Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: xAxQix+YNtkHCgY7Ey0h6KZEsXzUu9bEoxtMCQRsPz4=
Subject key identifier: 98:19:98:66:5D:31:2E:EF:A5:CF:49:60:CF:36:2B:37:C7:E0:8D:C4
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 01988EEB88736EC2BC99A386EF9F62933615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 13:00:57 +0000
Manifest this update: Sat 09 Aug 2025 13:00:57 +0000
Manifest next update: Sun 10 Aug 2025 13:00:57 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: NhmsoKFU46NZ1lg/8mE8xiM45UfdMq1y8R2+ihCY78U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:88:73:6e:c2:bc:99:a3:86:ef:9f:62:93:36:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Aug 9 13:00:57 2025 GMT
Not After : Aug 10 13:00:57 2025 GMT
Subject: CN=981998665d312eefa5cf4960cf362b37c7e08dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:89:e6:ba:7f:bb:cd:58:2c:6e:7f:13:06:
07:3c:a2:fd:c7:4f:5a:46:3f:74:0f:4f:52:1c:eb:
bc:e0:99:6d:cd:c7:0a:ab:16:3e:82:87:32:6e:6a:
12:24:ad:51:75:5a:5c:54:63:e6:1f:8a:4d:6b:21:
90:ce:e5:b2:86:5b:11:05:dd:b1:62:ca:3a:88:64:
b0:17:a4:c1:dc:cd:df:20:fe:ee:c0:4d:55:8e:8d:
ef:30:53:dd:40:d9:b0:2d:3c:81:d0:6c:92:82:f0:
05:c1:91:ba:4b:ca:05:69:99:5a:07:27:74:c3:14:
7f:a4:7d:54:ad:cc:a2:c8:a7:47:9b:71:e9:cf:bd:
cb:bc:79:15:18:09:48:35:16:f4:cd:7b:da:b8:eb:
a1:a5:d3:6e:88:b9:66:ae:ef:e3:ca:4c:0b:2a:2f:
e3:bf:fc:82:f8:94:63:3b:13:2b:0f:a2:3a:ef:d3:
01:11:8c:f3:b7:c6:70:30:e7:55:31:f0:92:4f:3d:
b4:3c:44:30:47:51:69:fe:48:a1:8a:bc:57:62:5e:
70:a3:40:54:0a:f0:54:fd:8d:fd:b2:77:bf:0c:55:
51:a6:01:fd:21:f2:40:75:01:fb:13:3e:45:5b:0e:
02:c9:94:8b:88:43:56:d7:f1:16:0c:d5:d2:62:0b:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:19:98:66:5D:31:2E:EF:A5:CF:49:60:CF:36:2B:37:C7:E0:8D:C4
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7c:4c:29:72:69:89:b9:9d:7b:49:5a:af:47:57:e5:04:08:
d9:3e:ce:e3:f9:55:29:7e:c9:5e:f9:fe:f9:70:6f:e4:8c:ab:
7d:ae:1b:3f:62:75:08:35:06:c9:c0:7f:7f:2e:41:2c:76:28:
13:7a:b6:34:40:1f:e0:bb:75:bb:36:b2:63:9a:d8:1e:0a:1d:
3d:33:68:74:52:af:d2:85:b4:8a:cf:a4:65:0b:b7:4f:67:20:
80:83:8e:23:27:be:2e:fe:98:fc:c8:76:eb:48:88:bf:36:e8:
e7:16:59:a0:5e:57:b2:10:be:7c:9a:d0:f7:62:92:9d:27:52:
4e:af:bc:f7:6b:a3:fc:89:b8:ad:06:0c:a1:ad:77:0c:d3:83:
9c:0e:77:32:e6:a1:0e:0b:e4:3d:07:d1:7f:0e:59:32:f2:33:
4b:4c:b9:98:48:b1:20:7b:6a:0b:a8:25:f2:d8:ac:11:6b:30:
0c:0f:71:e7:74:7d:64:f3:bf:7f:2b:4e:d6:f7:8c:fa:b8:7f:
73:fb:46:6d:73:98:cd:e9:3c:57:dc:bb:3e:73:3c:92:6d:57:
2d:6f:81:df:55:13:54:4c:ba:e8:dc:c8:32:d2:93:90:92:83:
29:fb:8f:50:06:12:6a:4b:2b:93:e1:2b:93:37:a0:2e:a2:b7:
bb:c8:9a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:02 2025 by rpki-client