Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
File: rCRVsahZvE1mGBdQVfDsiWB_BS0.mft (raw, json)
Hash identifier: 5irbdeP7SsA1HwNQH70kmb9mA3YU3XSw8fI1hVzTrfQ=
Subject key identifier: D4:4A:4C:09:A2:1B:3C:43:18:09:38:91:6E:CF:FD:FB:54:5D:5A:80
Authority key identifier: AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
Certificate issuer: /CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Certificate serial: 0199FD342274FD20F30ADE57B35BBB1708BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
Manifest number: 1420
Signing time: Sun 19 Oct 2025 16:01:16 +0000
Manifest this update: Sun 19 Oct 2025 16:01:16 +0000
Manifest next update: Mon 20 Oct 2025 16:01:16 +0000
Files and hashes: 1: rCRVsahZvE1mGBdQVfDsiWB_BS0.crl (hash: nJCzlXXj9XnbvAL3s9J+OICksy4jrlH1BP1E9VIGHhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:22:74:fd:20:f3:0a:de:57:b3:5b:bb:17:08:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Validity
Not Before: Oct 19 16:01:16 2025 GMT
Not After : Oct 20 16:01:16 2025 GMT
Subject: CN=d44a4c09a21b3c43180938916ecffdfb545d5a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:34:e8:ef:98:08:24:0a:93:88:cd:da:f2:
f2:cd:5c:13:3b:de:b7:1d:e0:62:1f:bb:72:4f:16:
3a:e0:38:97:e1:7a:af:08:94:5d:19:46:85:26:82:
3e:04:f1:1b:49:3c:80:00:ac:bf:55:aa:9d:fa:b3:
47:36:c3:51:7c:0c:5d:ba:24:95:b2:c5:ad:8a:c7:
41:c1:1f:ca:b7:f9:1a:f6:2c:91:42:8c:2e:c7:83:
8a:06:af:86:bc:29:59:0a:68:68:d0:b9:72:3f:cd:
90:8c:45:e0:32:c0:72:d9:7c:e9:b8:5f:78:02:64:
5e:de:1e:31:1e:6c:9e:bb:5c:03:73:dc:e9:c4:4e:
e4:17:88:df:9b:f3:5b:8b:fb:21:80:3b:87:1d:db:
ba:27:70:b0:2b:bf:37:00:19:16:bc:2c:bc:c0:07:
bd:04:2e:11:a4:05:0a:87:a5:9a:e7:fc:5f:9f:b6:
91:ea:11:cb:39:f5:3f:4d:a7:6e:de:b3:77:59:84:
ef:bf:07:fe:c2:01:8e:78:3d:c7:5a:0c:34:45:18:
b5:ee:9d:bf:d9:cc:f3:d2:5e:1a:5e:7d:b3:48:10:
77:e8:09:7d:84:dd:4c:d2:d3:5f:dd:b9:8f:91:0d:
1e:8e:61:bf:46:2f:b6:b0:c5:46:7d:67:ec:37:0e:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:4C:09:A2:1B:3C:43:18:09:38:91:6E:CF:FD:FB:54:5D:5A:80
X509v3 Authority Key Identifier:
keyid:AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7b:aa:0f:73:43:93:4e:b5:33:0a:c8:c3:fe:5f:72:dc:88:
54:de:a7:ee:09:97:55:80:2a:e9:15:b8:2e:e8:18:9b:86:7c:
71:b5:3c:c6:a8:eb:cb:c5:7a:0b:cc:61:3c:ab:fe:2f:0e:c1:
55:41:23:68:1c:ba:56:ca:f5:87:f8:84:2f:d1:67:51:09:39:
92:37:98:e1:4f:19:2f:ce:64:0f:dd:80:d2:b0:b5:06:f6:81:
56:aa:1e:85:a1:c8:53:db:37:80:a4:01:98:08:f6:de:6f:fd:
b0:f8:5d:bb:0d:b8:a0:c4:58:87:8f:63:55:43:41:18:84:ec:
a0:cc:00:a7:a6:c0:79:db:da:54:3f:83:a1:8a:ee:69:59:65:
70:c4:fb:8a:77:c7:12:3f:94:14:bb:25:3b:3b:95:75:1e:54:
02:e0:3d:bd:96:9c:10:1e:b8:9e:55:85:44:7c:fa:a6:d8:84:
11:6e:9a:5d:57:62:4a:87:51:c8:ed:85:e9:ef:41:93:a2:61:
20:93:36:fa:b4:47:53:0c:43:7c:b1:70:fd:be:aa:29:ca:f7:
32:14:af:37:51:60:c3:f2:39:2a:0c:a3:d6:33:2f:96:ea:da:
43:d9:3a:7c:03:2d:57:21:53:6c:ea:d4:a9:30:11:82:20:0b:
0d:f0:c7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:55 2025 by rpki-client