Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier: fNQSJVH9DTbOCGxrjhtvJl2+4QC6LegN++ocdaCnaPg=
Subject key identifier: 68:72:6A:46:DF:01:41:C3:C3:95:B0:46:91:77:64:03:21:4C:96:F3
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer: /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial: 0198733D8F50FD4A58DAE2C192E397B3AAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number: 1012
Signing time: Mon 04 Aug 2025 04:01:10 +0000
Manifest this update: Mon 04 Aug 2025 04:01:10 +0000
Manifest next update: Tue 05 Aug 2025 04:01:10 +0000
Files and hashes: 1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: DDOxD9x+gwiWSae76me+yce0gGPW7Yf8KYvnkgs1Hio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:8f:50:fd:4a:58:da:e2:c1:92:e3:97:b3:aa:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91084f454139347933876d52634b41a1dd099db
Validity
Not Before: Aug 4 04:01:10 2025 GMT
Not After : Aug 5 04:01:10 2025 GMT
Subject: CN=68726a46df0141c3c395b04691776403214c96f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:b2:8e:69:5d:d0:34:30:51:e6:ea:2e:69:
3c:c4:92:8f:4c:68:ba:79:70:6e:c7:c5:52:13:58:
87:00:e8:8d:ae:62:c4:94:37:29:a3:38:03:2e:01:
03:a3:ef:df:66:31:aa:e3:0a:c8:fd:eb:80:c3:2e:
e5:2d:a3:eb:76:75:bb:5c:8c:98:f1:89:94:c2:b9:
f7:f5:30:77:c7:77:85:19:69:0e:15:c0:2f:66:ae:
e5:73:e5:ec:09:5f:ce:17:96:4a:cc:f7:d5:c1:2d:
3b:42:ff:06:b1:50:0f:6a:04:ad:04:57:14:ae:40:
df:aa:80:56:34:22:27:01:d2:c7:20:15:fa:1d:f8:
19:09:2f:c1:bd:37:1a:05:b4:33:29:42:45:e0:e0:
19:48:fa:bb:ad:ad:29:3c:9e:da:10:ee:a4:74:ed:
ab:2b:fd:ce:cc:f1:ad:70:62:4f:8c:6c:5d:01:da:
f9:c1:6d:4e:88:da:3e:7e:4c:5b:ea:20:46:ad:23:
46:f6:3a:f8:5f:79:f8:28:af:15:61:65:f2:6f:d7:
e8:55:07:22:82:20:af:f8:ca:c4:fc:51:ed:3d:89:
4e:4a:5a:77:3e:96:d5:00:fe:36:a6:f6:1e:4a:d8:
92:ef:d4:45:22:af:dc:7a:cd:8e:5c:92:15:9f:83:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:72:6A:46:DF:01:41:C3:C3:95:B0:46:91:77:64:03:21:4C:96:F3
X509v3 Authority Key Identifier:
keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4e:53:07:3a:b5:2f:31:52:ef:98:61:5d:d6:69:71:eb:66:
06:02:28:94:cd:67:6f:c7:52:de:2c:c2:8e:a1:1a:d7:df:a0:
be:81:af:2f:51:54:a8:d0:d2:b7:4b:ab:58:f0:af:37:30:2a:
65:8f:c8:6d:0d:bb:94:db:36:05:f5:9b:50:e1:17:a1:0c:8b:
0f:4d:81:74:73:f6:b8:c5:9f:d8:9a:c2:e9:c1:8d:47:2e:41:
43:5f:ee:20:79:92:99:7d:a8:28:4b:f8:d0:e8:58:85:9d:e5:
39:54:4a:e6:ab:28:4c:c7:65:37:69:84:01:2a:1a:af:20:c7:
73:c1:1a:5f:b2:a0:ed:b5:9b:f0:a5:20:77:76:1c:b5:aa:cc:
fc:a5:77:4e:df:5e:cc:3c:05:8d:cf:c8:ca:4b:b8:32:74:57:
74:d2:60:a3:9a:1c:91:9a:1f:2b:d3:25:a5:b4:62:50:70:b7:
23:33:b6:98:e8:7b:30:73:24:14:bf:36:0b:54:91:43:f4:8d:
ce:79:7f:67:16:cd:5b:2b:fd:55:45:69:8c:a9:f6:46:78:0e:
09:b6:f4:d6:93:03:e7:f9:b2:d2:5b:51:1c:96:56:e8:fe:78:
d8:85:d6:20:ac:f1:e0:79:66:fa:7b:15:2a:7a:d2:b5:e6:ed:
f4:94:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:06 2025 by rpki-client