Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
File: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft (raw, json)
Hash identifier: VHsyRs1BxbsvYcQKKJ8RPCn4ND1vkS8lgkbhcpYqaGU=
Subject key identifier: EF:52:1A:01:03:46:72:B7:96:0C:1B:D2:96:54:83:E0:7C:2B:A8:B8
Authority key identifier: 99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8
Certificate issuer: /CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8
Certificate serial: 0198D54E8A3DDB9A6507FF6849AB3683F981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
Manifest number: 1207
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl (hash: EOlhrVSrg+PUM3+1ufJlgEPO28e1QH/2QUJJIEsY6jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8a:3d:db:9a:65:07:ff:68:49:ab:36:83:f9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=ef521a01034672b7960c1bd2965483e07c2ba8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0d:5b:7b:66:be:a6:ce:a9:4d:23:ac:fe:bf:
58:24:1a:f2:57:57:24:59:53:3c:2d:b9:b3:5d:81:
71:3a:db:28:0d:2c:b7:9a:84:3f:15:ea:7e:ca:12:
a4:94:a7:95:c3:a7:36:bf:50:1c:06:e5:48:52:a7:
b3:ec:54:c3:9b:eb:47:2e:c2:3e:5b:07:de:8e:2e:
a7:4b:49:04:7c:7e:8b:16:9c:01:95:db:f1:57:a1:
29:a3:04:ef:d4:9d:4c:0c:e2:ab:94:d3:c4:98:2d:
be:34:14:e1:62:9a:72:99:75:34:ae:9e:fa:49:9f:
19:c0:b9:0a:d0:87:58:e2:de:2c:1a:4c:91:f7:0f:
cf:89:56:b2:1b:4d:b8:11:c4:79:fa:b5:29:6f:83:
45:3f:0f:98:ec:27:9d:5c:3a:d7:b1:71:13:b7:cc:
67:dd:35:3c:1e:1e:e4:c4:47:cc:36:22:7c:84:95:
fe:95:80:0a:ba:7b:c1:5b:2a:d1:05:77:e3:96:74:
a8:15:6a:1f:40:dd:be:13:b1:c5:6a:9f:b4:a8:5d:
fd:38:9a:cf:76:90:2b:44:32:64:b7:27:7b:27:e0:
d5:c7:3f:62:9f:54:15:43:b7:ab:aa:a5:0f:fc:63:
c0:bf:b3:34:64:47:20:93:aa:09:12:ce:be:33:55:
75:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:52:1A:01:03:46:72:B7:96:0C:1B:D2:96:54:83:E0:7C:2B:A8:B8
X509v3 Authority Key Identifier:
keyid:99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0a:c6:8b:3d:56:a7:a8:c6:c5:a1:de:42:1c:f6:4d:a1:ca:
43:c1:dd:33:24:bf:28:be:32:43:54:1f:fa:5c:36:6a:dd:f7:
d9:99:ff:d2:33:2d:19:dd:4a:83:9e:8b:d2:b6:cc:30:47:47:
58:15:95:c6:ca:8b:26:3d:98:1f:e2:f7:f6:d8:48:47:81:2c:
8d:1d:05:c4:0b:cb:9c:1c:df:0b:ec:b4:12:16:cc:9e:29:09:
6e:65:e3:7b:b2:63:ff:e1:78:09:c7:0a:f9:7e:0e:bf:4c:73:
0f:16:13:cd:ec:cd:c1:e3:4f:f4:4b:73:08:70:8d:ef:38:b4:
df:3a:f1:86:b9:93:c0:3a:44:ac:ba:b2:39:e0:9f:18:07:d0:
ad:87:60:47:60:d5:df:9f:16:fa:e6:60:9e:62:0c:ff:2f:55:
1d:96:c5:f6:95:23:9c:f3:fd:51:f1:63:80:fd:82:f9:17:81:
f7:99:e2:12:8a:ad:a7:4c:ea:27:86:2a:54:60:cb:5a:6a:85:
d6:ee:ce:4d:57:d9:2f:15:9b:fa:01:6f:4b:16:37:71:19:f2:
95:a3:40:55:63:b8:5d:4d:c5:8e:bf:fb:9c:b3:38:62:d8:d2:
12:d2:cc:3b:a9:3c:07:85:3a:a7:f7:b7:14:32:f7:d6:1b:89:
4f:cf:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:38 2025 by rpki-client