Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File: C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier: IjzpM+XcZZ/Od7SNl29fE4l0bo/x0JYP/FVzSK+hkIA=
Subject key identifier: A7:71:C9:1E:BA:DE:4A:48:51:54:2B:3F:18:E1:B5:9F:3D:F0:A1:DC
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer: /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial: 01988B0F31C2AF4B4BD6D0FDD70A67936AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 19:01:25 +0000
Manifest this update: Fri 08 Aug 2025 19:01:25 +0000
Manifest next update: Sat 09 Aug 2025 19:01:25 +0000
Files and hashes: 1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: XfE/0GDLll6o9NWuVAcRTYGzyIZMN1IWpSWjavR+VeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:31:c2:af:4b:4b:d6:d0:fd:d7:0a:67:93:6a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Validity
Not Before: Aug 8 19:01:25 2025 GMT
Not After : Aug 9 19:01:25 2025 GMT
Subject: CN=a771c91ebade4a4851542b3f18e1b59f3df0a1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:5c:68:d6:9c:a9:5e:36:07:c2:d2:00:14:
4a:c3:b8:b3:fe:de:42:82:ff:a2:55:73:79:3f:8f:
ff:a1:1d:42:80:a3:c3:cf:1c:c6:93:5c:a5:1c:11:
31:6d:ae:ed:16:e1:97:16:10:c5:27:5d:a9:aa:ab:
58:37:93:dc:ac:36:24:1b:99:2c:eb:53:87:c9:55:
de:0c:1a:65:5b:85:74:bc:58:40:a7:c1:3c:14:c1:
4c:5a:d5:96:6c:ad:63:78:82:1a:70:5f:f2:3d:c6:
86:5f:e0:83:68:e2:e6:05:ea:ab:b6:8e:40:1e:f6:
ef:d8:35:39:7d:96:50:01:0f:7f:50:81:b3:53:90:
37:d2:41:e4:0f:17:0c:d0:41:ca:24:97:b4:e6:92:
fd:36:b6:1b:dd:4a:ff:60:06:8e:e6:3e:a1:6c:75:
da:61:c0:ac:e3:ae:c6:4a:5f:d2:9d:b4:8b:4c:cb:
e1:71:ff:f5:5d:5c:33:db:20:00:df:2b:01:8a:b4:
43:5b:e4:6e:fc:43:b3:90:cc:29:f3:00:23:7c:de:
43:cd:75:5c:7f:12:f8:dd:ec:93:17:92:58:e9:db:
41:fc:d2:73:89:a2:d4:d7:67:a0:17:f9:c2:ea:05:
88:29:1f:b5:96:e2:48:f0:77:09:14:bd:48:69:e8:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:71:C9:1E:BA:DE:4A:48:51:54:2B:3F:18:E1:B5:9F:3D:F0:A1:DC
X509v3 Authority Key Identifier:
keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9c:d7:1b:c7:be:95:31:9c:dd:90:1a:f5:00:d1:6b:9c:0e:
ce:90:87:92:ab:9d:21:0c:e2:a7:ca:d1:04:9d:75:e3:65:d6:
ef:6b:9d:73:7d:91:99:68:bc:fa:21:d0:0a:ba:94:59:97:21:
8e:f9:7e:7c:b2:d3:a1:87:04:d0:60:67:44:6b:6f:cb:d7:8c:
bc:94:4e:61:6a:59:00:43:15:a1:50:18:f1:32:e5:2f:5a:d5:
b4:e9:5a:97:b2:04:3b:31:4d:c9:2e:a0:7a:f0:ed:6d:4b:82:
b2:f4:49:62:56:16:bb:e3:04:9a:a8:66:1f:05:d7:8d:cc:36:
36:d8:ea:44:28:4c:4c:a1:7a:20:69:1b:2e:34:fe:3e:58:20:
19:4d:4b:91:e6:56:34:94:ef:15:30:72:07:a2:06:e9:3e:3e:
34:2e:12:03:c7:8a:0e:f2:27:ff:cf:75:4f:f4:71:49:da:4c:
60:88:0f:32:9b:f7:df:e7:b9:7c:92:d9:47:a8:d1:21:90:4c:
55:fc:65:e9:03:d0:2f:ed:9e:7e:a0:74:a5:e7:70:92:51:e7:
73:8d:22:f4:2d:cc:6c:52:eb:34:e2:4e:1b:c0:7a:85:8b:6f:
a7:64:de:6e:bf:ed:57:74:be:36:ff:7c:a8:56:8c:da:b8:a2:
82:1a:7e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:59:44 2025 by rpki-client