Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier: gFvDl39koay5BdtB1qL1LVO/OF42aW/ju6UpLBt2GrI=
Subject key identifier: 3C:BF:10:46:05:6C:77:BF:01:83:35:6E:8E:3B:5C:8D:F5:60:39:0C
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer: /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial: 01992331238F0F861099BD282B4E030427C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number: 0539
Signing time: Sun 07 Sep 2025 08:00:46 +0000
Manifest this update: Sun 07 Sep 2025 08:00:46 +0000
Manifest next update: Mon 08 Sep 2025 08:00:46 +0000
Files and hashes: 1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: JsyECXz0XC089SgSrSiOnDyRxmxKDFsLNWb75xAIlJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:23:8f:0f:86:10:99:bd:28:2b:4e:03:04:27:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Validity
Not Before: Sep 7 08:00:46 2025 GMT
Not After : Sep 8 08:00:46 2025 GMT
Subject: CN=3cbf1046056c77bf0183356e8e3b5c8df560390c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:62:a1:d3:63:c3:19:d5:cd:3a:e8:23:7d:
65:ff:aa:47:14:d8:e7:5a:a5:2d:df:da:1d:85:13:
e3:a4:05:9f:6f:f1:96:23:d1:99:d3:81:34:64:ce:
32:2e:13:49:05:4f:13:75:e8:8a:5d:47:b4:01:22:
63:1d:b7:9b:ad:03:c4:07:90:76:d7:37:1a:c3:86:
cc:d5:d9:6f:1b:66:26:9f:c2:61:eb:87:19:8b:aa:
96:9c:5c:21:1b:c8:cc:70:ae:52:45:70:44:ff:f6:
60:c4:a7:be:db:ce:ef:ea:34:52:d1:be:6a:aa:42:
13:a2:a8:91:d7:1e:d9:c5:f3:58:d5:ca:df:80:48:
94:d5:21:0e:eb:91:7d:44:51:b8:45:57:d3:68:42:
09:58:82:67:dd:fe:7d:3a:64:2d:d4:d5:33:9a:73:
3b:a0:55:f2:c3:52:38:ea:be:d0:5d:bb:f7:38:af:
98:8a:59:67:78:6f:17:91:46:7f:77:3c:5b:10:91:
bb:f9:a3:20:9e:ff:47:89:1a:51:92:15:af:29:6c:
35:af:18:00:b3:9f:48:8b:e5:78:0d:0a:7c:2e:eb:
03:ee:98:1d:6a:b9:e6:f4:cc:99:1f:58:f3:90:60:
ab:d8:f2:aa:10:68:a8:f6:e6:32:09:c2:9e:6a:66:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:10:46:05:6C:77:BF:01:83:35:6E:8E:3B:5C:8D:F5:60:39:0C
X509v3 Authority Key Identifier:
keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:07:c3:78:5d:34:28:07:24:63:2b:db:eb:34:b7:a8:7b:90:
ef:67:87:fc:d2:a9:1b:b5:1d:8e:e7:55:13:9c:cc:cf:4f:8b:
eb:6d:0a:56:e3:81:18:b8:ce:25:34:8e:be:6f:34:17:59:54:
74:2a:4b:ff:3c:c2:75:23:00:12:de:8b:a7:62:d4:59:77:43:
2d:3a:00:2a:d2:14:7b:76:28:b1:ad:09:47:1d:9d:b9:96:3b:
de:ef:24:a3:94:d0:2a:a3:8f:9e:b1:b1:c0:7d:aa:34:59:e1:
0a:49:07:9d:ba:49:ff:3e:d6:fc:dc:f7:90:5c:c4:51:1e:b2:
dc:a5:c5:dd:d4:51:fa:fe:7f:ba:73:98:82:51:41:31:f3:d4:
90:41:49:02:ba:9a:86:99:13:b9:1f:ad:18:e1:41:dc:85:81:
90:55:fe:fc:6f:fe:b2:fa:c6:42:bc:1b:91:8f:fb:11:78:51:
16:01:e9:1a:17:d3:97:a9:ea:98:84:5c:49:0d:73:29:3d:f4:
27:cc:4a:11:54:03:6a:77:79:d1:f6:e4:14:80:c7:f8:d1:4b:
09:cb:e1:fc:cb:7b:96:19:5b:bf:ac:42:b2:21:e8:50:5c:73:
5d:f5:41:63:b4:08:03:8f:f7:e9:ea:f5:2f:8a:af:d8:7c:19:
30:3e:16:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:38 2025 by rpki-client