Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
File: _CwEhVQA8w2Ng82ayoVo_H9KAYg.mft (raw, json)
Hash identifier: q08fBGfZhcNf50rXguODtXaXiNRYhFq6bCKANOZXJu0=
Subject key identifier: 41:66:DA:95:D9:7B:63:5D:79:0F:7A:E4:E1:EC:7E:C2:E6:1E:3A:9C
Authority key identifier: FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
Certificate issuer: /CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Certificate serial: 0198D473C6E7C86930E574CC1B428C6534B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
Manifest number: 1349
Signing time: Sat 23 Aug 2025 01:03:33 +0000
Manifest this update: Sat 23 Aug 2025 01:03:33 +0000
Manifest next update: Sun 24 Aug 2025 01:03:33 +0000
Files and hashes: 1: _CwEhVQA8w2Ng82ayoVo_H9KAYg.crl (hash: AWb9i9WkaMmO6N9KIat0aNT3UcyRGtTUqVpsh923U7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c6:e7:c8:69:30:e5:74:cc:1b:42:8c:65:34:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Validity
Not Before: Aug 23 01:03:33 2025 GMT
Not After : Aug 24 01:03:33 2025 GMT
Subject: CN=4166da95d97b635d790f7ae4e1ec7ec2e61e3a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:b6:70:69:f7:77:d2:11:66:df:c3:76:3c:
6d:24:d1:43:fa:ff:93:90:6b:97:02:ab:e0:b7:1d:
d5:dd:ec:74:90:38:b6:8d:73:38:3f:2b:94:ab:21:
0d:78:bc:a3:c5:af:1d:67:b0:0b:c1:04:08:4b:1c:
ef:b8:8d:09:89:03:89:d1:bd:36:aa:b6:04:18:70:
53:8a:5c:06:7b:3a:53:f9:00:a3:47:a3:c7:f9:33:
9b:0e:b4:90:dd:1b:c5:dc:63:79:af:d3:8e:f6:f9:
dc:b4:d0:28:ce:98:68:13:79:4d:0b:5d:e2:e9:8e:
88:5b:72:de:9d:5e:3b:70:d3:2b:88:ad:46:f2:b8:
a8:d8:0d:95:ef:0f:67:c7:23:b8:04:15:30:e7:28:
99:5e:de:6e:86:e3:99:78:9b:2a:70:8e:82:9e:2d:
95:60:39:2e:ea:5c:bb:0b:f4:f9:32:5e:39:c4:d8:
43:41:6e:32:11:95:0c:f9:57:42:44:3c:91:a0:22:
08:89:c3:2a:85:b5:d0:4d:ef:60:f2:fc:7e:ab:ac:
7a:cf:2c:a4:f8:8f:41:22:98:5a:6b:8b:76:78:0b:
53:57:3a:a6:c4:e8:17:f9:9d:c9:3b:ee:ff:ef:5a:
40:30:b4:79:d5:70:dc:7f:98:72:0c:dc:0f:2c:0e:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:66:DA:95:D9:7B:63:5D:79:0F:7A:E4:E1:EC:7E:C2:E6:1E:3A:9C
X509v3 Authority Key Identifier:
keyid:FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3f:2d:5e:60:29:36:37:89:85:05:eb:f4:67:60:ae:2f:12:
8f:77:2d:72:3f:cb:6b:a3:8f:57:9f:5f:4d:65:46:24:3f:b2:
38:01:cf:91:34:79:e1:24:a0:86:6c:3d:65:70:88:e6:a4:09:
35:50:75:b6:b5:0a:48:ec:a2:0a:70:5d:1f:65:78:ea:40:de:
0b:33:3e:61:3a:d1:d1:d7:69:de:96:12:2d:37:cb:e6:53:96:
92:b0:4b:79:6f:14:78:7d:ad:b3:7c:4d:93:bd:8b:80:f9:33:
aa:6b:b3:51:cf:cf:83:0a:1b:2b:25:fc:dd:56:68:8b:2c:32:
17:d4:79:23:f7:1f:9b:d6:59:4d:ab:b1:49:e9:71:a3:11:f0:
8e:32:91:e9:b4:23:7b:18:b6:b3:99:90:2b:53:7c:72:66:1d:
a2:aa:5d:ec:39:b8:69:71:13:95:08:32:df:8a:bd:42:99:81:
1f:ad:fa:7c:e1:6c:d7:48:95:13:ed:38:e6:2e:c2:51:bd:b8:
2f:21:0b:fb:56:92:2f:9b:be:70:a4:23:e6:31:5e:01:50:b4:
5b:5d:4f:32:be:9d:03:46:ef:91:7f:42:41:e5:7a:b9:0d:6b:
87:53:ad:21:00:e0:ae:09:e2:c8:3d:f6:89:f2:3f:41:f9:dc:
e9:61:00:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:39 2025 by rpki-client