Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: 3X9p+cMVE3I6x4/1WdCEY0e4q+8FyaPFeLQ91tVZkFI=
Subject key identifier: 65:2E:E9:CB:FA:E1:DB:D5:4C:F8:C0:A7:1A:87:E0:E8:F0:E8:25:F3
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 0198A0F1B26FD78A02FAF824989F89B7A937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 1635
Signing time: Wed 13 Aug 2025 01:00:51 +0000
Manifest this update: Wed 13 Aug 2025 01:00:51 +0000
Manifest next update: Thu 14 Aug 2025 01:00:51 +0000
Files and hashes: 1: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: ERcaNYEkQgsSmNxVuw4p8HUvlAv932/Vu5wQFHsqzEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:b2:6f:d7:8a:02:fa:f8:24:98:9f:89:b7:a9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Aug 13 01:00:51 2025 GMT
Not After : Aug 14 01:00:51 2025 GMT
Subject: CN=652ee9cbfae1dbd54cf8c0a71a87e0e8f0e825f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:5b:25:45:9b:d3:2f:a3:a0:ca:65:08:b1:
4a:f0:ec:6a:09:e9:71:97:1d:fc:91:e9:9a:3f:31:
c0:68:e1:3f:98:9c:86:b6:a7:2f:58:e3:43:30:ca:
c1:40:e2:5f:7c:d5:54:17:d3:32:85:3d:fd:42:9d:
b5:f9:33:ad:f0:57:b3:ae:ed:b0:a1:0d:1e:7e:a8:
93:b9:7d:86:7d:85:e5:32:a4:67:32:66:98:33:f1:
04:2e:8a:f0:db:2d:c6:41:c5:61:1f:b3:60:a8:16:
f8:87:97:70:70:25:31:ce:fe:18:04:9b:0e:48:85:
23:a4:61:36:17:96:0d:35:6b:83:6f:b9:39:cf:56:
67:47:e8:9b:ed:f4:a6:d4:1c:d7:19:57:f2:56:b9:
15:6f:c5:98:c6:ac:94:47:bf:a6:be:3d:77:68:d3:
db:0f:1a:cd:52:45:1f:37:e4:11:03:a9:a5:dc:ae:
31:fa:8d:31:c0:54:c5:75:60:bd:6a:a8:14:1c:ce:
9d:d3:24:f3:62:2b:f6:b6:e9:31:b8:5b:e1:61:e5:
f3:4d:60:d1:95:d5:fe:56:78:67:57:88:5c:99:1f:
1c:6b:50:52:e1:c4:6f:7b:8a:3e:44:0b:8b:94:43:
40:34:b0:0b:88:5d:06:55:a6:48:57:32:e0:c6:92:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2E:E9:CB:FA:E1:DB:D5:4C:F8:C0:A7:1A:87:E0:E8:F0:E8:25:F3
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d3:1d:ac:02:14:5b:80:0d:4b:64:99:5a:37:22:74:78:0b:
32:30:d0:3b:e6:f6:d4:ac:07:ac:0d:c7:45:8b:ea:dd:47:40:
4c:49:90:75:66:66:c8:ac:7d:f0:b9:02:ae:4c:00:74:88:3a:
12:22:98:28:03:c0:77:01:bc:c8:22:ad:9f:71:c0:78:b1:75:
e4:c2:38:2b:80:5e:52:f2:9c:ef:3d:fb:ab:16:d6:09:30:a9:
35:d2:d2:97:0e:10:a7:a1:c8:7b:a9:44:f4:b9:5c:d7:09:a8:
87:a6:e8:10:09:b7:87:7c:ed:d2:8f:a2:36:4b:3b:9b:70:8b:
54:02:7f:4d:bb:7a:ff:80:d0:24:c9:67:f8:50:76:a5:15:a4:
ab:2a:b0:bd:b9:d3:70:47:69:bc:eb:58:29:41:ad:07:1d:08:
05:e4:26:4f:54:93:45:21:fc:10:37:97:54:bb:cc:75:ef:88:
2f:fb:0d:c6:9b:a4:35:6f:81:c8:88:44:09:8a:32:93:21:69:
be:e2:da:ac:c0:f8:43:56:4b:02:39:09:d9:2d:63:36:e5:a3:
11:ab:7b:ee:39:51:fa:b4:43:88:34:05:fb:62:73:74:5d:41:
63:8a:02:38:7d:6d:b3:6a:6f:24:53:08:94:04:25:29:b1:f7:
21:b9:2b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:42 2025 by rpki-client