Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
File: cSsCxFx16_ctVtM8KAKXwq6H6y0.mft (raw, json)
Hash identifier: iRWalKabGm5nHMTIzbqFuHNN16KKOOwwUOaPRL4doU0=
Subject key identifier: 1D:00:A7:12:9B:FA:82:8F:A2:BF:CF:B0:A9:61:14:08:A0:FF:81:9B
Authority key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
Certificate issuer: /CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Certificate serial: 0198D54E8A6F3A1C48EC966186C54E2719E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
Manifest number: 0298
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: cSsCxFx16_ctVtM8KAKXwq6H6y0.crl (hash: 3Qr9ZVkFicHs/diJtjtnlzNExCNpxKD9/cB6SYycVBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8a:6f:3a:1c:48:ec:96:61:86:c5:4e:27:19:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=1d00a7129bfa828fa2bfcfb0a9611408a0ff819b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:f4:da:3b:e5:ca:a0:e8:eb:a8:55:a1:1d:
4e:c1:88:52:1e:73:1b:b2:9b:98:52:c2:fa:73:3d:
81:5c:95:e5:22:f0:15:b9:00:a4:01:f5:99:db:7a:
0f:d4:b1:bc:a8:7e:f2:ba:c0:61:98:ca:11:72:8a:
62:65:3b:4f:73:bb:9a:f2:51:69:69:89:08:90:b2:
d8:1a:17:d9:6e:ea:39:24:7b:23:cf:bd:7e:76:fe:
4e:20:de:e6:0e:f5:66:68:14:20:ba:a2:f4:95:af:
90:50:e7:ab:f5:96:92:5a:ab:13:57:12:cd:30:1b:
cf:26:8a:88:ac:3d:6f:4b:ec:90:a0:cc:ec:98:2f:
a2:52:f7:e9:8f:2a:d9:c7:8f:81:c8:d9:d0:10:10:
79:17:2f:ba:b8:61:9f:dc:d6:fe:bd:e0:a2:25:3d:
bf:ee:29:75:5a:d3:15:0a:0e:3d:7f:6c:73:56:21:
ba:04:66:e6:32:8c:93:67:2d:da:dc:a2:16:cc:70:
7a:d4:77:18:6c:1a:0a:95:ce:d1:96:fc:1f:51:59:
85:c5:39:78:a9:dd:e1:d6:33:7a:71:6a:a7:e1:49:
17:71:69:e0:26:3b:ab:a5:2d:12:d2:b4:95:20:75:
8c:b0:cf:40:ba:78:2e:a1:6d:e8:05:6a:bf:69:5b:
5c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:00:A7:12:9B:FA:82:8F:A2:BF:CF:B0:A9:61:14:08:A0:FF:81:9B
X509v3 Authority Key Identifier:
keyid:71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a3:c9:f9:8f:b7:8c:84:4d:40:c8:13:ac:76:20:a1:15:d7:
f2:d5:b0:cf:b0:84:b4:08:df:65:bf:86:19:03:67:7d:43:da:
5f:9c:2d:23:37:ed:45:97:9c:d6:22:bc:f2:58:bc:ae:03:81:
15:8c:3d:41:d3:ce:83:55:d3:4c:34:5e:ed:a7:82:3e:d8:ec:
0b:1a:42:33:03:7c:64:8d:b3:0f:b7:16:fb:a1:9f:d2:32:40:
55:a7:f4:b2:43:c4:e3:cb:dd:ca:3d:bb:ea:e5:b9:97:36:2d:
c8:4c:50:a5:9a:75:1e:48:43:67:1d:5e:5f:7e:8f:21:b1:32:
b4:67:2a:90:62:38:7c:60:93:79:0e:25:87:c3:90:f0:58:26:
f0:5a:82:da:83:2b:0e:b7:22:0e:a9:ba:ee:b9:16:73:63:ad:
47:52:81:b8:70:a2:0c:fa:83:a1:f0:df:0e:51:0c:f0:f8:62:
b7:e0:7b:38:42:d6:e7:f8:c0:19:a6:2b:e0:a6:17:78:1e:a4:
cf:b4:53:4f:d5:cc:80:e8:00:3d:cb:62:e8:88:83:ed:55:fb:
ef:d4:94:de:c1:66:70:9f:da:af:23:7f:f9:f2:1b:9b:94:b4:
84:5e:53:b0:5b:22:38:ba:54:c0:38:54:a8:58:60:59:35:cf:
27:5a:fd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:13 2025 by rpki-client