Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
File: RK3etuoTlfaY9C51Qa70kkJiX2I.mft (raw, json)
Hash identifier: d037wrV7Gogw2PcJFUDOr5/yowzFRh4e7bCtfL0b9T8=
Subject key identifier: 18:6A:09:46:3D:09:BB:0F:01:B0:1D:F8:4D:53:8E:43:C5:59:BE:6F
Authority key identifier: 44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
Certificate issuer: /CN=44addeb6ea1395f698f42e7541aef49242625f62
Certificate serial: 019921B122F429003BA3BB44055CC3AF055E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 01:01:20 +0000
Manifest this update: Sun 07 Sep 2025 01:01:20 +0000
Manifest next update: Mon 08 Sep 2025 01:01:20 +0000
Files and hashes: 1: RK3etuoTlfaY9C51Qa70kkJiX2I.crl (hash: /HVDue8+tgj5yh5nEOb8fL5OY73klNKEP/ma6qebmlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:22:f4:29:00:3b:a3:bb:44:05:5c:c3:af:05:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44addeb6ea1395f698f42e7541aef49242625f62
Validity
Not Before: Sep 7 01:01:20 2025 GMT
Not After : Sep 8 01:01:20 2025 GMT
Subject: CN=186a09463d09bb0f01b01df84d538e43c559be6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d8:33:f3:ec:92:c4:21:12:67:2d:64:89:df:
93:bb:3d:98:49:f8:20:62:25:d2:2e:e2:3a:e2:1c:
0c:fc:02:eb:8e:40:2c:7e:5c:dd:3c:b9:5a:ca:d0:
0e:8a:b4:4d:1c:ae:e2:b0:3c:7e:81:58:2a:75:d3:
16:ad:b6:a1:31:02:92:e7:56:9a:0a:73:1b:19:f3:
20:c7:39:36:65:46:76:92:22:af:00:17:1f:00:55:
6e:69:2d:a6:e1:31:21:9e:0c:ba:65:82:5f:28:41:
2c:fa:15:e7:bb:a6:ad:0f:2b:a9:5b:34:e6:c1:fa:
e0:cc:ef:63:09:6a:2b:ad:e7:f1:77:a1:00:8d:37:
6b:bd:a6:50:32:33:2c:31:c6:a3:97:3e:88:1e:22:
25:c5:09:ca:7b:15:42:83:a4:91:14:db:41:50:d1:
41:55:da:a4:12:d5:49:ff:ab:13:a2:6a:f2:42:fb:
f7:6a:a2:f4:95:12:6a:f1:b5:6d:fe:f3:c9:32:52:
2a:8a:e7:1a:14:fc:ea:d6:48:8c:61:26:a7:4e:ed:
6f:89:14:bc:9f:3a:e5:6c:90:db:59:38:b5:1c:75:
94:62:59:4c:20:0b:88:17:c5:ec:aa:91:f8:da:63:
47:13:f5:a2:80:90:6e:77:2c:39:18:41:6a:d9:33:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6A:09:46:3D:09:BB:0F:01:B0:1D:F8:4D:53:8E:43:C5:59:BE:6F
X509v3 Authority Key Identifier:
keyid:44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c7:c2:49:a1:1b:4c:75:97:0c:39:33:ff:bc:db:b5:8b:ef:
0c:9f:9b:cb:7f:72:88:49:a5:2b:a6:a7:75:ac:88:f8:72:0a:
85:76:d4:55:31:b5:39:5c:b0:12:dc:57:9a:2a:d8:2c:f1:a7:
da:8f:47:95:8a:23:55:6e:27:06:54:60:2a:82:00:db:e5:6f:
64:d0:0d:6f:07:7e:49:bc:58:c9:a0:6a:c4:ad:09:70:2d:ee:
9e:8a:48:27:88:13:87:06:c5:ab:25:b9:e6:9e:92:e8:8a:2e:
ee:21:32:e2:f5:53:90:c3:f6:99:3c:7d:81:2a:82:cd:1d:62:
34:44:41:b6:f2:ab:0a:ee:e6:55:dd:47:93:15:1f:a4:40:cd:
ae:2e:d8:fe:82:b0:47:18:2d:b1:4a:08:49:2e:b8:ff:1a:44:
2a:2f:b2:f8:83:1c:49:7a:b6:5d:06:ac:e6:22:54:9f:7a:59:
fd:61:4e:1e:a3:8e:3d:15:a4:f8:5d:50:bf:f3:42:10:96:96:
b0:4f:ba:98:5c:9e:5a:fc:13:0b:c8:b5:38:75:b9:34:03:a6:
21:95:38:f6:2d:19:57:5c:4d:f4:74:c4:33:3b:45:b4:de:5a:
84:65:4c:cf:5e:16:0e:76:0e:57:60:48:0b:c2:c7:f8:e0:15:
19:f9:e9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:18 2025 by rpki-client