Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
File: rKbqw5z6mj664iKLy9RXaD5Swgo.mft (raw, json)
Hash identifier: 8QvWM/3bhynG5iTxumAEAUeBzeIYaGWA5sqWYmFEUIc=
Subject key identifier: 6E:1D:AE:C3:88:00:BD:7F:CD:4A:99:DB:89:A0:E4:28:EB:FA:10:0E
Authority key identifier: AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
Certificate issuer: /CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Certificate serial: 019887323A70C61D3A82B9BAFF170355E9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
Manifest number: 161C
Signing time: Fri 08 Aug 2025 01:01:12 +0000
Manifest this update: Fri 08 Aug 2025 01:01:12 +0000
Manifest next update: Sat 09 Aug 2025 01:01:12 +0000
Files and hashes: 1: rKbqw5z6mj664iKLy9RXaD5Swgo.crl (hash: 9uMDhGMSTGjHOvR3fmYeI2GOAeoFydP4qUwh8pWb0jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:3a:70:c6:1d:3a:82:b9:ba:ff:17:03:55:e9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Validity
Not Before: Aug 8 01:01:12 2025 GMT
Not After : Aug 9 01:01:12 2025 GMT
Subject: CN=6e1daec38800bd7fcd4a99db89a0e428ebfa100e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c1:3b:d3:44:2e:84:78:53:9a:72:6e:03:f5:
1b:6f:e0:23:43:28:de:2e:32:51:ed:fb:2b:cb:94:
3c:f0:eb:8b:1c:5d:02:dd:bf:0b:17:b7:da:c8:81:
2a:6a:0b:26:eb:2d:d0:83:75:1f:7f:a8:72:e4:2c:
b1:6a:d0:b2:51:8c:b0:a8:fb:90:69:8a:94:a8:23:
b8:90:d2:48:5b:d8:a3:2b:23:04:80:ec:e4:c9:08:
cd:fe:ab:62:42:9d:43:66:d0:f2:1a:86:45:2a:5d:
c6:b6:e6:f0:dc:9b:5e:f4:98:62:43:1f:4d:d4:f3:
13:b3:0f:60:d0:d3:7b:a8:bc:62:5a:fa:46:03:40:
a4:3b:a4:0c:99:6a:ba:5b:cb:91:60:2a:53:da:07:
7f:93:74:d6:6d:50:05:73:ad:44:c9:b7:fc:0b:f0:
37:e2:42:81:9f:0f:c0:9d:9f:a0:bf:03:e9:3a:d0:
15:2c:3e:1a:8a:21:00:98:f6:cf:39:29:55:24:e6:
9d:f6:a8:b5:84:3c:8c:d5:05:8c:63:58:a0:71:91:
ac:cb:80:45:a4:34:82:b7:74:04:c7:9e:ab:fc:ae:
1d:34:26:da:c6:7b:7a:5d:7d:ca:c0:5c:fe:3e:37:
7b:d5:20:11:74:a2:b1:b9:86:1d:7f:88:af:c2:9d:
b2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1D:AE:C3:88:00:BD:7F:CD:4A:99:DB:89:A0:E4:28:EB:FA:10:0E
X509v3 Authority Key Identifier:
keyid:AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:77:30:8f:15:46:41:06:c4:c6:a3:37:e7:39:9d:92:47:56:
57:65:af:01:02:62:29:bb:8f:bb:8c:82:84:99:57:32:20:4b:
d2:e8:77:13:8f:86:c5:88:3b:23:fb:15:3e:b3:0f:a5:3f:b7:
c6:ba:cf:73:6b:a2:0d:b1:7e:80:18:9a:71:97:94:9e:88:6a:
78:e0:b1:83:5e:b2:47:de:a2:1e:29:32:35:cd:41:af:4b:2a:
3c:65:73:35:c2:6a:54:80:03:26:df:4f:1c:b6:24:93:9b:df:
96:76:2b:46:32:24:94:f8:0a:3e:a4:da:56:f9:08:35:e1:da:
b8:93:61:27:61:9c:8d:64:bd:92:aa:23:48:3a:0b:6d:d0:41:
91:45:7b:b2:16:c3:64:fe:a5:fb:2f:29:42:19:ef:59:10:c3:
54:38:b5:f4:b0:30:89:cd:b0:ff:fe:52:35:4b:1b:4d:4c:c6:
6e:b5:a4:ad:45:e2:56:b5:3f:1f:5b:1a:8f:e6:62:ad:31:52:
81:a3:73:c8:54:50:5e:b3:3e:e9:34:bc:43:4d:35:c4:4a:69:
2f:47:e1:70:7d:86:f3:6f:5d:97:6f:92:05:6c:9f:3c:d1:98:
a6:ad:e4:5e:39:9d:ef:63:27:1b:87:fd:99:e3:6a:62:45:3d:
ad:51:89:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:47 2025 by rpki-client