Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File: rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier: p3vpI1fkrVWbUcUjH6NxWTLie9RXSDvr24mtBP74XpI=
Subject key identifier: 3D:43:B3:71:EA:18:9F:42:5D:B5:46:81:89:65:09:60:C0:35:D0:C3
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial: 0198D706077FED21826D161D816FF729897A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number: 1268
Signing time: Sat 23 Aug 2025 13:02:33 +0000
Manifest this update: Sat 23 Aug 2025 13:02:33 +0000
Manifest next update: Sun 24 Aug 2025 13:02:33 +0000
Files and hashes: 1: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: gIpLLqg/IUrw+/y3a4KUJoEc0nWrCJzM8CUHi//KgmQ=)
2: w5lUFfISkdR1rbXpw9EFPEpBgSE.roa (hash: aLxhVjIpLB1JtYTTNVzOUaAGXHTvMRlaiMUbkJdp7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:07:7f:ed:21:82:6d:16:1d:81:6f:f7:29:89:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Validity
Not Before: Aug 23 13:02:33 2025 GMT
Not After : Aug 24 13:02:33 2025 GMT
Subject: CN=3d43b371ea189f425db5468189650960c035d0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:1e:f5:28:43:a1:7b:c0:1a:e4:ae:92:d9:
21:98:19:20:ff:da:b3:54:63:cc:62:a1:4d:e0:60:
d9:c6:84:26:b7:09:a3:45:33:7f:7e:dc:cb:25:bf:
d7:92:35:f2:25:e6:51:31:5c:41:05:82:b5:b1:09:
f4:07:51:b4:c7:da:26:08:ff:39:35:8c:ce:b3:06:
75:89:c3:43:73:f9:ad:d0:55:b8:ba:31:69:b0:f0:
c6:c2:f9:bd:b9:83:e1:1d:ef:cb:86:a0:cb:04:22:
43:4e:3a:7d:56:36:05:79:f2:02:00:6e:cd:f3:d8:
fb:99:3b:12:7f:51:bc:42:80:a8:f3:f4:9c:bc:2b:
68:bf:86:aa:5e:1c:73:7c:99:5b:09:f9:c7:4a:9e:
85:2a:cc:ac:4b:ab:0d:51:b1:c7:be:85:9a:7f:20:
12:39:5a:a4:57:94:04:19:2f:94:58:20:af:5a:5c:
ce:c0:d2:ed:cc:78:ef:2c:85:e0:26:07:3d:a3:b1:
1f:17:42:34:5b:92:9d:23:01:26:fb:10:8d:38:e4:
72:d3:8e:15:1f:b1:41:48:1c:fa:76:3e:25:ca:ec:
02:3a:7d:74:74:fb:ed:33:2e:a0:14:5f:5e:27:55:
88:e5:8d:2f:bf:24:57:00:65:b3:16:2a:b7:70:43:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:43:B3:71:EA:18:9F:42:5D:B5:46:81:89:65:09:60:C0:35:D0:C3
X509v3 Authority Key Identifier:
keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0b:28:fa:2e:16:49:a6:1f:7b:75:a9:06:50:37:39:4c:71:
f8:1f:e5:c9:40:0f:b3:e6:c5:53:71:bc:fa:65:cd:03:cf:37:
c5:e4:8f:0a:c5:3b:1b:6a:5a:13:b4:92:da:0c:7a:54:2b:c2:
c1:67:9c:5f:42:98:1f:77:71:38:60:92:cf:bc:c3:87:2d:f4:
13:fe:1b:25:16:f5:c9:cb:ac:c0:03:79:c5:52:e5:74:ae:3b:
ca:fd:11:43:90:7e:81:62:9d:7a:11:13:ed:37:a5:dd:41:17:
64:e0:a5:31:0c:9e:8e:08:0d:65:ab:75:e7:d8:bc:65:b7:25:
f2:59:bf:52:ad:f7:77:1c:1d:1b:b1:1d:f2:87:05:83:4d:26:
6c:51:c8:5e:d8:da:23:b4:fd:e1:31:60:b6:76:f3:9f:2d:3e:
84:86:41:09:7c:65:82:b2:68:c4:ba:75:fe:4e:b6:ee:a9:fc:
af:87:4e:f4:43:65:79:f7:f3:e8:58:ae:9a:24:55:71:0a:d8:
37:bf:e8:c5:7b:61:73:0f:44:1b:6e:30:67:57:92:a3:3e:70:
1a:0a:ce:0f:c4:c5:f9:9c:4f:d8:fd:c9:fa:1b:b2:db:a7:cc:
c7:4e:0f:3b:b9:e8:35:41:de:65:93:47:27:4c:a7:35:28:e2:
c6:f6:7c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:11 2025 by rpki-client