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:70:4a:11:58:03:2c:85:8d:8e:83:5c:d4:f4:6b:35:58:b0:
5b:b8:73:14:3c:d9:1f:d8:48:9a:b6:d4:a8:16:85:c8:da:42:
71:e2:f3:ce:4d:6a:f8:d8:1a:d8:d3:e4:80:cd:48:b2:40:3b:
88:f0:24:e1:3c:5a:e4:42:54:0e:31:a4:cc:65:1c:ba:76:b0:
d3:03:67:09:39:69:39:ab:68:08:1d:76:17:13:2f:aa:a4:6d:
f4:1a:fc:a7:4d:68:3b:09:38:fa:ed:01:33:3b:d6:ff:70:66:
f4:59:c2:ff:b5:26:3e:36:9c:fb:7d:ec:7a:1f:7f:d0:84:51:
a8:f8:44:df:f4:d1:b0:ff:19:df:b4:81:e1:c2:8f:25:dc:a2:
98:c7:b7:9f:25:f8:56:60:26:c0:be:8a:de:d0:c1:ff:63:f4:
ad:b5:24:ee:47:8f:a0:17:8e:9f:da:1e:00:a2:91:22:2c:fb:
5c:f6:52:0f:b4:70:42:c7:c0:1e:92:65:4c:52:88:fb:57:b3:
e5:f1:be:ef:c2:bf:73:57:e7:65:be:42:1c:d6:17:81:55:3a:
24:f2:2d:46:1e:2b:f8:df:bf:68:a8:8d:68:7c:28:c6:59:0a:
a1:f3:f2:d4:4d:f6:39:8d:87:72:3e:a1:b4:74:3e:41:43:6a:
04:b1:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:20 2025 by rpki-client