Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File: C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier: MFWwzzs1Yp5yf5OLWGmg86jK54gMIfhaBTrAfBHFIJc=
Subject key identifier: 09:F0:61:91:25:A6:43:7C:43:61:FB:6A:7E:59:F9:7D:56:0F:69:41
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer: /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial: 019848C0724319D58D95A816B4C5A67A0FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number: 10D5
Signing time: Sat 26 Jul 2025 22:00:28 +0000
Manifest this update: Sat 26 Jul 2025 22:00:28 +0000
Manifest next update: Sun 27 Jul 2025 22:00:28 +0000
Files and hashes: 1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: zrbjJyWe6Drk7mBo3s+GwZhyIZR9WNL2bEPG7Cub790=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:72:43:19:d5:8d:95:a8:16:b4:c5:a6:7a:0f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Validity
Not Before: Jul 26 22:00:28 2025 GMT
Not After : Jul 27 22:00:28 2025 GMT
Subject: CN=09f0619125a6437c4361fb6a7e59f97d560f6941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a5:79:9e:59:3f:d0:29:9b:91:1c:d2:d8:56:
b6:d2:e3:8d:88:2f:a7:25:80:23:9c:6b:3f:a0:22:
49:0a:de:ba:64:5e:38:01:64:0f:88:5c:de:c5:47:
ce:71:73:e0:16:f6:e6:07:0c:7c:0f:a4:5c:04:94:
0b:63:fd:f4:ab:b3:ff:55:7d:94:7a:5d:09:93:9d:
d4:57:65:bf:69:38:4c:bc:9e:2c:50:2d:27:60:4e:
19:2a:1b:74:ed:cc:e7:1d:50:4e:0c:0c:90:ba:32:
65:ff:04:64:18:21:b7:3d:5e:5f:dd:fc:8f:01:64:
97:47:f0:20:7a:83:be:5c:34:9b:5f:55:35:85:e7:
a2:d2:f4:86:65:4d:dc:4d:e4:61:aa:b8:61:0c:de:
5e:b6:9f:14:b9:99:29:b4:56:d7:2c:e1:9e:30:23:
87:a3:b0:b8:15:8e:b5:b2:01:48:59:4a:4a:68:fa:
62:dd:35:28:97:36:51:dd:2f:2d:f8:f3:f8:88:f3:
c1:b6:58:18:0b:dc:d8:3b:18:dd:bb:6f:9a:be:9a:
89:80:90:44:36:45:fd:48:13:1c:ce:73:24:a8:62:
7b:4f:a9:6f:cd:10:a2:76:ad:e4:0b:81:b7:ab:10:
be:34:ba:ab:3c:7f:02:f8:da:6d:43:95:e6:fb:0f:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:61:91:25:A6:43:7C:43:61:FB:6A:7E:59:F9:7D:56:0F:69:41
X509v3 Authority Key Identifier:
keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:13:51:22:c9:0e:c1:32:3a:f0:cd:3e:19:49:3f:cd:4b:03:
e9:e8:16:0e:e5:60:b2:b4:1a:af:2d:46:b0:c2:31:d8:54:e7:
5f:8a:aa:20:4b:f4:11:85:87:36:ad:93:b2:64:09:97:e8:5c:
7f:ba:73:1b:41:f3:64:f0:46:65:95:3c:fd:91:81:3d:79:e2:
8c:95:54:83:9c:92:fa:01:42:cb:c3:6d:fd:f4:27:15:b0:0e:
e4:62:da:20:e1:27:21:54:d2:4f:19:1e:22:cb:41:c3:a2:b2:
f6:5f:92:3f:95:5f:1a:b5:23:c3:e8:25:25:37:f9:c5:51:bc:
a2:88:0c:1d:fe:c1:f8:63:e9:89:ba:69:69:06:5a:73:19:fe:
a5:b8:68:0f:ea:c6:3d:90:ce:62:f5:de:0e:f9:ae:e3:98:09:
3b:5d:8e:9d:da:9f:96:ce:98:45:27:ba:ff:de:e4:41:85:05:
b7:f1:31:a1:10:00:86:25:49:e2:b2:b3:fa:8d:8d:5e:85:4e:
a5:bf:5c:3e:f8:49:1a:18:ec:1b:85:05:28:eb:c5:b6:8a:30:
7b:c5:fc:cd:9c:0e:b0:ba:14:ce:48:d8:59:04:84:9c:e8:cf:
c0:32:86:1f:31:63:31:4b:23:89:9e:dc:10:b6:63:f7:2b:c9:
c1:55:2f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:11:33 2025 by rpki-client