Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: iWscYjYqZZkchOB3jULcZHXmT7dRy9HX0wjgV+gaJyU=
Subject key identifier: 5C:FC:6A:0A:29:A4:D9:08:94:23:A7:6E:5B:FC:03:48:A6:FD:CA:98
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 0198D66015882F4AC6E1C40D570F060E2BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0B18
Signing time: Sat 23 Aug 2025 10:01:17 +0000
Manifest this update: Sat 23 Aug 2025 10:01:17 +0000
Manifest next update: Sun 24 Aug 2025 10:01:17 +0000
Files and hashes: 1: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: peKaKZudaPEVegohHxlNKmo1Wbk2ns7ZaL34BPUg1zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:15:88:2f:4a:c6:e1:c4:0d:57:0f:06:0e:2b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Aug 23 10:01:17 2025 GMT
Not After : Aug 24 10:01:17 2025 GMT
Subject: CN=5cfc6a0a29a4d9089423a76e5bfc0348a6fdca98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:2a:79:5a:40:be:34:ca:32:d2:db:8f:7d:
9b:89:62:d5:04:34:be:b5:b1:17:e1:49:ac:94:1e:
85:92:c2:07:99:dd:ef:ba:4d:a9:bb:f3:e3:be:4e:
98:b3:3e:fc:6b:7a:48:a7:16:84:b3:09:94:05:52:
11:25:48:a5:da:6d:94:be:6c:67:56:d5:eb:80:54:
ca:f4:8e:ef:c4:ee:1c:c4:be:80:35:34:b8:d4:4d:
24:08:b3:41:f4:df:fb:53:4c:4c:3e:19:d0:ac:5b:
87:5a:4e:cd:25:e4:c8:5d:fb:c1:64:9b:4b:c4:af:
9f:00:c5:90:50:1d:98:01:e8:0c:76:96:64:48:5a:
01:4f:b8:1f:b7:cf:02:99:33:06:a6:a4:88:f7:31:
70:8a:15:94:cd:ba:27:6d:49:7d:a4:e1:57:eb:5a:
8d:3d:65:e6:07:29:a4:cf:e7:12:ce:60:e8:a2:e4:
cf:ed:e2:12:97:5b:f0:ea:a1:6f:b4:43:c1:47:03:
c5:e7:86:c7:1f:bd:46:5b:67:6f:7a:0c:29:3d:39:
2c:ab:0d:9e:9c:ff:1b:98:58:6a:83:d9:5d:9e:2f:
8a:7b:f8:97:41:6c:e4:dd:df:c4:d7:08:87:1d:d5:
5b:7c:a2:65:f1:cf:67:37:ad:18:9b:77:13:9d:cf:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FC:6A:0A:29:A4:D9:08:94:23:A7:6E:5B:FC:03:48:A6:FD:CA:98
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b5:b8:01:cc:fe:49:e4:7c:57:56:3f:20:ee:75:64:3e:32:
ff:52:5c:ba:6d:00:31:b1:aa:7b:38:15:49:4d:15:c7:4b:c3:
d4:a1:34:80:72:88:1c:4a:60:60:eb:c8:c2:7c:df:33:1b:f9:
f7:f1:71:7d:64:c5:ef:f5:b8:25:7e:98:09:46:e8:ea:bc:78:
cc:94:6b:92:26:d0:a6:53:18:dc:30:7d:ce:16:0a:88:89:44:
4e:c0:2a:13:c8:59:95:f6:b2:63:55:fc:2a:e1:96:95:45:80:
d6:4e:2b:90:14:b4:e9:30:f1:64:4c:ab:31:43:32:6d:e6:10:
76:1c:57:fe:9d:30:99:21:b4:27:97:23:ea:2e:87:92:54:1f:
73:02:a2:ec:69:04:44:a6:d3:e3:0f:2d:6c:23:77:31:ba:dd:
d7:37:0f:23:f1:2a:d3:a8:cb:0e:a8:5e:d7:eb:5c:a7:44:70:
10:24:0f:ea:6d:39:b6:ac:45:c4:bb:fd:b0:26:81:52:92:37:
4b:85:9d:83:3c:56:5a:d3:18:d4:c4:1a:60:81:3c:76:cc:f6:
ed:7a:6f:0e:a7:34:b4:cc:84:63:79:e5:f5:0b:60:48:8e:e0:
c0:d0:4c:93:0f:bd:a8:de:91:29:cb:e4:0c:3d:ec:8a:35:2d:
ec:e4:40:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:46 2025 by rpki-client