Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
File: c1AO60fC8TVxh2oZZjU3-LY2qA8.mft (raw, json)
Hash identifier: JWSGZ32Ox1aSwGDFaG6/1EPkzHhrD/JhHjZVbUrPNvY=
Subject key identifier: 16:99:38:D1:B8:38:8B:4B:34:98:AC:B1:8F:C5:BE:89:56:74:24:EF
Authority key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
Certificate issuer: /CN=73500eeb47c2f13571876a19663537f8b636a80f
Certificate serial: 019922C39AF3EA95CDB87563322EF196D57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
Manifest number: 02F8
Signing time: Sun 07 Sep 2025 06:01:08 +0000
Manifest this update: Sun 07 Sep 2025 06:01:08 +0000
Manifest next update: Mon 08 Sep 2025 06:01:08 +0000
Files and hashes: 1: c1AO60fC8TVxh2oZZjU3-LY2qA8.crl (hash: IrGXl3E0TIwjSlNItvKX8I7sGI4A1LxCUeyWiyPmxec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:9a:f3:ea:95:cd:b8:75:63:32:2e:f1:96:d5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73500eeb47c2f13571876a19663537f8b636a80f
Validity
Not Before: Sep 7 06:01:08 2025 GMT
Not After : Sep 8 06:01:08 2025 GMT
Subject: CN=169938d1b8388b4b3498acb18fc5be89567424ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:8e:a5:fd:89:c9:a3:ae:e1:80:4d:a0:9d:
2c:d9:e3:f6:95:0c:54:3f:70:a0:cf:bb:17:66:e8:
e6:9a:89:25:4c:1a:3e:86:f7:da:d2:9f:80:85:e3:
0c:28:b8:67:fe:6b:11:7e:4f:90:d7:59:eb:32:be:
05:30:58:b4:06:95:89:e7:0b:45:bc:93:9f:9a:fb:
09:5b:2f:5f:0f:a3:39:82:ae:99:84:8a:3a:7f:a7:
1f:e6:83:cb:07:87:ae:f5:6d:22:96:f8:69:7a:e2:
55:0d:4b:02:03:9b:e1:c5:9b:60:99:2a:e9:e6:d1:
6d:f9:40:bb:c4:fa:0d:07:ec:68:45:84:a5:aa:b8:
d4:4d:57:05:44:5e:97:19:a1:43:d5:8b:06:1d:d2:
33:24:b5:93:49:20:16:29:10:b6:9c:30:b1:f1:d1:
0d:b6:5a:09:31:ce:85:3f:66:91:30:9c:e5:65:cb:
0f:36:0d:1c:89:50:8a:65:61:62:42:50:a3:85:70:
e4:68:fd:28:bd:ff:06:48:0c:62:b1:73:29:60:0e:
12:b4:f6:ba:57:9e:7b:8d:5f:e9:44:26:3a:05:46:
07:32:8c:4b:83:ee:fe:94:3c:a6:e6:f5:2b:43:7d:
dd:60:b2:5c:25:a8:30:49:e7:57:9a:c0:19:d0:fe:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:99:38:D1:B8:38:8B:4B:34:98:AC:B1:8F:C5:BE:89:56:74:24:EF
X509v3 Authority Key Identifier:
keyid:73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b3:07:ff:60:75:3f:e1:f3:19:af:a4:3b:cb:73:86:65:28:
44:e9:74:e2:8d:4b:99:ee:ed:3b:5c:54:24:0a:32:ee:3a:98:
37:c4:50:56:20:b3:5c:c4:83:39:bd:4b:0b:58:99:ba:01:5d:
47:94:e5:ab:4e:97:44:82:1b:d8:e8:20:00:ce:57:ec:e2:88:
27:70:49:29:b6:7a:e8:fe:81:28:38:89:34:a5:16:22:09:30:
1b:b7:fd:90:ac:b5:1e:62:d2:a6:ad:bd:68:cf:ee:27:a6:03:
79:34:f6:d6:74:05:7f:41:c8:c7:9f:59:ce:f5:b1:cf:03:e7:
ee:8e:f9:c0:9f:01:13:39:a8:2e:ae:d6:77:56:7e:58:0f:f1:
41:52:36:3d:19:36:d0:13:54:02:cb:a2:a5:ca:e9:da:16:e7:
20:2d:8b:99:d7:7f:e3:47:94:56:24:73:88:f8:a7:d5:b8:b9:
2a:80:46:fb:78:3e:23:77:d9:1b:63:36:59:8e:84:1f:a1:33:
08:09:aa:00:c0:6b:14:02:40:0b:e0:f5:75:0e:64:9f:a5:50:
89:c2:16:9f:23:bd:28:48:00:26:76:44:65:97:ee:0f:b3:eb:
4c:29:68:ba:a7:d4:95:9b:4a:3f:e0:66:27:12:4a:34:d9:e1:
0d:0c:3e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:42 2025 by rpki-client