Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
File: rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft (raw, json)
Hash identifier: 4INFkD1sJr91fV3Pbwed6F4U4z662ZZGoBOqGnZKLfs=
Subject key identifier: 73:83:19:F5:02:ED:CE:F5:3A:97:EC:6C:17:3C:57:96:BC:92:0B:46
Authority key identifier: AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
Certificate issuer: /CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Certificate serial: 019921B19BADA1FF5C6CF38AC5359E97D385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
Manifest number: 0CB0
Signing time: Sun 07 Sep 2025 01:01:51 +0000
Manifest this update: Sun 07 Sep 2025 01:01:51 +0000
Manifest next update: Mon 08 Sep 2025 01:01:51 +0000
Files and hashes: 1: rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl (hash: pA5FSJdblZcF52J+Fe7Q7d4z7M7iMSIcxNt+DyV0Kj0=)
2: xdJCZN2-B2T_CDkACtSXidGS3do.roa (hash: s0jqLGTlnozuwukxMNuj9trb2i8A2O+cFtDeELQzX9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:9b:ad:a1:ff:5c:6c:f3:8a:c5:35:9e:97:d3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Validity
Not Before: Sep 7 01:01:51 2025 GMT
Not After : Sep 8 01:01:51 2025 GMT
Subject: CN=738319f502edcef53a97ec6c173c5796bc920b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:49:9f:01:7c:8c:03:9b:65:98:07:c5:59:
1d:8e:0d:55:3c:9b:de:38:5b:e1:c0:c8:5d:ff:00:
59:84:d7:c5:9b:e8:90:b2:3f:da:01:85:e5:ab:ea:
d3:44:1c:97:d8:e7:9a:65:af:6d:f5:fa:23:9d:27:
24:03:92:3c:51:9e:f0:d5:84:2d:c2:da:8c:a2:9b:
60:1c:92:15:a4:62:f2:c3:02:8e:fb:4c:19:c6:17:
be:ec:35:f6:78:21:ba:5d:e1:b0:cb:7f:a3:d3:b0:
1e:ad:04:97:bf:ea:61:33:b8:71:6e:6f:c5:40:30:
ac:09:bd:7f:ba:4d:1f:7e:10:1b:5b:55:6e:3a:f1:
7e:a3:d9:a1:e7:79:e8:6d:de:73:40:fd:ad:fe:19:
c6:83:45:28:23:5c:13:d9:67:75:88:b1:5e:61:cf:
fb:75:44:e1:65:af:ac:1b:b4:3c:89:3b:76:f2:68:
72:6b:79:02:43:f4:c8:cd:68:ed:34:7c:8f:48:7f:
11:80:f1:b1:c2:2a:c4:c6:3e:2c:5c:46:28:bf:48:
82:34:c8:76:ad:3f:ba:c2:1a:5c:96:57:7e:b4:d3:
f8:12:81:81:e0:dd:f9:c6:70:88:46:8d:f4:16:72:
ee:0f:de:bb:ef:1a:8f:56:3b:64:55:64:e8:ac:c7:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:83:19:F5:02:ED:CE:F5:3A:97:EC:6C:17:3C:57:96:BC:92:0B:46
X509v3 Authority Key Identifier:
keyid:AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3f:a9:d8:76:dd:08:a3:15:3c:c9:d2:dc:38:48:1e:a9:de:
dd:05:0d:bb:96:88:9f:2a:6c:f1:f2:79:08:06:92:18:47:bf:
00:d3:80:6d:f8:20:4d:fe:f4:16:b6:95:19:a3:b7:01:2c:64:
ef:db:3b:d2:1a:62:67:a8:ba:b0:34:8a:3c:91:66:2c:04:87:
6f:1b:01:9b:c4:90:6d:c1:40:6c:e9:e4:8d:63:18:2f:87:8a:
63:46:98:c4:08:ba:0e:7c:61:e5:d4:94:6b:87:8b:65:3a:00:
00:a0:99:a4:46:fb:9e:2c:b3:fd:d6:fc:ff:40:ce:17:80:53:
ed:64:09:c8:40:ad:ae:47:06:8e:cb:11:3c:d0:6e:1f:a3:e4:
95:e9:2a:59:fd:89:51:68:cf:da:65:7f:79:c8:ab:e6:e8:b5:
25:5c:df:2d:d5:76:97:6b:c5:04:b3:b1:c8:d3:c9:8d:b9:99:
a3:28:98:62:86:16:d8:34:31:fb:54:4a:73:8a:30:65:09:a0:
fd:6c:fd:b7:ff:b7:f9:57:c0:03:7c:e8:b2:57:06:15:17:74:
8e:b1:5b:6b:70:1d:cb:de:2a:57:e4:5b:25:41:dd:e2:ab:6a:
f6:91:a3:9a:ff:ce:2d:38:b9:2d:f7:7f:27:3a:92:d6:c4:95:
b0:c8:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:06 2025 by rpki-client