Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
File: b_rHiuobz0OKYe-RUCRI9glkHS0.mft (raw, json)
Hash identifier: p6ipyFVH1qww2xS4Q/FeUiIrapv2NjzoPdey3etQmV0=
Subject key identifier: 93:8B:CC:01:C7:F3:CB:D8:4A:8D:E7:22:B0:91:C7:23:8A:8D:A7:A7
Authority key identifier: 6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
Certificate issuer: /CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Certificate serial: 0198752C0016A80623AEC5D59D686BB88F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
Manifest number: 12A9
Signing time: Mon 04 Aug 2025 13:01:14 +0000
Manifest this update: Mon 04 Aug 2025 13:01:14 +0000
Manifest next update: Tue 05 Aug 2025 13:01:14 +0000
Files and hashes: 1: b_rHiuobz0OKYe-RUCRI9glkHS0.crl (hash: koFmX1hX+mwLOW1uJxmEN1YFQlDwlg+fcp5al7yO+gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:00:16:a8:06:23:ae:c5:d5:9d:68:6b:b8:8f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Validity
Not Before: Aug 4 13:01:14 2025 GMT
Not After : Aug 5 13:01:14 2025 GMT
Subject: CN=938bcc01c7f3cbd84a8de722b091c7238a8da7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:97:38:64:43:90:07:ca:52:fb:ad:74:09:de:
30:3e:7b:9e:b9:63:49:5e:87:33:51:02:fb:e4:4c:
5e:2f:1f:dd:4f:1a:f7:f0:81:f9:35:d7:df:80:17:
b8:43:8f:c9:05:1c:f8:37:f9:e7:f1:e6:a9:fe:55:
ee:45:6c:17:6e:f0:23:bb:c7:0f:b2:75:43:bb:c5:
d7:41:53:dd:8d:2e:64:91:30:7a:fd:88:14:dd:aa:
c1:36:3d:e4:54:bb:ef:67:56:1d:98:f7:78:78:04:
93:6e:6f:8f:30:f1:1e:2b:bf:32:99:86:a8:cd:be:
b5:fa:75:e8:9f:d5:94:11:cd:3b:8a:ea:a7:66:cb:
a9:e8:35:b0:07:68:bb:9a:9a:6a:c3:59:34:51:8f:
de:e9:28:10:b6:da:d3:9f:02:09:eb:81:76:10:f4:
d2:b6:6f:0a:42:70:be:46:28:25:80:f3:4f:8a:15:
98:7e:16:70:13:d8:08:11:18:cb:67:21:92:7e:80:
37:ab:fd:a6:53:73:9b:81:3c:61:f6:09:73:e2:c2:
fd:75:c4:ed:ca:72:c9:78:38:da:42:4c:4b:90:a0:
26:d0:da:de:bf:02:28:05:8f:0c:0b:71:ef:64:70:
25:e2:ea:e7:27:c3:c5:41:50:49:ca:f9:e8:90:4c:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8B:CC:01:C7:F3:CB:D8:4A:8D:E7:22:B0:91:C7:23:8A:8D:A7:A7
X509v3 Authority Key Identifier:
keyid:6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d0:c5:c7:f8:60:7d:ba:07:15:96:4b:f7:b8:7d:e7:fb:b4:
04:95:5a:60:6c:b9:3d:37:b8:84:90:80:a4:1a:03:f6:e1:7b:
5e:42:6a:70:95:69:2e:d0:d6:d6:d1:53:71:51:f7:d9:67:cf:
58:c4:cc:4e:f6:32:6d:5e:dc:5a:a0:07:35:2e:86:99:26:fc:
f5:ee:ef:ff:69:14:bd:76:28:36:22:66:64:2c:c7:67:a0:c0:
55:02:86:27:60:31:4f:07:96:eb:96:ed:0e:c2:c2:e2:ae:6e:
74:02:40:6f:6d:7a:d6:7e:b5:88:4a:cb:f0:b9:86:72:ec:68:
24:b7:0f:9f:ff:38:1a:cf:5a:75:2b:39:98:97:44:24:b0:32:
09:9b:7b:50:6e:a1:e3:da:e0:77:48:a4:f1:f0:0a:5a:0b:36:
fc:7c:16:e2:3c:6f:c6:72:27:b6:56:2e:5b:cc:8b:3d:22:07:
d7:72:ed:b6:2f:dc:4f:18:f2:93:ee:a6:27:cb:69:55:5f:32:
8a:59:95:0d:4b:99:3b:0a:c2:cb:35:38:ef:1a:07:08:49:c4:
4c:33:d4:ad:73:f0:26:b2:de:d5:b2:5f:41:f5:0c:e5:93:cb:
3f:c1:7d:61:d6:62:31:91:38:9f:3f:47:37:63:e7:a9:db:04:
11:3a:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:00:02 2025 by rpki-client