Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: UKgoyWddkXcjO3CTED1PQb2dP76tXStVfQ2M6vduCZI=
Subject key identifier: 41:DF:84:CF:85:7F:E5:7D:5B:13:C7:ED:CA:96:DC:AA:FB:1D:F7:28
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 0199FDD9801895AD27E3879F916CE7B75FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0BB1
Signing time: Sun 19 Oct 2025 19:01:53 +0000
Manifest this update: Sun 19 Oct 2025 19:01:53 +0000
Manifest next update: Mon 20 Oct 2025 19:01:53 +0000
Files and hashes: 1: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: 9sslRx8n3z7lhXFeUtm9/Nc9y7P8RQzjJZTQpUHCVmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:80:18:95:ad:27:e3:87:9f:91:6c:e7:b7:5f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Oct 19 19:01:53 2025 GMT
Not After : Oct 20 19:01:53 2025 GMT
Subject: CN=41df84cf857fe57d5b13c7edca96dcaafb1df728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:12:c2:8f:59:3c:f4:79:da:10:93:dd:4e:
27:38:40:db:5b:8f:47:e6:fd:67:73:ac:74:aa:8a:
bf:40:91:58:0b:24:37:87:36:80:61:8e:ca:ab:9e:
36:a8:6b:7b:14:ef:f3:fc:d8:f2:41:2f:5d:08:70:
49:73:86:ec:57:85:d0:17:18:04:fb:3d:f0:27:00:
eb:56:5a:b3:ec:08:bf:85:aa:a9:e2:c6:96:70:7f:
5c:ff:fc:d2:71:e0:77:40:08:fe:6b:8c:13:26:c4:
67:70:75:ad:c6:e2:09:76:31:30:b2:e9:f9:d5:44:
af:7b:26:34:f5:01:24:1d:18:60:fa:37:23:fd:59:
a8:d9:c5:0f:fe:ba:1d:7d:3c:fd:e8:b0:e9:aa:88:
0d:74:ea:ae:ff:c3:03:89:a4:13:da:1d:31:ee:e6:
fa:53:74:2a:eb:ef:35:1f:90:97:7e:59:43:1e:e8:
42:c2:39:16:8c:3b:4a:5e:64:85:05:e5:34:80:4f:
b8:0a:51:10:60:13:56:3b:69:62:b0:5f:63:54:5c:
75:3c:e1:d8:a6:34:a3:08:be:bb:5c:48:04:74:6a:
3b:5e:57:22:34:56:d6:04:b5:35:60:eb:03:aa:96:
9b:77:92:f2:55:c2:30:0c:e8:7d:46:c3:b4:14:57:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DF:84:CF:85:7F:E5:7D:5B:13:C7:ED:CA:96:DC:AA:FB:1D:F7:28
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a3:ed:e5:97:ab:2f:24:97:3e:0c:53:0a:2c:7e:5f:b0:dd:
90:24:39:15:55:cb:21:b2:9d:1c:33:57:23:1b:73:fd:ac:76:
0f:c6:ce:7c:b9:bb:a2:53:a5:3f:5a:f3:37:74:f0:d2:fd:60:
2f:d6:88:3c:ee:41:44:6c:8c:dc:6e:d0:d3:5d:43:b1:0b:fe:
21:75:4b:28:2e:fc:27:a1:c5:66:9b:5d:3b:35:c0:ff:aa:3b:
01:aa:07:d5:53:df:49:c9:16:b4:f9:38:30:60:f8:c8:84:24:
c6:ff:21:38:e9:3f:f4:dd:96:90:b3:25:fc:ae:33:83:51:3e:
64:ae:20:2c:95:b9:f0:59:09:38:6a:36:de:12:fb:0a:f2:08:
07:f9:d6:b8:c9:60:dd:b0:0b:1b:58:16:db:19:71:1a:6c:ac:
d3:25:c2:9f:d5:da:fd:22:8f:57:3c:7e:5f:b4:33:ad:7c:9c:
90:97:5f:05:e9:aa:3e:58:8d:94:25:84:e6:60:af:5e:ce:b1:
69:48:e6:51:2d:e6:93:b1:85:00:77:9f:d0:ad:88:4a:9d:bd:
a1:6d:c6:f8:be:98:42:49:60:53:9f:88:87:95:4e:dd:3e:03:
90:1d:cb:9b:c5:fa:7c:b3:44:e6:92:f5:da:b2:45:99:f3:b3:
b1:bd:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:16 2025 by rpki-client