Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
File: cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json)
Hash identifier: 9LUXewGBirlk+nhQRip5wFZM46n9ISWf/SrtrsLEJ2w=
Subject key identifier: 64:78:58:A0:3D:B9:EF:4F:2A:29:92:2D:CF:52:52:4D:48:1D:45:E5
Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
Certificate issuer: /CN=70379a6713e79e598d9feaa66dca169188e0218d
Certificate serial: 019922FA7883586CE666B8178F1FB7F219F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
Manifest number: 0E76
Signing time: Sun 07 Sep 2025 07:01:04 +0000
Manifest this update: Sun 07 Sep 2025 07:01:04 +0000
Manifest next update: Mon 08 Sep 2025 07:01:04 +0000
Files and hashes: 1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: TGTOAteAgQUSQKw/cctDVLOpDC7g3asu5tMcOgawyVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:78:83:58:6c:e6:66:b8:17:8f:1f:b7:f2:19:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d
Validity
Not Before: Sep 7 07:01:04 2025 GMT
Not After : Sep 8 07:01:04 2025 GMT
Subject: CN=647858a03db9ef4f2a29922dcf52524d481d45e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:55:85:66:c7:57:6b:02:b7:aa:65:30:8f:
87:56:aa:79:09:42:c5:27:cd:29:24:63:b7:24:03:
8b:b2:53:ff:b9:af:43:c2:54:ac:35:63:e2:37:cc:
6d:4c:be:58:15:7b:75:be:7d:f6:cd:c3:99:80:a7:
39:d9:5d:4b:03:ee:62:3e:8c:a6:69:64:b1:16:20:
7f:0e:30:7b:26:09:67:f1:7d:88:90:31:a7:d6:c3:
d2:7c:4c:bf:69:b5:cd:f0:4f:cc:64:a3:48:b0:31:
e7:e2:70:9e:a4:8f:18:78:1f:0c:bd:36:5c:a6:8c:
74:1d:e2:0a:65:aa:9b:e0:c5:33:8d:a6:6f:02:67:
74:83:91:1d:34:9e:70:a2:18:34:f1:e9:e5:9e:ad:
38:49:cc:ef:c9:d9:43:47:ce:72:36:d2:22:cb:a8:
51:1e:ce:9a:e0:6a:68:f8:55:09:11:5f:91:cb:61:
34:9f:e7:f7:c4:60:af:48:37:2f:05:75:31:50:ca:
7b:bb:25:ea:41:f5:a9:af:5e:61:53:47:0a:d2:4a:
c2:ef:c6:8a:e1:e3:b2:0a:a8:f4:e7:ab:2c:15:f8:
1e:af:39:7a:49:b0:0b:ec:77:2e:57:76:99:02:0f:
9f:46:33:7e:07:18:6a:04:b5:be:b0:b5:aa:9d:a8:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:78:58:A0:3D:B9:EF:4F:2A:29:92:2D:CF:52:52:4D:48:1D:45:E5
X509v3 Authority Key Identifier:
keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e9:b9:4d:0e:7c:95:d8:65:d5:10:01:d7:8c:02:85:ab:72:
1b:9a:d5:0d:21:2f:a6:26:7c:ed:8a:14:69:b7:5d:bd:e5:dc:
b3:4e:8f:dd:cf:d5:51:99:61:1f:a8:b9:47:04:bf:a8:91:70:
33:c0:41:c5:7c:4c:88:0b:00:58:3a:d2:2b:d8:a0:1e:eb:06:
b2:37:0d:9f:32:2b:c9:ee:17:16:25:0f:4c:38:3f:16:43:82:
74:0d:fa:d5:04:53:9e:9e:2f:c3:6b:0c:4b:df:2a:27:e0:9e:
84:40:49:13:0f:f3:3f:5b:1f:a6:9f:43:ee:ba:57:c4:16:46:
76:89:d4:61:80:8e:6a:2d:63:c0:4f:41:a5:e4:92:c4:0a:f3:
a9:35:e3:e3:02:ff:05:04:e5:93:af:88:44:3c:04:e6:5c:dc:
35:f7:8f:11:54:02:ea:6a:82:2a:0d:19:c7:28:fb:21:1f:df:
c7:88:ad:f9:a3:1c:d2:19:76:34:18:31:a1:2c:82:22:e6:ae:
be:69:61:0f:f9:4b:b6:bb:da:7f:d7:e3:4b:88:4f:c4:75:94:
8b:31:2f:6f:16:f4:73:34:d5:79:32:78:1e:aa:8d:4d:a4:69:
ee:be:03:7d:9a:b1:ee:50:c8:ca:14:1b:25:5f:ad:3d:0f:0c:
c3:23:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:41 2025 by rpki-client