Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
File: cIKkpfKWFe2f7k9nURSF40z3EuA.mft (raw, json)
Hash identifier: 1EOX7kR26wq6A8oJ+KxtnP0L99i6VQ+0kBHEs9+/80Y=
Subject key identifier: 83:9A:76:33:F4:5A:50:03:C6:51:D3:BF:63:3F:69:93:C7:6E:04:70
Authority key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
Certificate issuer: /CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Certificate serial: 019850B1261A24D9B177F10DBF4CCF77B6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
Manifest number: A0
Signing time: Mon 28 Jul 2025 11:00:43 +0000
Manifest this update: Mon 28 Jul 2025 11:00:43 +0000
Manifest next update: Tue 29 Jul 2025 11:00:43 +0000
Files and hashes: 1: cIKkpfKWFe2f7k9nURSF40z3EuA.crl (hash: DyVmmsN6p0BZbFxpa80kBcEUP+3rzBrgbL0WJTw1yrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:b1:26:1a:24:d9:b1:77:f1:0d:bf:4c:cf:77:b6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Validity
Not Before: Jul 28 11:00:43 2025 GMT
Not After : Jul 29 11:00:43 2025 GMT
Subject: CN=839a7633f45a5003c651d3bf633f6993c76e0470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:13:c4:c8:4a:7f:9f:4a:98:09:02:15:81:
59:70:98:3a:be:b7:24:72:1c:80:13:6d:d8:62:1a:
22:39:06:b6:74:88:bf:79:ff:c9:33:22:4d:08:e1:
55:a7:98:bc:b0:9b:02:73:7c:e5:19:d1:f8:10:b1:
e6:e7:53:06:40:cc:f9:3c:45:41:e2:40:ce:cb:24:
7f:a1:39:4a:32:39:d7:be:ac:b9:5f:3b:84:a4:07:
89:b9:81:0e:3c:2a:7b:2e:fc:b1:09:57:29:ed:fc:
4b:3c:a5:98:21:93:28:be:55:69:4c:85:73:d7:e2:
dc:0f:ef:39:63:e8:cb:3c:2f:51:cb:2c:fe:b9:6c:
67:87:e4:87:4f:c2:67:b7:a4:84:e9:b5:17:a0:32:
6b:ee:8b:94:fa:23:e5:08:90:01:e9:ff:e6:1f:4b:
8a:2a:8f:23:69:20:ad:d8:d1:73:a9:ef:8d:c3:91:
44:54:f8:8f:dd:1a:5a:25:c8:ca:ac:15:34:9e:54:
1f:a7:c4:8c:62:d2:b0:c2:07:47:f7:b5:7b:0a:d1:
8b:d1:79:81:3c:67:66:75:3c:99:43:d9:10:e0:7e:
87:0e:7d:fe:2e:9c:47:56:ee:af:e7:91:f3:7f:0f:
cb:a8:58:ea:5a:fa:e8:cc:bd:91:da:0c:52:8b:e6:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:76:33:F4:5A:50:03:C6:51:D3:BF:63:3F:69:93:C7:6E:04:70
X509v3 Authority Key Identifier:
keyid:70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:89:5b:c2:bc:3c:2c:03:aa:31:2a:73:a5:2b:f9:25:84:c4:
5b:2e:5b:70:36:a6:4b:93:5b:04:57:17:58:ee:d1:b2:77:e4:
7b:97:b1:50:8e:3d:b6:bc:e3:f6:4c:08:57:a6:7c:4e:2e:25:
5a:37:04:37:7d:26:22:25:9a:f4:92:18:70:2e:8b:61:82:78:
45:38:89:45:5a:b8:79:93:14:7c:33:1c:e8:15:bf:36:5d:db:
de:88:3f:7b:bb:a8:cf:26:a0:02:b0:b4:cf:24:70:87:6d:13:
7b:1c:3f:24:1e:72:34:52:3c:ce:65:f0:71:ef:31:47:d1:8e:
d9:bd:92:60:8c:a3:e0:38:d9:fc:0b:5a:2c:f7:ff:7a:f5:4d:
04:cd:ff:e8:65:66:e4:bd:e8:58:3e:87:53:fa:32:27:cf:75:
59:86:c7:f9:fa:03:cf:65:62:d2:fb:87:e8:67:65:c4:79:8b:
be:51:1b:47:ba:2b:af:af:6c:18:df:e9:73:76:8b:64:68:92:
af:f2:ee:d9:5d:b4:e7:50:e2:52:a8:64:fc:ca:a4:d7:6f:a5:
a3:43:9b:d6:1a:42:1d:b1:7d:50:aa:00:96:c2:bb:58:07:35:
38:aa:a6:5b:62:3b:20:42:ca:11:e2:d7:b2:64:39:51:57:31:
b4:2e:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 21:00:42 2025 by rpki-client