Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
File: _KXnwS9jZpo_aAySaEpD-ohO0Uw.mft (raw, json)
Hash identifier: xu4uNBMT10GWuRZypKid5Cq9TzptiOBGLfZtORSeRGo=
Subject key identifier: 1B:93:10:5B:A2:02:55:9F:A2:88:E3:C1:6E:1A:ED:D1:B4:A4:77:E6
Authority key identifier: FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
Certificate issuer: /CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Certificate serial: 0198A0BB67EE88241C85E1370190A694A4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
Manifest number: 1530
Signing time: Wed 13 Aug 2025 00:01:32 +0000
Manifest this update: Wed 13 Aug 2025 00:01:32 +0000
Manifest next update: Thu 14 Aug 2025 00:01:32 +0000
Files and hashes: 1: _KXnwS9jZpo_aAySaEpD-ohO0Uw.crl (hash: gNtDA02WDGGUPLSWOiJXz63VopcRGzXB3ZyS/+ZIx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:67:ee:88:24:1c:85:e1:37:01:90:a6:94:a4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Validity
Not Before: Aug 13 00:01:32 2025 GMT
Not After : Aug 14 00:01:32 2025 GMT
Subject: CN=1b93105ba202559fa288e3c16e1aedd1b4a477e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:3c:a9:0c:0e:b3:07:c1:1f:99:fe:ad:d8:
cb:5c:34:f3:9c:1f:af:c3:39:80:a7:f2:29:4f:11:
28:2b:e3:93:cd:67:e3:b8:a5:72:35:d6:6a:2d:fc:
0a:c8:c0:79:73:d7:c4:37:1f:f1:fa:62:35:4d:d9:
42:19:02:a4:31:02:3a:5c:61:c2:e6:37:db:b9:8f:
72:96:e7:43:a6:84:27:c5:da:bd:ee:0c:94:4f:ec:
fb:f7:02:16:07:e6:db:a8:d6:9f:af:a2:f0:70:c7:
dc:04:b3:05:ab:57:d2:19:4d:72:00:b9:bb:2a:5a:
43:99:78:da:1d:e4:b4:b9:24:dd:df:50:00:66:01:
49:78:07:b9:01:0a:59:25:ea:a3:bf:e6:9c:2a:76:
b9:14:d8:18:af:19:df:60:10:2d:8a:c5:66:b7:82:
19:2f:ba:f9:e4:3d:f5:8c:6d:1b:7f:cd:a2:93:a4:
39:1a:b7:61:ff:4c:6a:49:a5:30:20:61:79:6b:a1:
1d:86:63:f5:3d:86:6a:e1:2e:88:4b:ab:33:da:3b:
0d:92:f8:1c:5d:b8:36:ac:a4:9c:c1:45:f2:5d:19:
98:a9:65:3f:fb:95:95:7e:85:28:ac:94:05:4b:e1:
b6:a4:f9:55:ed:93:8a:a5:d5:66:a6:5d:50:75:47:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:93:10:5B:A2:02:55:9F:A2:88:E3:C1:6E:1A:ED:D1:B4:A4:77:E6
X509v3 Authority Key Identifier:
keyid:FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ff:40:1e:88:6f:2f:ae:c6:bc:f7:8d:b2:d7:43:1c:75:13:
85:91:26:31:85:c5:19:29:4d:ba:1a:15:07:b7:b0:c2:b5:36:
fb:65:8b:93:ed:d5:2c:c8:d6:ef:1b:4b:e4:b0:08:a5:80:b8:
de:75:7d:cd:60:45:65:85:8a:94:3d:22:df:76:53:ae:24:32:
cb:43:a8:ad:ec:70:0d:aa:11:8c:d2:b3:be:42:61:76:05:bb:
dd:e4:56:6a:27:32:d3:03:96:60:c4:f9:cb:c2:95:e8:39:ab:
ae:7e:a3:6a:2a:f6:8f:dd:01:a9:75:de:c1:fc:b6:8e:a3:a5:
65:6c:41:8d:e8:c7:52:52:9e:15:bc:44:ed:f6:a4:cf:3b:7e:
f1:0e:0f:56:75:45:ae:9e:6c:ea:81:5f:4d:17:12:29:9d:42:
73:a7:de:d6:40:a8:92:e4:d8:50:83:5a:53:40:ad:77:16:12:
18:05:12:d4:d4:c3:91:ff:38:eb:ab:46:5d:53:8e:f2:a3:f0:
d7:cc:67:c3:b6:b9:2b:2b:b8:61:48:de:a4:3f:37:3f:82:f5:
d6:eb:6b:bd:95:34:65:ce:e3:de:66:ae:a7:2f:9b:db:b5:f3:
66:69:2f:56:37:2c:c7:e7:d3:7a:6c:db:64:78:a0:c4:7b:77:
95:36:83:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:20 2025 by rpki-client