Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
File: rnIxk3EEsmkAemyoPH_ZKes59Hc.mft (raw, json)
Hash identifier: SjMJ6iybcpd7W/TRFtq8PfmbC/l6Ir55hjcpGmeO3ZU=
Subject key identifier: 72:88:66:FA:38:8C:52:EE:E2:D6:C1:AF:B5:4D:45:F4:4F:87:76:F2
Authority key identifier: AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
Certificate issuer: /CN=ae7231937104b269007a6ca83c7fd929eb39f477
Certificate serial: 01987450605F4534D3A701FF126C77038E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
Manifest number: 15A7
Signing time: Mon 04 Aug 2025 09:01:21 +0000
Manifest this update: Mon 04 Aug 2025 09:01:21 +0000
Manifest next update: Tue 05 Aug 2025 09:01:21 +0000
Files and hashes: 1: rnIxk3EEsmkAemyoPH_ZKes59Hc.crl (hash: faeIeTnlNP6YGS/KcVw0vlXgLzUZ8o3RzCdbnEnQqsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:60:5f:45:34:d3:a7:01:ff:12:6c:77:03:8e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7231937104b269007a6ca83c7fd929eb39f477
Validity
Not Before: Aug 4 09:01:21 2025 GMT
Not After : Aug 5 09:01:21 2025 GMT
Subject: CN=728866fa388c52eee2d6c1afb54d45f44f8776f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:3f:dc:e0:95:52:65:e2:fa:d9:e2:e0:85:
a7:27:e5:b6:1e:ee:bc:91:22:82:77:fc:5c:1e:3a:
6a:aa:77:43:6a:5d:07:0a:eb:dd:5b:f5:51:f6:0f:
6b:e5:b6:8e:10:de:d9:c8:78:66:d2:8f:36:ae:77:
f0:8a:71:4d:2b:96:f2:03:d0:3e:6c:cb:5d:59:18:
5f:35:ac:ee:d1:b1:78:cc:06:37:f2:b1:52:fc:7e:
1f:6b:d9:53:78:28:49:2b:34:8a:76:3c:70:c5:d5:
42:1e:92:33:cb:c5:31:2f:f5:e2:18:4d:e5:3c:1d:
da:de:9a:5f:cb:22:8e:2e:c4:0a:4c:65:e3:00:26:
cd:fc:26:11:5b:47:de:f9:30:3c:1c:4d:d5:b2:33:
0d:f9:09:a2:90:18:40:d3:de:1a:5f:27:64:23:15:
97:8e:35:75:3c:1c:77:f5:a2:63:8c:2d:a2:ab:6d:
93:24:c5:b5:00:43:ce:2b:85:0b:08:7e:a9:3d:7a:
a8:5e:eb:79:ba:ca:a8:43:d5:6a:54:42:b9:ee:16:
bf:9b:0f:e9:d5:99:09:d8:09:1b:f6:7b:fe:be:58:
8d:59:d4:8f:84:ce:6a:c7:a0:11:95:ee:f2:5b:f0:
7c:95:73:a7:cd:00:6f:d2:0e:44:e6:da:32:09:fd:
06:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:88:66:FA:38:8C:52:EE:E2:D6:C1:AF:B5:4D:45:F4:4F:87:76:F2
X509v3 Authority Key Identifier:
keyid:AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7b:f7:db:af:b2:dd:9e:1e:38:83:98:93:e9:cf:f6:b3:54:
2e:ba:8e:93:85:96:4a:a1:66:eb:be:59:7c:1b:57:4d:d4:38:
da:56:c1:5b:65:64:2d:96:e5:11:df:8d:a0:5a:b1:73:8f:6d:
e5:38:10:92:3b:df:40:54:67:29:2d:be:69:53:29:67:9a:1d:
90:ee:1e:6a:2f:e8:76:fd:62:01:35:72:34:ad:f2:68:47:5d:
38:94:1f:68:3c:3f:e1:de:b8:65:49:86:bd:dd:c0:7d:c4:24:
13:15:61:15:77:cf:b4:af:0a:04:19:5d:4f:30:4a:03:22:03:
42:63:b6:db:c8:a3:48:80:54:a0:e0:38:c5:ef:70:e6:40:2a:
d4:e8:75:c5:68:06:47:2f:51:13:94:27:fc:da:0b:53:9a:5d:
16:01:76:ef:23:40:77:8a:f7:67:88:51:62:ab:5a:46:e5:bd:
9e:a2:d2:24:5c:54:c5:5c:3c:1c:20:4e:05:39:87:5f:27:a8:
4f:ba:58:58:08:a9:49:1e:2b:d9:61:bb:16:f3:c4:7b:4c:4c:
04:68:88:1a:84:33:06:a7:32:79:47:2b:5f:59:ea:93:42:17:
a3:a8:7d:f9:ec:51:81:91:0d:8b:eb:ab:20:41:d0:30:1d:ab:
51:33:b9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:02:43 2025 by rpki-client