Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
File: A0BZzz9bz7oJObTF2cPThs7NTOw.mft (raw, json)
Hash identifier: UW3qwoDDA9mgSHKkXSzVHiKZTXhWXNoABiUwHpgzA9k=
Subject key identifier: C2:8F:0F:54:A2:99:EE:AA:E7:B3:C6:C7:65:DC:90:29:D2:7F:0E:42
Authority key identifier: 03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC
Certificate issuer: /CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec
Certificate serial: 019923D61333DE1037699BDA59EC56E8410A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
Manifest number: 3E
Signing time: Sun 07 Sep 2025 11:00:56 +0000
Manifest this update: Sun 07 Sep 2025 11:00:56 +0000
Manifest next update: Mon 08 Sep 2025 11:00:56 +0000
Files and hashes: 1: A0BZzz9bz7oJObTF2cPThs7NTOw.crl (hash: zcdFEVd2TJVqWyEoBycTFwSwJzYxg1ZfcVGK8H+ZIGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:13:33:de:10:37:69:9b:da:59:ec:56:e8:41:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec
Validity
Not Before: Sep 7 11:00:56 2025 GMT
Not After : Sep 8 11:00:56 2025 GMT
Subject: CN=c28f0f54a299eeaae7b3c6c765dc9029d27f0e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f1:65:4d:44:90:85:86:06:c8:b5:41:23:79:
07:b7:87:4a:f3:57:8b:5a:4a:3b:ed:98:4d:8a:b5:
00:fe:cb:16:68:97:9a:33:c7:e6:28:21:ee:db:49:
0f:af:f1:22:6c:8d:18:5c:5c:4b:88:2f:b5:b0:dc:
c2:8e:68:f4:a8:61:f0:d6:d8:72:14:e5:1e:eb:fb:
84:37:22:13:c1:53:65:fa:c2:05:8d:f0:21:f4:b7:
38:46:5e:ed:a8:cd:b3:21:38:14:0e:5c:d4:63:27:
1e:a8:8a:56:28:67:67:6e:e6:3a:72:d6:f3:18:9b:
78:dc:26:2c:99:27:27:c2:2b:5a:3a:5f:3e:61:2e:
b2:89:50:02:14:7c:2e:d5:4d:5e:ba:25:e8:93:d9:
ab:60:61:e4:0e:8e:06:a5:a1:32:0f:96:d1:56:7f:
c9:6f:b0:a9:4b:f5:21:d3:2a:05:fc:1f:20:52:e5:
16:49:b8:96:36:d0:27:d8:e1:16:a9:9f:aa:93:eb:
49:8c:b1:99:c3:a8:61:28:0b:f9:0c:26:31:57:81:
79:20:3b:99:a6:d2:e9:32:26:84:a8:7a:f1:ea:24:
2f:59:e8:3c:88:17:bc:f0:2b:55:7a:0e:e0:26:24:
6e:d7:31:54:d5:6c:43:bd:81:ab:79:a7:72:c1:03:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8F:0F:54:A2:99:EE:AA:E7:B3:C6:C7:65:DC:90:29:D2:7F:0E:42
X509v3 Authority Key Identifier:
keyid:03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b6:b6:48:bc:a9:7f:12:5d:fd:d9:ca:27:d9:45:5d:30:c5:
9b:65:1e:26:84:c6:32:23:50:a3:c4:cd:71:35:9f:ce:6d:db:
93:ef:1c:91:91:f5:83:be:ff:30:af:8a:95:e0:28:f1:56:03:
6d:22:5f:1c:b4:97:2c:53:3e:1f:5e:bb:a2:a3:87:97:24:3c:
4e:42:d1:9b:66:1a:11:7f:1e:24:16:b9:51:e7:38:c4:aa:c5:
47:fc:35:4e:4d:ec:2e:a3:c3:08:77:02:09:af:04:74:fa:df:
c6:dc:b5:ff:52:9c:27:47:4f:1a:da:28:9d:36:f6:b7:bc:e5:
3e:2b:3a:5f:4c:0c:04:cb:7a:d3:eb:8d:01:32:18:c7:63:7b:
7e:a3:8b:33:62:2c:51:95:7f:64:4f:f1:3d:61:76:41:25:81:
4b:ab:8c:f4:db:64:ad:bf:56:e2:bb:da:cb:27:5a:43:29:1c:
02:4b:13:70:31:83:d1:26:31:a7:24:57:3a:48:2d:4d:d1:ad:
19:46:0a:13:ee:b3:f0:4d:75:f1:ed:39:11:cb:44:b6:99:c8:
86:ee:0e:e8:d4:b1:99:96:2a:fd:5c:a5:e6:a1:79:a8:b1:cb:
76:15:0f:45:e8:73:c6:45:69:3d:40:30:30:7e:dc:55:a6:97:
fb:13:24:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:39 2025 by rpki-client