Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
File: rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json)
Hash identifier: Xs+uXu5eoCcVlrjpaG9n51ZoZepMm6Mc5YmuYpc/Kr8=
Subject key identifier: 5D:F5:4B:53:C0:41:15:54:D6:3B:56:CA:BF:FB:C7:B9:95:35:9D:87
Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
Certificate issuer: /CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Certificate serial: 019922C3613A8500F0DC1E6C70C434CE7B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
Manifest number: 07A3
Signing time: Sun 07 Sep 2025 06:00:53 +0000
Manifest this update: Sun 07 Sep 2025 06:00:53 +0000
Manifest next update: Mon 08 Sep 2025 06:00:53 +0000
Files and hashes: 1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: L54PjBk61CEGvH/9YEIv2qU1oPhoFLRKQ4PcJIOqB0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:61:3a:85:00:f0:dc:1e:6c:70:c4:34:ce:7b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Validity
Not Before: Sep 7 06:00:53 2025 GMT
Not After : Sep 8 06:00:53 2025 GMT
Subject: CN=5df54b53c0411554d63b56cabffbc7b995359d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:51:22:46:29:a1:7f:a3:b8:12:55:69:5d:
50:51:1c:42:1e:c9:c2:3f:ca:61:d7:98:1b:9e:3f:
19:02:87:52:ac:6e:0a:cf:40:96:2d:8e:e4:65:8c:
53:be:18:50:43:6e:5c:44:6c:82:bb:d9:1a:50:96:
ab:52:d1:0d:8f:02:01:f6:ce:a2:f9:53:55:fd:ec:
fb:6d:da:1e:cf:ea:8a:21:36:a2:f1:74:a5:f3:6c:
1f:9b:5a:68:fe:11:6b:5c:0d:82:50:86:5a:1b:46:
83:06:9f:1b:25:28:35:fa:c5:48:40:06:40:57:d7:
41:f1:32:2e:3d:4f:6c:46:22:be:f9:7f:03:69:60:
56:3a:82:30:1b:5d:86:af:d0:cd:4e:82:ac:aa:43:
a4:31:33:16:1b:64:a3:04:4c:2d:2c:98:60:c9:77:
ea:a8:90:1f:19:1b:d7:43:e5:60:3a:6c:6f:88:0f:
05:3c:df:cc:34:fd:05:f4:4c:29:33:8a:28:a0:4d:
bf:6e:20:be:84:03:23:ea:40:eb:b4:03:d3:89:f8:
11:7d:c9:33:5f:f3:61:3f:63:63:a5:24:37:4a:30:
b0:d2:92:22:1b:a8:8e:0b:c1:88:e5:ca:74:cf:97:
85:d9:e2:87:90:ad:60:97:d8:c6:90:a3:46:30:7f:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F5:4B:53:C0:41:15:54:D6:3B:56:CA:BF:FB:C7:B9:95:35:9D:87
X509v3 Authority Key Identifier:
keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:05:0a:b8:f3:30:7c:26:24:0b:dc:79:9c:e8:95:74:10:1f:
2e:9d:a4:b4:3f:6e:0a:87:85:c5:25:7d:3e:a0:4c:a8:04:f4:
5d:92:cd:88:79:9b:6f:27:19:02:de:06:c4:0f:3d:f1:73:cf:
5d:43:e4:1b:2a:72:2d:0b:48:0c:ed:12:72:50:19:14:0b:64:
b6:c5:c8:80:ba:1a:bd:6b:e0:12:b3:ea:b6:86:d4:2f:bc:9f:
a3:0a:43:5f:2f:4d:a5:fe:9c:3a:d4:62:91:8a:e9:2d:fe:4a:
fa:48:69:ea:54:13:77:7c:20:bf:35:7a:18:5f:46:57:7b:f7:
08:48:9a:e7:00:5e:82:fe:64:45:04:9c:f6:c7:12:fd:da:20:
49:a6:41:2b:f2:7e:72:c4:47:6c:ec:8a:bc:ba:76:73:ae:42:
8b:f0:60:30:b3:0c:af:41:0f:2d:60:07:fd:e4:c5:47:56:6a:
79:8e:f6:97:06:34:0a:90:25:4a:76:c2:8b:0d:af:f6:8a:dd:
5d:88:7f:a6:eb:6b:13:c3:6c:91:d4:81:4b:69:3a:3d:82:5d:
9a:3b:38:2f:89:e0:39:65:a9:e8:fd:16:58:4a:5b:6d:7a:ad:
d7:79:6b:0e:83:8b:87:76:5b:97:18:76:68:dc:dc:07:f6:2d:
3e:90:13:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:18:47 2025 by rpki-client