Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: Vd7+kryxVnzlOIh+HSirqPDjdiYtl9xep14x6DO2KsY=
Subject key identifier: FC:3C:28:2C:57:87:C6:50:DB:B7:7F:63:E4:12:0D:AD:70:F1:E4:1A
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 019917D170B0CC7FE8EB478CBE0AE9AB620E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 05DC
Signing time: Fri 05 Sep 2025 03:00:25 +0000
Manifest this update: Fri 05 Sep 2025 03:00:25 +0000
Manifest next update: Sat 06 Sep 2025 03:00:25 +0000
Files and hashes: 1: ADwJyFTnSoqJo76cybY4gze7w-A.roa (hash: ywnZb2Gs7P4sK9InqI7FaEEZlSRwjtQHnM1qlayDDgw=)
2: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: IiBLfmj7BMqIcCY0X4Wi3ocQuuUjpTJ0BZLuvTblLQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:d1:70:b0:cc:7f:e8:eb:47:8c:be:0a:e9:ab:62:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Sep 5 03:00:25 2025 GMT
Not After : Sep 6 03:00:25 2025 GMT
Subject: CN=fc3c282c5787c650dbb77f63e4120dad70f1e41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:35:ca:91:da:1e:50:0a:d0:a8:28:ce:ba:
87:1d:9a:11:ab:6c:32:15:b1:18:e2:1e:15:10:34:
96:7c:e0:14:34:10:26:ee:4d:0d:0c:af:f7:09:ff:
4a:00:bd:06:40:38:62:c8:e6:04:8e:2a:dc:ff:68:
00:9b:74:8a:65:88:35:01:8b:eb:29:ce:ee:34:e7:
d9:89:65:59:3c:73:3b:81:36:e4:4a:d1:07:34:b3:
c9:5d:f3:d1:bb:eb:c1:42:b5:18:a9:07:c3:9b:20:
6b:67:f7:41:5a:ab:b6:f1:4a:b9:e1:2c:38:1e:9c:
0c:2c:ff:91:39:74:49:5b:e5:6e:7e:3f:f8:72:b1:
39:4f:54:6f:79:a3:25:79:4a:d2:66:82:02:26:1f:
46:be:cb:9e:c8:36:9e:b8:cd:a6:67:b4:a8:db:5c:
c0:0a:5e:57:0b:66:7d:ac:18:15:37:77:ef:68:a1:
8e:42:1a:1a:5d:2d:45:e3:fc:8f:ba:fd:55:b0:31:
f2:5e:5f:97:43:96:aa:b5:1e:e2:ad:24:49:02:58:
b9:49:5d:b7:f1:9c:59:bb:11:a9:2a:86:92:4b:28:
78:c9:0e:c2:50:38:39:7a:af:52:78:4d:03:9c:e7:
10:40:7f:99:61:69:fa:9d:8b:9b:70:a8:c5:2e:c8:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3C:28:2C:57:87:C6:50:DB:B7:7F:63:E4:12:0D:AD:70:F1:E4:1A
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c6:e1:73:fe:91:da:c4:ee:f5:79:a9:f2:98:33:ef:92:dd:
ec:e7:76:f5:44:01:97:d2:e3:55:c3:a6:38:4a:a3:ce:84:38:
75:1c:34:1a:15:fb:28:2a:ea:f4:db:46:68:fa:81:18:8a:dd:
da:f7:74:24:6c:f4:3f:d3:fb:b7:80:a2:92:7d:c9:d2:2e:7a:
79:56:cc:05:44:e0:52:88:6f:29:0e:b9:a8:90:3c:35:98:fc:
35:0d:6d:00:7f:d7:36:26:f8:76:e1:fb:27:3a:76:5f:46:d9:
cf:ca:a2:11:d3:49:0a:25:8c:b8:89:57:c8:47:0e:9c:eb:e6:
75:94:75:3e:78:1d:a7:fe:1b:47:a5:c3:df:e2:84:85:6e:a4:
b4:ea:19:e3:3d:56:f6:ca:32:8b:88:67:62:1b:c8:23:a6:be:
94:83:7e:b9:3d:de:cc:8d:cf:69:da:3b:c6:1c:a8:0a:30:bd:
b5:e3:4e:18:4a:37:a6:fd:fb:01:55:1d:3c:3d:b2:13:27:8d:
8c:d3:33:f6:c0:f9:d0:5f:b5:c4:0c:5c:66:54:08:9c:74:67:
9a:f2:75:9e:6b:ca:1b:7a:e3:5c:26:e0:db:47:9a:df:55:69:
ad:8f:d5:ae:c0:33:d5:a6:9b:00:44:eb:ec:6b:28:c6:4c:8e:
09:7c:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:22 2025 by rpki-client