Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
File: cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft (raw, json)
Hash identifier: kOLe+BI0gU8uPqzkIDMobvlAYFKQzWYznT7jO0virrs=
Subject key identifier: 1E:61:CF:AE:B6:4A:90:62:F2:45:9F:9B:5A:18:CC:35:EF:69:2D:B3
Authority key identifier: 71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
Certificate issuer: /CN=711280b1338f12fc6f621c4c90560c7bc5908961
Certificate serial: 01987298365C59CFAE47D730F65F0A9D53E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
Manifest number: 09E8
Signing time: Mon 04 Aug 2025 01:00:34 +0000
Manifest this update: Mon 04 Aug 2025 01:00:34 +0000
Manifest next update: Tue 05 Aug 2025 01:00:34 +0000
Files and hashes: 1: cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl (hash: K5Ai0x4aW0XaAyvqsDAhtojgMUhqb32/v+h3JGpgnpw=)
2: myyHg-EZ7oPvLVMt0GMINU1S9Ss.roa (hash: uTCXVchkgOWKUqBTemAVamh0cjaPQ4ao1yqdp6r41LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:36:5c:59:cf:ae:47:d7:30:f6:5f:0a:9d:53:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711280b1338f12fc6f621c4c90560c7bc5908961
Validity
Not Before: Aug 4 01:00:34 2025 GMT
Not After : Aug 5 01:00:34 2025 GMT
Subject: CN=1e61cfaeb64a9062f2459f9b5a18cc35ef692db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:64:61:b0:a2:27:9f:0b:5c:22:c7:ba:23:ee:
92:e2:96:51:dc:42:4d:ff:42:d3:3d:67:94:cf:15:
53:34:d4:47:8c:07:b8:42:22:01:c6:67:bb:24:b4:
5d:e7:d4:73:b8:06:cf:76:0f:a2:c9:38:14:79:62:
e9:ba:59:d6:15:9c:84:15:01:05:90:4b:a9:c5:0f:
fb:e4:2e:fd:41:53:7f:8f:37:c7:18:2c:e5:ef:c4:
4d:7f:fc:20:0e:9e:66:5d:8e:ff:78:81:e4:e1:34:
b9:5f:d0:5d:c0:e9:6a:40:d9:89:12:fe:26:77:35:
48:18:7b:12:c4:1e:2c:d6:5a:4e:b3:91:8f:12:e9:
b4:02:0d:ba:3b:4f:30:e3:21:98:00:d3:c4:ce:1e:
84:ab:a5:09:c7:63:c9:f1:5f:e1:43:32:b5:26:5c:
fe:57:09:c1:37:91:94:05:49:56:eb:30:92:41:e3:
4a:6d:41:3c:5f:ea:0a:6f:0a:b0:9e:dd:e6:44:0e:
41:eb:2d:51:51:25:9b:a7:57:81:57:10:5a:34:ab:
35:e3:12:ac:ce:b1:cc:9d:46:54:2c:25:24:fc:27:
61:a1:9d:1f:03:5e:1c:7f:a1:72:34:48:e5:aa:db:
af:c6:f5:b0:85:fe:3e:67:c5:0b:fc:42:5f:62:21:
ad:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:61:CF:AE:B6:4A:90:62:F2:45:9F:9B:5A:18:CC:35:EF:69:2D:B3
X509v3 Authority Key Identifier:
keyid:71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c9:dc:50:0c:df:08:75:b6:d0:ba:1e:89:5f:3b:7f:e2:95:
63:93:87:89:b2:00:15:21:16:bf:67:c6:a6:83:8b:88:47:68:
8a:03:08:c8:ee:65:c0:45:3a:97:95:8e:31:f1:8a:4d:ed:19:
5e:61:a8:cf:6b:2b:ea:33:20:4e:7b:2f:e7:e6:6b:f6:bf:a9:
60:5a:48:ab:bc:19:11:3f:cb:12:69:33:e3:8f:2d:66:2f:a8:
67:5e:2b:1b:91:27:07:b9:0e:ce:dc:9a:12:08:1c:ed:5e:ef:
51:cc:e2:a0:70:58:16:0f:d0:00:dc:43:86:e1:85:74:05:76:
d1:43:24:ff:c2:32:83:c8:a9:3f:d1:ba:e6:12:0c:75:4f:2b:
03:48:01:11:45:44:d5:21:92:da:eb:f3:08:dd:a8:d9:0f:1e:
be:90:2f:36:0b:52:1f:34:cc:f2:cb:2e:ea:80:bd:2f:58:55:
9a:b3:db:6e:f0:5c:ac:33:38:c4:4d:bd:ed:0c:c2:c2:23:4f:
e8:bb:78:6e:79:df:7a:ee:ee:ac:75:6f:24:10:d6:19:a5:44:
41:cc:28:75:16:e3:eb:f6:95:48:22:50:9f:75:ca:cf:db:4a:
9c:71:64:83:8f:4a:1a:b3:d0:30:10:aa:48:2f:73:ca:cb:66:
13:24:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:19 2025 by rpki-client