Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: Rs2exbezDCAlpW5OA63hiSL/DF0LzQu8fVbse4HtK1s=
Subject key identifier: A2:82:98:45:DE:3B:F5:3F:AE:6C:1E:8C:6C:21:08:0B:3E:3A:03:B6
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 01988EEC3156D62209A997BB048DFD576C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0AF3
Signing time: Sat 09 Aug 2025 13:01:40 +0000
Manifest this update: Sat 09 Aug 2025 13:01:40 +0000
Manifest next update: Sun 10 Aug 2025 13:01:40 +0000
Files and hashes: 1: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: is9HoqDLC6wzDAP+wR09eowlLAC5gUbooViqdvLWW24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:31:56:d6:22:09:a9:97:bb:04:8d:fd:57:6c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Aug 9 13:01:40 2025 GMT
Not After : Aug 10 13:01:40 2025 GMT
Subject: CN=a2829845de3bf53fae6c1e8c6c21080b3e3a03b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:28:f7:30:df:c7:1d:46:40:30:cd:49:30:1d:
fc:3f:1b:24:f2:e3:44:b1:7d:e6:1c:b6:f5:7e:18:
2c:73:54:9e:60:8c:7e:e6:d1:75:9b:8d:22:9a:3d:
e7:9d:79:d2:d1:1b:50:68:09:59:b6:b4:f4:f0:30:
a9:a0:49:88:3c:44:08:8e:1d:9e:25:14:c8:4c:7e:
70:e2:89:18:d3:6e:39:cb:bf:9e:3b:3f:61:68:96:
08:b0:2e:ac:01:a8:f9:d3:28:d2:e2:ba:7a:fc:7c:
12:dd:45:68:d7:81:1d:a0:0f:d8:fc:c6:c5:3a:c9:
3f:aa:0e:4f:49:76:be:54:55:24:3c:80:76:0b:be:
6e:e4:ba:75:88:ff:3f:15:bd:48:ef:78:6e:95:e0:
1a:35:56:f6:8a:7f:00:4e:85:98:89:b3:fe:e4:66:
1a:90:31:8c:89:35:bb:14:ef:26:4e:a6:ac:e4:01:
ff:de:cc:1f:17:5f:22:75:0d:31:3d:bf:fc:a0:fc:
39:77:c4:fd:bd:10:25:06:b2:a1:09:51:50:72:66:
85:8a:9b:04:3a:e7:15:e8:f2:bd:da:68:e9:5b:32:
00:96:79:41:2c:a5:c5:a3:63:b1:65:96:ea:f3:56:
9d:68:75:a1:eb:e0:b7:4e:67:af:f7:8f:d8:df:19:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:82:98:45:DE:3B:F5:3F:AE:6C:1E:8C:6C:21:08:0B:3E:3A:03:B6
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:57:5f:e3:d1:9f:45:56:bd:4c:ca:bf:f2:ec:cc:3c:42:41:
d5:1d:48:32:61:47:47:b2:e3:be:ed:5c:30:a7:1e:2f:8c:17:
0e:96:7a:c8:34:e8:fc:04:e4:82:d3:f1:ab:2b:06:4b:c0:db:
b6:74:9a:d5:70:dc:83:c6:91:1b:3a:45:30:91:76:6e:4e:c2:
87:d3:52:ca:97:ff:6a:9a:ee:e7:db:26:f9:7d:5f:80:f6:17:
ac:1c:ed:a4:e3:27:6f:8a:47:c0:a9:97:0b:6e:7d:0b:8e:71:
15:58:9b:c6:66:6a:f2:2e:0e:60:01:42:4f:2f:a0:1a:02:26:
e1:d5:08:81:b4:d4:0e:24:56:80:5a:6c:21:2b:38:e0:f9:df:
15:9f:b2:52:66:a2:2c:73:03:a8:61:4d:5e:22:d1:5b:cf:65:
c9:d8:81:b4:5b:95:8e:9d:d1:a3:70:8a:f0:1e:e7:c6:77:40:
69:19:bc:09:0f:a4:88:43:e8:1a:4e:64:cb:bb:0a:56:63:de:
b1:7b:70:77:1b:b6:f3:09:42:0f:32:34:ca:9f:97:ef:b5:d3:
3c:0c:76:ab:ab:4c:08:fd:63:a1:ab:99:2b:f8:72:2a:16:e3:
17:d6:6d:a4:fe:ec:89:bf:ce:ae:b9:9e:02:41:5b:37:47:44:
38:2c:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:36:26 2025 by rpki-client