Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier: ov7rRiCj1xIZkyLculu6N/HE4hqBExIEy4saUMzVfrc=
Subject key identifier: D2:2F:66:DB:D5:D3:36:FC:63:7B:EE:DD:4B:8D:AB:02:3F:8A:10:47
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial: 01987ED359BA3572F74283A36290E37C8053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number: 0F41
Signing time: Wed 06 Aug 2025 10:00:36 +0000
Manifest this update: Wed 06 Aug 2025 10:00:36 +0000
Manifest next update: Thu 07 Aug 2025 10:00:36 +0000
Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: wwxCd4xvsfAwbghuXFU53nCPlU+HeA0NXGdGoGkyOuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:59:ba:35:72:f7:42:83:a3:62:90:e3:7c:80:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Validity
Not Before: Aug 6 10:00:36 2025 GMT
Not After : Aug 7 10:00:36 2025 GMT
Subject: CN=d22f66dbd5d336fc637beedd4b8dab023f8a1047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:6b:45:ce:cd:0a:2f:b8:9f:16:76:73:97:
9f:97:5a:ed:32:58:2c:a9:cc:cf:e7:eb:b8:c4:a5:
21:e1:c9:3f:3f:77:97:8b:dd:07:a6:36:8c:24:fd:
22:09:98:64:bd:83:c8:25:28:f3:02:72:44:d3:39:
02:22:42:03:ae:5d:08:d8:5d:55:93:60:d4:37:4f:
78:be:5a:00:06:c2:c5:95:8f:3f:d4:37:af:24:85:
dd:6b:7c:0c:fb:80:fc:1e:51:c1:97:d5:05:ae:5a:
49:0f:5f:4f:f4:e7:32:2e:e2:7b:3e:f9:42:6c:ec:
1b:0d:c8:0c:de:13:0e:3b:2a:05:e3:88:41:de:3e:
b1:75:91:08:dd:f5:b7:b4:db:8e:39:31:c5:57:2a:
8f:84:40:02:0b:d4:37:8d:2c:f3:64:8f:ed:91:6f:
97:1d:3e:70:12:f0:c7:a0:61:d9:e9:d0:e1:bb:93:
60:44:e6:52:3c:a7:56:f3:e7:d3:45:f3:b8:cf:a1:
7d:44:11:ac:96:bf:72:1c:f4:93:9c:b7:33:af:1f:
1b:5e:1f:02:fc:f1:d4:e0:97:22:4c:52:19:65:5a:
79:e4:4a:e2:7d:b7:75:19:65:9e:b4:81:e8:76:59:
74:88:69:18:00:f0:a1:a0:da:9b:44:4a:74:af:d6:
ad:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2F:66:DB:D5:D3:36:FC:63:7B:EE:DD:4B:8D:AB:02:3F:8A:10:47
X509v3 Authority Key Identifier:
keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c5:70:86:07:78:05:c2:dd:dd:58:ce:39:d1:6f:22:d3:dd:
2d:cc:11:77:30:ac:5a:dd:33:c4:d4:ca:04:f1:7f:00:a2:67:
e3:67:12:08:07:10:49:8d:29:37:d4:af:3f:48:3d:04:90:52:
c9:65:6d:0d:36:13:f0:3c:92:ca:cf:0e:a8:bc:3d:2d:cf:bc:
b4:03:6c:2a:c4:3d:0e:26:5f:91:2f:a2:35:9c:00:3c:e7:42:
90:b4:ca:44:ac:4d:1c:32:1a:e5:be:d3:55:39:d3:cf:14:18:
38:7e:6c:86:95:8e:9e:d1:c2:12:0b:46:54:70:75:e0:8a:00:
fb:9f:c2:b7:41:0a:9d:2e:cd:04:2d:ab:ba:58:73:af:8c:8e:
f0:97:19:ea:e4:bd:8b:48:bb:c8:92:6d:b3:6e:5b:11:77:41:
4c:70:ff:3d:16:ab:fe:c2:a9:0b:05:05:de:a0:54:6f:41:ac:
f6:a7:fc:b2:16:ec:cc:9b:77:a8:67:ac:6a:aa:28:fc:2b:91:
a9:92:ff:99:f1:da:8c:a0:3f:13:20:fd:e6:49:e1:d8:2e:2d:
c8:ac:a6:fc:15:53:b7:d4:53:c8:ac:da:bb:d4:05:0e:91:3c:
ed:41:ed:6f:81:6a:ec:77:fa:74:a7:2f:80:4b:8e:51:5d:e2:
c0:a5:a4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:08:12 2025 by rpki-client