Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: u298gDsX9PODyWJzpcv3zIcQh2HGjf4meze9E5pv7gM=
Subject key identifier: 05:7A:39:5E:EB:03:44:C9:1D:D1:5F:85:D3:8C:99:62:D8:21:59:91
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 019873E38F1CC96B9C870C454A81302CE935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 1195
Signing time: Mon 04 Aug 2025 07:02:29 +0000
Manifest this update: Mon 04 Aug 2025 07:02:29 +0000
Manifest next update: Tue 05 Aug 2025 07:02:29 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: RLtnbWb0O7Ar1TJdkZzUeXkhbjE6POmW4F1yEkRqdeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:8f:1c:c9:6b:9c:87:0c:45:4a:81:30:2c:e9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Aug 4 07:02:29 2025 GMT
Not After : Aug 5 07:02:29 2025 GMT
Subject: CN=057a395eeb0344c91dd15f85d38c9962d8215991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:b3:c5:a0:99:a4:3d:98:a4:0c:d6:62:f5:
19:55:67:1f:fa:56:a2:07:95:6e:a2:f3:11:fe:92:
0d:90:c6:3b:48:5d:7e:ed:b3:0e:46:29:6a:f3:6e:
e9:7a:26:42:e9:93:af:66:ec:35:8e:11:96:71:39:
ae:89:07:4f:f9:e2:2e:cc:75:74:e1:a8:da:a4:18:
80:cc:17:06:ed:32:24:88:cc:6c:99:39:08:55:e0:
ce:e9:5b:57:72:4d:4a:02:f3:25:1d:b8:85:01:b3:
de:c5:69:cf:fb:e0:0b:14:45:d1:a7:86:8b:5d:ad:
66:38:13:70:f9:28:8a:61:79:b0:98:c5:e3:ba:5b:
f1:2e:88:54:24:3f:a2:67:53:0a:fc:ad:11:15:8a:
62:17:76:d9:21:a1:18:dd:1c:60:4d:b7:4d:85:f0:
b4:37:4d:5e:05:ca:e4:2a:a5:57:bc:2b:0c:0a:d1:
f4:45:b1:d5:a9:3c:93:56:cf:e7:c8:dd:b0:cc:12:
12:b9:95:12:da:f1:7f:6b:88:bd:ad:16:a5:58:b4:
c2:bf:ce:3b:8e:cc:ef:5d:b9:8a:98:eb:9c:81:a7:
9d:10:e1:44:d5:ed:0e:e2:70:28:5a:5e:a0:76:51:
42:d0:94:39:f5:be:f6:d5:16:0a:45:da:66:c3:28:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7A:39:5E:EB:03:44:C9:1D:D1:5F:85:D3:8C:99:62:D8:21:59:91
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:83:be:fc:23:aa:a5:bf:1c:a5:28:dc:a3:02:12:b0:87:4c:
12:03:cb:da:47:02:e8:30:6d:fc:3f:0a:b5:bb:d0:68:8b:af:
8b:c3:d8:0f:db:9d:d5:2a:f9:1f:5c:f6:41:87:b1:99:c1:0d:
3b:e0:91:3e:44:82:08:27:a6:60:ce:d1:90:4d:dc:98:b1:30:
68:31:f8:a9:9a:cf:4e:e2:e2:84:02:53:4e:01:8d:70:a1:18:
57:1d:c3:5b:2d:ba:c6:5a:c6:6f:b1:e3:85:5f:80:f9:b2:98:
24:3b:40:c5:0b:c7:a3:b7:f2:47:64:4d:45:58:d5:07:03:5c:
04:3b:ab:73:43:04:c2:83:b3:96:12:64:f4:a3:fb:cd:47:84:
31:46:2c:df:86:73:0e:b6:29:1f:a6:2f:6d:a0:81:dd:c5:aa:
ab:3f:af:54:94:77:f7:68:23:55:60:16:0e:e5:9b:cb:80:9e:
6e:3c:21:86:82:d7:e8:43:18:d0:0d:27:32:66:63:75:78:ff:
2d:61:96:d7:f8:88:9c:59:59:ba:eb:6f:48:b5:b1:a3:fa:c1:
e3:bb:e2:32:40:62:14:8d:9c:fe:33:9d:6d:ba:04:85:32:2a:
63:99:9a:c9:a8:80:ba:eb:86:7f:6c:b5:ae:a4:f8:44:b4:96:
14:bc:27:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:03 2025 by rpki-client