Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft
File: pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft (raw, json)
Hash identifier: leLADpkS9MkExoIae5Tigbghrr8ymUOnOXAEaZs6dQM=
Subject key identifier: 1E:D8:24:A1:41:7C:D4:B5:20:13:7D:44:64:59:13:2E:27:A2:7E:C3
Authority key identifier: A6:4B:46:87:1C:64:DD:AE:40:44:2F:C9:21:66:76:C5:40:74:38:F9
Certificate issuer: /CN=a64b46871c64ddae40442fc9216676c5407438f9
Certificate serial: 019921B247FD060FA5802F3BEE8360EE2F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pktGhxxk3a5ARC_JIWZ2xUB0OPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft
Manifest number: 18
Signing time: Sun 07 Sep 2025 01:02:35 +0000
Manifest this update: Sun 07 Sep 2025 01:02:35 +0000
Manifest next update: Mon 08 Sep 2025 01:02:35 +0000
Files and hashes: 1: pktGhxxk3a5ARC_JIWZ2xUB0OPk.crl (hash: i9J63PMmOKETDDIOJKkZf4dPQI27iFLwPoDfkq6EAx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pktGhxxk3a5ARC_JIWZ2xUB0OPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:47:fd:06:0f:a5:80:2f:3b:ee:83:60:ee:2f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64b46871c64ddae40442fc9216676c5407438f9
Validity
Not Before: Sep 7 01:02:35 2025 GMT
Not After : Sep 8 01:02:35 2025 GMT
Subject: CN=1ed824a1417cd4b520137d446459132e27a27ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:43:bd:13:2b:4c:63:00:ce:7f:84:45:34:
54:49:89:9d:c8:27:7c:cb:b6:d7:43:3d:6c:0a:37:
7c:6c:bd:1e:7f:00:06:46:ec:77:c6:88:39:23:2f:
44:ae:24:d7:c9:bf:90:8a:af:e4:51:5b:8a:e3:ed:
4a:e4:ea:66:53:cb:d4:32:bf:24:e7:55:1b:76:29:
ff:8c:72:92:11:e0:60:0e:d9:cf:05:3c:31:c6:c3:
4d:2e:ca:d0:c3:75:bc:6f:68:82:5e:4b:bc:3d:b6:
5d:44:82:db:04:6c:d2:98:cd:8a:7e:89:e9:1e:48:
7d:7a:3f:08:84:c8:f5:06:57:d4:71:97:d3:4d:74:
7e:4d:eb:cf:4c:db:42:94:85:4c:a7:33:20:49:62:
7f:cf:7a:c0:ee:6b:75:ae:c8:a5:c8:8b:52:82:a0:
0b:36:8f:b7:49:1f:7e:16:2b:bb:1c:65:a5:31:19:
ac:8f:27:f8:1f:ab:5c:70:76:3a:84:cb:d8:32:71:
7f:13:a1:45:1b:cb:b2:cf:58:b3:f9:e0:fd:f2:16:
82:03:0d:25:18:94:e3:8c:33:74:fa:63:17:25:ee:
33:a7:43:a4:7b:8f:52:19:ac:1a:4f:82:fe:cc:fa:
fe:86:88:e2:9c:30:63:87:8d:57:82:88:62:32:23:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D8:24:A1:41:7C:D4:B5:20:13:7D:44:64:59:13:2E:27:A2:7E:C3
X509v3 Authority Key Identifier:
keyid:A6:4B:46:87:1C:64:DD:AE:40:44:2F:C9:21:66:76:C5:40:74:38:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pktGhxxk3a5ARC_JIWZ2xUB0OPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:af:ca:2f:f2:29:46:91:22:10:de:d0:28:6c:75:ac:66:f3:
74:26:13:54:55:a8:99:bf:1f:62:0e:50:9d:df:8b:41:c1:e0:
a8:f7:20:0a:16:e8:0a:c6:72:61:1b:d6:f9:96:14:ba:18:90:
88:47:da:a5:64:bb:eb:cb:f0:8d:75:71:be:d6:c5:5b:17:f6:
30:d8:4d:21:92:24:f6:b8:b3:8d:43:02:11:e0:3d:e6:0d:8c:
b3:39:f0:f6:86:0c:8d:8a:c1:d5:94:50:26:a1:aa:d6:ed:66:
e6:17:5c:4b:df:60:b2:1b:c1:81:9f:c2:94:bf:93:ab:08:af:
a8:df:88:74:04:09:ce:d7:fb:4b:6d:1b:10:98:03:25:e3:0d:
a9:15:ce:6f:2a:00:9b:bb:27:89:df:10:0c:a4:9d:51:5e:bc:
89:de:c2:b4:f0:e5:98:e3:28:89:09:39:14:1c:85:1f:b4:72:
3b:ba:8d:0f:24:c4:82:78:4c:c7:92:fd:8a:ed:5a:7c:ef:23:
bd:cf:8e:5c:2f:77:c7:05:31:0d:e2:b6:b4:cf:da:3d:b9:54:
0e:98:1e:58:d4:1c:b4:a0:57:a2:36:a0:f3:73:0b:d6:51:d7:
5b:30:1b:92:1b:5f:28:36:ea:34:b0:29:fc:22:9a:8b:60:0c:
67:1c:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:36 2025 by rpki-client