Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: X/1SYHXVIo4aYog8oGlo042gckFffkgkGrXYZ/9Son0=
Subject key identifier: 63:85:A5:88:E4:3F:07:8D:F5:9D:D4:45:E0:19:07:51:E8:AF:59:3B
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 0198D515BF1EEA5547BE3256B630187D3400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 04:00:28 +0000
Manifest this update: Sat 23 Aug 2025 04:00:28 +0000
Manifest next update: Sun 24 Aug 2025 04:00:28 +0000
Files and hashes: 1: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: /7zFn9mSI8rF0Z+eFpIfyA9CiTOXFzrRHu7c7Hx/RWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:bf:1e:ea:55:47:be:32:56:b6:30:18:7d:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Aug 23 04:00:28 2025 GMT
Not After : Aug 24 04:00:28 2025 GMT
Subject: CN=6385a588e43f078df59dd445e0190751e8af593b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:a6:0d:22:10:bd:94:b8:71:6c:a7:6b:61:
bb:44:1a:6b:f3:80:12:59:a3:bf:03:2c:59:2b:4f:
50:7a:17:95:98:b0:8f:15:2d:43:81:53:19:d0:5a:
40:a6:d9:d4:2c:79:39:a7:26:3e:ea:dc:c5:31:09:
73:3f:ce:8f:85:58:8f:e9:2b:81:c9:9b:dd:bd:0e:
82:87:26:d9:e6:16:49:d7:5c:7d:fa:94:90:3d:f3:
3c:b6:9b:57:38:29:9a:94:60:48:b8:36:5f:cb:33:
92:61:16:67:a8:88:11:4d:94:3e:79:2b:16:ac:dc:
bd:10:58:b8:f1:84:c8:4b:1f:a8:62:30:9d:07:ce:
c2:6b:64:2c:49:68:25:e7:f0:77:a9:d5:ea:52:63:
e7:d1:3b:94:c9:4f:1c:6c:72:6c:0b:04:7c:33:45:
85:cd:88:b1:22:cb:49:ad:e9:8f:c8:37:48:dc:77:
72:fc:03:a8:e0:36:3e:a7:da:62:85:13:ca:83:f5:
b8:d5:81:b7:79:d4:cd:73:6b:39:48:fd:6b:37:04:
42:9a:83:ad:e0:6f:71:48:63:87:72:fc:d8:ca:49:
ac:c5:2d:6b:32:7c:46:09:55:34:1b:0e:fa:38:58:
71:28:07:c3:cc:27:5f:c6:62:57:aa:a0:b1:58:78:
fd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:85:A5:88:E4:3F:07:8D:F5:9D:D4:45:E0:19:07:51:E8:AF:59:3B
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d7:ce:f7:b4:24:45:d1:19:f2:27:34:67:b7:68:d3:47:43:
ca:39:15:7b:c5:ae:9b:09:84:ec:28:d8:d8:be:82:93:1b:4e:
19:fc:69:40:4b:7d:d7:4b:06:8e:11:bd:75:7d:8c:f3:a2:43:
d0:b4:d4:4d:3f:9f:8a:d2:52:83:75:86:a5:50:20:6b:a5:42:
0c:72:08:c3:db:aa:59:b6:f5:50:45:8f:ef:9c:6f:58:8e:1b:
b0:fe:2a:6c:26:8a:9d:0e:25:8f:f4:1c:2c:13:b7:69:c8:44:
e1:b0:50:fa:7e:1a:3b:20:d0:05:36:32:5d:eb:5e:fd:53:5d:
33:ce:04:c6:a1:3d:6e:63:84:df:09:6f:e3:41:68:a3:86:3e:
f7:f9:e5:e8:57:e1:51:3b:e1:2f:32:c2:a3:8a:9c:a0:a4:ca:
1f:7e:9b:86:6d:6e:0a:bb:45:2a:d6:d3:ac:f9:8e:f9:51:b6:
e5:0a:3c:e0:7e:99:d4:36:fd:2e:11:b1:ff:26:7c:dd:2f:52:
58:e6:dc:30:8f:97:32:20:ec:3f:0e:4d:2e:bc:fd:71:0e:22:
f0:b3:55:fd:81:22:51:40:30:41:d0:3a:3e:32:43:ce:c0:79:
63:c6:17:87:77:33:39:ed:5a:a2:94:de:2b:09:cf:62:de:69:
06:a7:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:45 2025 by rpki-client