Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier: VIMnV9sgCtgjRyR6lJHo4JqeagCOFsiRU8vuh7UyniU=
Subject key identifier: 33:12:4D:18:CD:90:88:14:9D:73:53:5D:B7:9C:E1:73:18:60:DD:6F
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial: 01987E2F21439E9FDD2303A7CA7817CFC272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number: 1618
Signing time: Wed 06 Aug 2025 07:01:14 +0000
Manifest this update: Wed 06 Aug 2025 07:01:14 +0000
Manifest next update: Thu 07 Aug 2025 07:01:14 +0000
Files and hashes: 1: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: vGyztwC8fNzfVmMjaBEknnJuiAQkGPdI1/LmGvrNq90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:21:43:9e:9f:dd:23:03:a7:ca:78:17:cf:c2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
Validity
Not Before: Aug 6 07:01:14 2025 GMT
Not After : Aug 7 07:01:14 2025 GMT
Subject: CN=33124d18cd9088149d73535db79ce1731860dd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:35:5a:93:e7:46:4c:83:61:4b:d6:d3:d3:
43:b5:10:64:3b:a2:a8:34:9e:d8:f8:b6:b0:f0:71:
72:e1:3e:94:85:d5:31:23:7b:d8:54:8b:4d:05:08:
83:a0:2b:a2:c9:b8:db:8c:04:2b:69:49:06:0a:62:
31:87:11:65:86:4f:14:14:50:69:21:34:de:93:e6:
67:38:63:66:ef:16:62:ef:fa:d7:d8:62:5b:ae:84:
c2:e8:8a:33:9a:66:97:36:c1:84:81:27:14:0e:97:
51:fb:61:1b:d8:e1:66:50:63:17:99:43:60:51:b1:
65:04:94:ae:e1:cd:69:89:8f:6a:f7:83:df:32:de:
66:98:6b:b6:8d:1a:22:64:6b:78:63:50:be:65:8e:
20:6b:c7:0f:da:cb:a0:31:72:2d:91:a0:e8:ec:92:
82:b3:60:29:d4:0d:80:6d:67:63:86:1c:ee:24:1b:
2f:01:c1:aa:38:0c:43:a0:95:70:3e:0d:98:7e:b3:
f2:b1:f4:44:c1:2e:84:83:2b:cf:1a:e3:ed:fc:31:
7f:ab:59:5d:d4:8a:08:1a:f8:b4:c9:a1:3e:2f:86:
92:36:48:03:92:a6:ac:cb:bf:52:ef:d7:0d:bb:f7:
c6:5d:4b:1f:03:73:60:1e:1b:42:a3:71:cf:1c:8f:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:12:4D:18:CD:90:88:14:9D:73:53:5D:B7:9C:E1:73:18:60:DD:6F
X509v3 Authority Key Identifier:
keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7d:ef:fd:6f:fc:6e:88:99:e8:4b:3e:0d:6d:8d:64:9b:74:
50:5a:54:93:e4:89:5a:7f:99:70:5a:54:d2:a5:af:56:83:f5:
82:e7:11:c7:38:ec:43:59:b7:e3:a1:06:e5:5c:06:a9:70:b7:
ae:ee:87:35:a4:14:93:eb:23:9c:3a:fd:26:a4:33:af:7b:e2:
6c:84:e0:e0:ad:a1:b3:36:b2:3b:71:18:6e:f9:c8:c0:56:90:
45:3c:2b:31:a5:da:c9:91:d6:01:ab:e6:99:f3:8d:19:e5:53:
ac:a9:81:d1:8a:7d:13:ae:ba:4b:23:6e:1f:32:1e:3b:8e:6f:
8f:e7:3d:82:11:94:41:0c:ae:6a:db:ff:27:a1:1f:d2:6d:72:
36:ce:ff:cf:d9:b4:ee:89:71:0c:95:c2:a1:db:b3:0a:c6:21:
7a:cd:02:83:08:48:56:b3:6b:f2:9d:de:97:e4:69:48:65:00:
90:a0:29:d1:59:98:88:0c:7e:96:22:18:ae:8c:31:ea:89:33:
c9:16:55:cb:a0:fa:33:a4:b3:3c:71:07:14:89:d2:fa:a3:45:
2d:2c:95:85:92:9c:79:ae:49:f6:34:78:49:be:9a:54:c6:22:
b5:4b:76:d9:58:64:1d:98:c5:8a:7b:e2:83:6e:86:43:6a:33:
02:b2:c1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:30 2025 by rpki-client