Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
File: cSsCxFx16_ctVtM8KAKXwq6H6y0.mft (raw, json)
Hash identifier: trrYeEhshSMO6dYIjgVZGkT0PQ+ntpWN6P9UZKacpz8=
Subject key identifier: C9:43:2E:5A:20:8C:7C:AE:63:9D:E7:E7:E7:A2:6E:DE:86:9E:81:20
Authority key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
Certificate issuer: /CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Certificate serial: 01984A40E829235F77A072C540ED2786E0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
Manifest number: 0250
Signing time: Sun 27 Jul 2025 05:00:24 +0000
Manifest this update: Sun 27 Jul 2025 05:00:24 +0000
Manifest next update: Mon 28 Jul 2025 05:00:24 +0000
Files and hashes: 1: cSsCxFx16_ctVtM8KAKXwq6H6y0.crl (hash: YOFbEgk0L8g0tRVLut0YNDJIo7EFJmS85ZzVfVqEmOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:e8:29:23:5f:77:a0:72:c5:40:ed:27:86:e0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Validity
Not Before: Jul 27 05:00:24 2025 GMT
Not After : Jul 28 05:00:24 2025 GMT
Subject: CN=c9432e5a208c7cae639de7e7e7a26ede869e8120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:9f:4d:e4:bb:4f:ab:65:6b:b3:39:a2:11:
d5:38:74:99:78:d6:d1:4b:13:40:d2:40:27:58:90:
60:2f:f5:d0:98:16:c0:9f:9d:ba:07:02:fc:43:59:
fc:b3:af:fd:12:b0:b1:9b:03:b1:1f:99:1b:25:46:
85:b3:01:22:ed:85:97:fd:ab:2f:3e:56:08:06:0f:
4c:86:2b:0b:e1:0b:e4:85:3f:eb:38:9e:a4:a9:4e:
d8:9a:e1:32:32:3a:c2:8d:79:f4:2a:13:a6:91:ed:
4e:86:32:48:7a:53:05:3b:f2:f9:22:ac:03:43:50:
63:5c:a9:00:51:b1:4a:c8:52:aa:ab:d5:25:27:59:
20:62:94:47:9c:f7:65:97:05:46:79:b1:93:67:76:
06:34:d8:0b:10:ea:91:4e:6b:2b:18:dc:40:03:a1:
cf:27:e9:11:c2:88:d6:9b:f1:bd:e2:a0:d6:af:e1:
9f:43:05:5f:37:1f:99:40:25:23:48:4d:ae:7e:15:
cf:5e:be:f0:30:72:0e:31:9c:42:9d:ef:29:54:84:
20:db:0b:b1:63:88:fe:4a:2e:4f:a6:56:71:9c:a4:
5b:09:b4:06:07:39:96:eb:5a:62:59:75:ea:7c:45:
9d:98:ae:5e:9f:a0:ff:c2:ee:77:e6:f6:45:13:31:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:43:2E:5A:20:8C:7C:AE:63:9D:E7:E7:E7:A2:6E:DE:86:9E:81:20
X509v3 Authority Key Identifier:
keyid:71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d2:ec:7b:5d:79:7e:f7:05:01:16:d2:f2:ec:70:58:56:69:
97:b4:ec:9c:84:73:dc:9c:0d:56:9f:1c:f4:ae:2e:62:01:ee:
18:6d:d7:21:0c:07:35:0c:a1:40:fd:8b:e1:07:ac:b2:0d:57:
2a:7a:9d:4d:35:a7:06:b2:3a:4f:90:f5:1a:e8:a6:a0:37:c8:
e6:ce:58:87:ef:6c:cd:89:32:17:71:b5:12:a6:92:60:29:cd:
a1:8f:f1:1d:9e:7d:3f:d5:06:e8:64:fd:72:87:f7:ba:6f:3f:
49:00:74:ea:2d:92:47:72:dc:f7:36:ff:7a:a1:26:9d:95:c6:
71:ad:7e:7e:80:0a:b0:9b:b4:9f:24:2f:ed:51:92:37:ea:32:
ad:40:f9:88:ba:e8:a6:18:ef:d8:b1:31:94:4f:85:23:03:b0:
1c:cc:b3:74:e0:77:f7:e8:3b:05:6e:20:64:40:96:f0:0e:c1:
62:03:e6:87:bf:2d:ae:20:55:ff:02:8e:1d:85:37:ee:e5:71:
4f:ae:94:58:6d:26:9b:3e:9a:c3:07:50:66:c8:26:0a:c1:a0:
15:2f:60:d5:ff:c9:ed:66:41:f7:7c:cd:bb:80:c7:31:a1:8c:
29:71:09:94:03:27:e6:3a:78:95:cd:4f:9f:7e:8f:cc:c7:d6:
3b:b7:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:37:28 2025 by rpki-client