Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: s327YmugOWNYGYdZKwyYv1SIGed26L8s2inKl2Ao+k8=
Subject key identifier: E4:BA:7D:BF:EE:F9:1D:AA:77:7E:31:EB:72:74:D6:3C:9E:80:42:F0
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 0199239EB9191F890435C9F05A230C0CE66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 09A4
Signing time: Sun 07 Sep 2025 10:00:28 +0000
Manifest this update: Sun 07 Sep 2025 10:00:28 +0000
Manifest next update: Mon 08 Sep 2025 10:00:28 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: iFQ7kWatWdufvzbm8F59UrmCEJGCGsW9jVqFCxmLKjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:b9:19:1f:89:04:35:c9:f0:5a:23:0c:0c:e6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Sep 7 10:00:28 2025 GMT
Not After : Sep 8 10:00:28 2025 GMT
Subject: CN=e4ba7dbfeef91daa777e31eb7274d63c9e8042f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:88:77:ec:5e:df:ae:52:90:99:ee:56:27:
b9:ab:1a:0f:30:e4:a6:6c:f8:41:98:23:48:82:d4:
04:08:a2:e8:a2:41:aa:78:85:dd:a0:6c:94:90:9a:
10:62:e7:e4:64:a5:a0:ad:64:fc:ab:3c:a4:c1:83:
a7:49:c0:69:ce:ea:cf:85:18:3f:32:b7:56:9a:0c:
0e:85:1e:f4:b2:59:d4:90:2c:90:1b:cc:5a:56:c8:
17:f5:15:6f:af:d4:97:4e:81:d4:05:cc:44:b2:f7:
9f:92:b3:09:6c:ba:5c:8d:62:a7:9e:ca:bf:d0:d7:
19:f0:84:f1:c4:3c:03:59:3c:d6:72:f0:2f:e0:3a:
a4:1a:ed:d8:bb:ff:22:36:af:1c:bb:4e:d3:54:f1:
70:bc:e4:82:57:af:e6:79:7e:6a:f4:ad:8b:25:a2:
b0:b1:ea:31:ae:a1:2e:5a:fd:b0:d3:7e:69:08:ed:
37:28:cc:c6:35:dd:aa:b4:dc:70:9e:77:8b:b3:91:
f6:b5:3d:2d:06:79:1c:a7:6b:0b:6b:8d:a1:2a:64:
cf:42:93:3d:cb:29:aa:64:27:a4:92:fa:ad:1c:34:
85:a1:ff:5a:35:37:69:41:38:89:6b:7f:1a:b9:27:
fe:7f:af:56:b0:ec:de:76:e3:87:04:34:71:33:ec:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:7D:BF:EE:F9:1D:AA:77:7E:31:EB:72:74:D6:3C:9E:80:42:F0
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7e:83:cf:ea:3d:86:65:61:dd:91:cf:26:51:8d:70:e5:81:
46:14:cc:f8:b1:bc:54:06:ea:09:8a:2c:f3:8f:98:a6:4f:a4:
aa:5f:0d:92:3a:b7:68:05:03:f5:f6:5f:6e:fc:bd:cf:7b:99:
ed:2d:61:ff:d0:e3:f1:04:c4:0e:9a:09:10:9b:fb:3a:3f:f2:
45:9f:d3:22:0f:3c:dd:44:1a:62:c6:85:4f:bb:a2:79:34:e9:
7d:45:75:e1:03:3a:f0:16:06:e4:7d:2a:08:1f:a0:a0:d2:c0:
c9:6c:4e:b8:4c:ed:8e:d6:65:36:10:84:c4:f2:28:0b:34:39:
6c:9a:67:6c:ee:02:a2:45:a7:43:ee:d0:1b:51:77:0b:72:8a:
22:14:ca:84:f6:08:94:d4:ab:49:9f:fa:33:62:31:b4:b9:ce:
cd:e5:0c:10:3c:96:8b:af:36:cb:ad:c5:ea:9d:2c:7e:30:13:
2d:a4:66:90:c0:9f:d6:4d:eb:c7:8b:a5:68:30:6e:78:59:d7:
43:5c:cb:4a:09:1a:34:9b:e0:cd:92:15:d3:b6:cb:93:a9:bb:
6b:ce:9b:31:e3:09:c0:2b:d7:a1:7c:75:24:f6:41:64:39:42:
83:68:9e:6d:2e:5a:d0:71:55:b2:be:2e:1d:e6:4e:d4:1e:62:
c8:8a:8e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:11 2025 by rpki-client