Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: VXcvjQDFMaDEfsvdf3PLKyLZNBXcEx28cNzS80yV4no=
Subject key identifier: B5:EC:6B:40:2E:85:A2:9F:C5:6C:CC:12:9B:41:51:DF:11:2A:0A:D9
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 01985AC7028DFE80356D68BCD33CA2F394DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 1608
Signing time: Wed 30 Jul 2025 10:00:48 +0000
Manifest this update: Wed 30 Jul 2025 10:00:48 +0000
Manifest next update: Thu 31 Jul 2025 10:00:48 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: Z7FOFCKfRPdO1Mlk8gBiMY8heLoDR7dPz9HPvu1jKyc=)
2: KALMVhqVFo0O99VrdECDqSH5Z6g.roa (hash: vjDA6l8MH7MrWb72G2c81lHoX5Ci2HwmnVXmzEUbWMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:c7:02:8d:fe:80:35:6d:68:bc:d3:3c:a2:f3:94:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Jul 30 10:00:48 2025 GMT
Not After : Jul 31 10:00:48 2025 GMT
Subject: CN=b5ec6b402e85a29fc56ccc129b4151df112a0ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5c:67:25:c6:67:20:d1:fb:aa:9b:08:49:30:
67:cd:f8:9d:4e:7f:35:e7:3b:df:02:94:7d:81:21:
f1:9a:af:25:ca:1b:29:ec:27:84:c8:0a:0e:da:4e:
94:ba:f0:b5:ba:aa:ba:d1:b5:45:f5:b2:60:a4:a8:
ed:10:fb:9d:d1:5a:dc:2a:bb:2c:09:71:d4:5e:6c:
69:4d:fc:2e:a7:b5:5e:a0:10:54:b5:fd:3c:59:ce:
df:cd:00:89:3c:ad:03:2b:2e:e9:93:f3:6b:f0:d2:
95:20:f5:42:b1:61:6c:01:f7:c1:0c:53:3b:52:37:
f2:74:47:41:7d:52:86:2b:4f:f8:2d:60:7a:fb:e2:
f1:ca:f3:2c:38:43:54:af:dd:1b:a4:00:a5:01:33:
7c:19:f6:47:01:62:d9:83:7c:4f:f7:cb:6c:0a:26:
22:9f:3e:ba:fb:3d:81:d7:22:15:7c:37:72:64:d5:
13:56:22:7f:b5:85:45:97:d6:84:08:52:c8:73:f8:
b5:c4:41:01:26:ce:b9:80:57:ca:d4:fc:d6:4c:c1:
82:f6:03:95:84:01:3c:94:6c:ac:07:63:76:28:66:
61:15:92:e8:be:68:0d:dd:d0:82:87:fd:56:47:f8:
fc:84:07:33:de:93:06:0c:1b:3e:8a:89:08:2e:b4:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EC:6B:40:2E:85:A2:9F:C5:6C:CC:12:9B:41:51:DF:11:2A:0A:D9
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:16:9b:61:7d:e6:96:7c:63:65:18:a6:bb:b8:de:8d:7c:e8:
7c:6b:28:e5:98:27:f2:81:58:45:53:0a:35:78:25:56:43:bc:
10:dd:2e:7e:78:42:87:bf:e5:be:dd:ed:b2:99:58:7c:f7:16:
33:a5:1c:9f:f0:55:82:18:9a:01:ec:54:43:e7:cd:4e:e8:a4:
3c:9f:96:ea:00:ca:ac:4e:00:aa:ff:e8:0d:8e:78:9f:93:01:
9e:58:d0:d8:71:f8:de:d5:92:58:76:be:76:22:6a:c0:d7:7f:
3f:aa:7c:97:76:8c:f0:df:b0:f2:25:ba:f0:74:bc:ec:81:9a:
59:89:d2:d5:0a:3a:1e:c6:67:2a:3a:5b:7c:81:30:d4:05:1d:
3a:28:13:38:14:23:45:ad:c3:03:62:74:49:7e:aa:6b:ba:ff:
fb:7e:30:85:95:87:31:87:e5:f2:b6:9a:88:fa:c7:07:47:df:
a8:04:5c:09:c1:91:b6:fd:cc:3e:b0:40:e0:e5:d7:29:e1:68:
a3:28:f5:b1:8d:5c:96:e1:a2:98:e0:46:0b:4b:52:c0:14:3c:
99:28:f6:22:55:34:25:3e:fb:c8:12:fc:54:4e:b1:43:f9:44:
2a:d9:ff:dd:71:cd:04:b9:05:28:c9:bc:0a:f9:5f:5c:bb:60:
ea:65:c6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 19:45:31 2025 by rpki-client