Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: S6EwBj9jsMBn6lYqZVTBRAod8BKS+SC0VebJODWi+xI=
Subject key identifier: 3D:E8:83:29:4E:91:0B:FD:F4:C6:52:8B:91:A8:36:71:1D:2E:4B:DA
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 01992367D27A9E7963AAAF056D78BFEB5294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 0633
Signing time: Sun 07 Sep 2025 09:00:30 +0000
Manifest this update: Sun 07 Sep 2025 09:00:30 +0000
Manifest next update: Mon 08 Sep 2025 09:00:30 +0000
Files and hashes: 1: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: lW7HJDKAWzacvD103usQn1gnJUuVY+V+WUC2M2J/zKE=)
2: ujnQqcYkw8DTp3TTHKzAXwe78Ws.roa (hash: wFM6YX8J+HgwhH7ugAfhLxZTumTN8/lCEBbdI40glto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:d2:7a:9e:79:63:aa:af:05:6d:78:bf:eb:52:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Sep 7 09:00:30 2025 GMT
Not After : Sep 8 09:00:30 2025 GMT
Subject: CN=3de883294e910bfdf4c6528b91a836711d2e4bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:9c:54:17:cd:c2:18:94:b8:39:1f:34:1b:
23:4d:48:65:14:24:78:0d:b9:65:c7:d1:d2:4e:5e:
55:bc:af:5d:36:fe:e8:cb:49:cc:d0:4f:a4:6f:cd:
a0:d4:cb:a8:59:af:4e:35:59:47:dd:32:fd:0d:cc:
74:76:25:db:1a:54:0a:6e:5b:25:c8:34:e6:96:28:
4c:98:0a:7d:8d:a2:87:64:5f:c0:ad:36:f4:91:0a:
e6:00:1e:8f:bf:9f:6b:97:64:7c:76:8e:52:e2:80:
c3:31:d8:09:a6:45:e0:9c:c6:79:d8:b6:5e:94:55:
e2:00:97:ff:49:1c:ef:5b:40:79:be:ed:82:6e:5d:
17:68:be:ee:1f:b6:67:01:9d:91:83:ed:5a:c1:6c:
c6:cb:cd:fa:41:a6:a0:35:9b:d2:62:77:20:29:05:
12:5d:7d:78:fe:20:cb:06:d4:81:a7:96:02:cb:b0:
03:1c:0b:78:44:1c:65:6e:b2:52:f9:63:e2:7e:f3:
c5:f0:47:6b:2b:31:5d:52:cc:2a:6a:ff:19:3b:d5:
d2:64:8f:87:7a:52:fa:0a:f8:02:88:9e:1e:41:86:
e9:53:ff:52:67:a0:d2:02:97:99:98:84:12:cd:5b:
19:2a:0b:e9:99:66:c1:0f:35:39:c8:40:4b:18:e3:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E8:83:29:4E:91:0B:FD:F4:C6:52:8B:91:A8:36:71:1D:2E:4B:DA
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7a:32:60:44:8e:9e:cb:92:ef:dc:27:99:6e:c7:9d:97:f7:
23:0d:be:c8:c4:08:e6:1d:40:cf:4c:ac:d2:34:37:77:b1:dd:
ec:47:cb:bb:bb:70:a1:1c:1b:f0:62:6a:d0:a2:6a:2c:80:0c:
20:00:1f:d6:26:89:d2:ef:8a:45:06:00:a1:77:7d:17:76:2c:
2d:90:fe:2c:66:75:92:a1:f2:41:ca:85:32:d4:d2:bd:6d:41:
b0:b1:b3:e3:14:74:65:c6:d0:4c:02:01:a7:6c:3c:bd:07:be:
f7:a7:b7:66:92:b0:0c:e7:08:ea:5e:99:5d:7b:b2:a4:86:1a:
63:a7:19:55:0f:92:17:15:66:01:d8:45:8b:9f:15:8e:64:2f:
7a:39:c9:ee:2f:76:fd:3f:52:70:05:bf:d0:37:f5:eb:92:0c:
d6:c3:4d:e9:7c:27:61:c1:97:ea:82:f0:ff:88:5b:07:f6:83:
cc:56:5f:8d:c4:c8:be:4f:99:90:fb:8c:70:c7:4a:40:28:26:
ca:b1:2d:0d:d2:a0:78:16:c0:ce:21:4e:ea:f1:c3:cd:c0:32:
91:5b:bd:25:af:8f:82:76:a6:1e:f3:aa:6a:03:1b:db:42:53:
8f:e0:17:0d:e9:27:57:5f:03:f0:18:8e:25:a3:b6:68:8e:1e:
46:65:6e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:36 2025 by rpki-client